Infectée par vundo.dll Résolu/Fermé

Question

Bonjour,

Voila Mon antivirus(Avast) me signale un cheval de troie(vundo.dll)...
Apres avoir cherché dans ce forum,j ai fait un scan Jackthis et voilà mon rapport...


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:16:47, on 4/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\system32\oodag.exe
C:\WINDOWS\system32\svchost.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Search Settings\SearchSettings.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\lexpps.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
c:\documents and settings\autumn\local settings\application data\wokuwok.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Seekmo /fleok=1D8A83A5C4ED13799EAC6D2A1FBB39BFE4976E26CAEDA120180A196D6093 - {07AA283A-43D7-4CBE-A064-32A21112D94D} - C:\Program Files\Seekmo\bin\10.0.370.0\HostIE.dll (file missing)
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: BHO pour Compagnon Web Encarta - {955BE0B8-BC85-4CAF-856E-8E0D8B610560} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Web Companion\2007\ENCWCBAR.DLL
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\en-us\msntb.dll
O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\en-us\msntb.dll
O3 - Toolbar: Compagnon Web Encarta - {147D6308-0614-4112-89B1-31402F9B82C4} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Web Companion\2007\ENCWCBAR.DLL
O3 - Toolbar: Seekmo - {07AA283A-43D7-4CBE-A064-32A21112D94D} - C:\Program Files\Seekmo\bin\10.0.370.0\HostIE.dll (file missing)
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [Lexmark 1200 Series] "C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe"
O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Itch ford four knob] C:\Documents and Settings\All Users\Application Data	hird lies itch ford\LOCKS ACTIVE.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [wokuwok] c:\documents and settings\autumn\local settings\application data\wokuwok.exe wokuwok
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-21-528292789-866590285-122395991-1010\..\Run: [E07FXLRD_8894968] "C:\Program Files\Microsoft Encarta\Microsoft Encarta 2007 - Collection DVD\EDICT.EXE" -m (User 'Alex')
O4 - HKUS\S-1-5-21-528292789-866590285-122395991-1010\..\Run: [CURB SPAM] C:\DOCUME~1\Alex\APPLIC~1\SIZETH~1\logamok.exe (User 'Alex')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - S-1-5-21-528292789-866590285-122395991-1010 Startup: IMVU.lnk = C:\Program Files\IMVU\IMVUClient.exe (User 'Alex')
O4 - S-1-5-21-528292789-866590285-122395991-1010 User Startup: IMVU.lnk = C:\Program Files\IMVU\IMVUClient.exe (User 'Alex')
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZNxmk789YYBE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: Barre de recherche Encarta - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\Alex\Menu Démarrer\Programmes\IMVU\Run IMVU.lnk
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei/SmileyCentralFWBInitialSetup1.0.0.15-3.cab
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://support.norton.com/sp/en/us/home/current/info
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {3451DEDE-631F-421C-8127-FD793AFC6CC8} (ActiveDataInfo Class) - https://support.norton.com/sp/en/us/home/current/info
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~3\Office12\GR99D3~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: yayaaXPi - C:\WINDOWS\SYSTEM32\yayaaXPi.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Unknown owner - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe (file missing)
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\Logitech\SrvLnch\SrvLnch.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe

Utilisateur anonyme · Answer

salut ,


Telecharge malwarebytes 

-> https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

Tu l´instale; le programme va se mettre automatiquement a jour. 

Une fois a jour, le programme va se lancer; click sur l´onglet parametre, et coche la case : "Arreter internet explorer pendant la suppression". 

Click maintenant sur l´onglet recherche et coche la case : "executer un examen complet". 

Puis click sur "rechercher". 

Laisse le scanner le pc... 

Si des elements on ete trouvés > click sur supprimer la selection. 

si il t´es demandé de redemarrer > click sur "yes". 

A la fin un rapport va s´ouvrir; sauvegarde le de maniere a le retrouver en vu de le poster sur le forum. 

Copie et colle le rapport stp.

ps : les rapport sont aussi rangé dans l onglet rapport/log

Autumn1608 · Answer

Pfiiiiiouuuuuu ce fut long lol...

Voici le rapport : 


Malwarebytes' Anti-Malware 1.14
Version de la base de données: 826

23:24:07 4/06/2008
mbam-log-6-4-2008 (23-24-07).txt

Type de recherche: Examen complet (C:\|)
Eléments examinés: 252689
Temps écoulé: 53 minute(s), 29 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 2
Clé(s) du Registre infectée(s): 136
Valeur(s) du Registre infectée(s): 6
Elément(s) de données du Registre infecté(s): 1
Dossier(s) infecté(s): 7
Fichier(s) infecté(s): 31

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
C:\WINDOWS\system32\pmnoPfeb.dll (Trojan.Vundo) -> Unloaded module successfully.
C:\WINDOWS\system32\yayaaXPi.dll (Trojan.Vundo) -> Unloaded module successfully.

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\Interface\{00b498e3-0543-4624-8fde-1caf89a80550} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\hbcoresrv.dynamicprop (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\hbcoresrv.dynamicprop.1 (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{1e0004ec-5df0-48c7-a8f0-fbb0488a3d94} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{460ac4db-b0de-4626-a0f0-175dd84dcb9b} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars\{7e66936c-fea0-4984-ad26-7b6661ac5b2e} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{90b5a95a-afd5-4d11-b9bd-a69d53d22226} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{e678cbdc-d022-41f5-ab21-c43dfd9dfc3e} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{1c1793e0-1034-4cac-837d-aa545f6961bf} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{4331ec56-0aab-499e-8757-dd2ee44ad671} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{5d16197a-1eaa-45af-b29a-69f1aa055e87} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{8d5c4ec6-af8e-4b85-ba27-64babe410510} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{b671426c-5c1a-48ac-9652-bc9402b1c404} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{21447c90-6ec1-4fc1-9379-bd515008aedb} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{32c97a37-e2b8-4097-9330-5f3e1125e181} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{b0c3de1b-e3ff-4dd0-9229-f452cf9c678e} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{d2d94732-a74d-433c-98f7-9ed740e82ae9} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{dfd5d79b-ef2f-4a51-9821-5b469f05262e} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{00b77587-be1b-4201-b8e9-09fcf50ab771} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{067c6a37-72ea-4437-863a-5be20c246f3c} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\hostie.bho (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\hostie.bho.1 (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{07aa283a-43d7-4cbe-a064-32a21112d94d} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{07aa283a-43d7-4cbe-a064-32a21112d94d} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{34e29700-0d13-46aa-b9a5-ace68e21a091} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{3661af2d-c27b-499c-9bcf-66c8502a3806} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{99123ac9-7dda-4c82-b252-44c2804bf392} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{08755390-f46d-4d09-968c-3430166b3189} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{5a4737a8-b92a-4e54-970e-c2891d98ce3f} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{ace99e77-aa2a-43c2-8c9d-caf2020fdf2b} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{e0fb1610-b25b-49f6-be20-751b2f230e6f} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{087c4054-0a2b-4f35-b0db-bed3e21650f4} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{3f0915b8-b238-4c2d-ad1e-60db1e14d27a} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{ea58c2ea-be26-49dd-9b9a-c8e4e5ca7791} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{fca28ac5-c1e1-4d67-a5ae-c44d6c374d9f} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{0923208c-e259-4ed5-a778-cb607da350ad} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{1230cf51-6bc4-4a23-b3f1-c7cf0afed619} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{1a2af056-1fe1-47ca-993d-5d09d18e674e} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{4e8b851b-05b0-4baf-b24d-d0dfe88dded3} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{50c3e2b3-4fd7-4cb9-91f9-641a6e6b3689} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{62b0b239-f9ac-4a5b-bfae-62c7a23f7627} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{726f0ab9-b842-4ae4-90c7-230e233e6a99} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{b9cc2b92-5611-453f-8381-8b6f72d9c0b8} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{c4543e64-1498-410d-8e72-4744eea99ab9} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{229d2451-a617-4b30-b5e8-8138694240cb} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{2b81f920-6660-4f76-93bf-b1c67bf5d1a0} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{49155dae-c471-40fa-98ee-b2b3cad115ce} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{4d783385-0dda-4188-a529-c97dc3d67cbd} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\wallpaper.wallpapermanager (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\wallpaper.wallpapermanager.1 (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{54a3f8b7-228e-4ed8-895b-de832b2c3959} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{54a3f8b7-228e-4ed8-895b-de832b2c3959} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT	oolbar.htmlmenuui (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT	oolbar.htmlmenuui.1 (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{5b2e150d-4c8a-40e4-8c36-dd9c02771c67} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT	oolbar.toolbarctl (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT	oolbar.toolbarctl.1 (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{627d894a-8a77-416e-b522-432eaf2c818e} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{6e10479b-31e8-4a3b-81b1-ddaf39097f19} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\srv.coreservices (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\srv.coreservices.1 (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{7138f250-5b72-48dd-adfb-9a83b429dd9e} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\hostol.mailanim (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\hostol.mailanim.1 (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{8971cb48-9fca-445a-be77-e8e8a4cc9df7} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\hbmain.commband (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\hbmain.commband.1 (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{93b0fa7b-50f6-41b4-ac7e-612a72ce8c3c} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{93b0fa7b-50f6-41b4-ac7e-612a72ce8c3c} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{e420a65f-9984-4b8c-9fa9-1ed69d3b0a13} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{9720de03-5820-4059-b4a4-639d5e52bd09} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\coresrv.lfgax (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\coresrv.lfgax.1 (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{b0cb585f-3271-4e42-88d9-ae5c9330d554} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{b247f5bf-bd9d-4ecd-8fc1-365f36a1fda1} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\hostol.webmailsend (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\hostol.webmailsend.1 (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{b88e4484-3ff6-4ea9-815b-a54fe20d4387} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{bbbfb891-98ae-4678-86f3-bd5a2eed86c9} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{bf1bf02c-5a86-4ecf-adac-472c54c4d21e} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\instie.hbinstobj (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\instie.hbinstobj.1 (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{bfc08cff-c737-4433-bd5a-0ee7efcfee54} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{c23fa5a4-1fea-419f-8b14-f7465df062bc} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{ccc6e232-aa4c-4813-a019-9c14b27776b6} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\coresrv.coreservices (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\coresrv.coreservices.1 (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{d2221ccb-f2bb-4858-aad4-57c754153603} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\hbr.hbmain (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\hbr.hbmain.1 (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{ea0b6a1a-6a59-4a58-9c41-9966504898a5} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{eddbb5ee-bb64-4bfc-9dbe-e7c85941335b} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\Microsoft\Installer\Products\568267acfc5644dab06f058006ddbae3 (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{00a6faf6-072e-44cf-8957-5838f569a31d} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{07b18eab-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{07b18eab-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{1e0de227-5ce4-4ea3-ab0c-8b03e1aa76bc} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{25560540-9571-4d7b-9389-0f166788785a} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{2eff3cf7-99c1-4c29-bc2b-68e057e22340} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3dc201fb-e9c9-499c-a11f-23c360d7c3f8} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3e720452-b472-4954-b7aa-33069eb53906} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{53ced2d0-5e9a-4761-9005-648404e6f7e5} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{63d0ed2c-b45b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{7473d292-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{7473d294-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7473d294-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{7473d296-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{98d9753d-d73b-42d5-8c85-4469cda897ab} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{9afb8248-617f-460d-9366-d71cdeda3179} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\screensavercontrol.screensaverinstaller (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\screensavercontrol.screensaverinstaller.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9ff05104-b030-46fc-94b8-81276e4e27df} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{a6573479-9075-4a65-98a6-19fd29cf7374} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{adb01e81-3c79-4272-a0f1-7b2be7a782dc} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{e79dfbca-5697-4fbd-94e5-5b2a9c7c1612} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{2763e333-b168-41a0-a112-d35f96f410c0} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{914a8f99-38e4-47ec-b875-2b0653516030} (Adware.Seekmo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{914a8f99-38e4-47ec-b875-2b0653516030} (Adware.Seekmo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1f158a1e-a687-4a11-9679-b3ac64b86a1c} (Adware.Seekmo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{e313f5dc-cfe7-4568-84a4-c76653547571} (Adware.Seekmo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\internetgamebox (Adware.EGDAccess) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\Seekmo (Adware.Seekmo) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\seekmosa (Adware.Seekmo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\seekmosa (Adware.Seekmo) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{1808a105-5802-4d8a-87b4-3ca66f604728} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\yayaaxpi (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FCOVM (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemoveRP (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\software\Seekmo (Adware.Seekmo) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\SpamBlockerUtility (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\sbtv (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\MIME\Database\Content Type\application/x-f3embed (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\MyWebSearch (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\Fun Web Products (Adware.MyWebSearch) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{07aa283a-43d7-4cbe-a064-32a21112d94d} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{07aa283a-43d7-4cbe-a064-32a21112d94d} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{1808a105-5802-4d8a-87b4-3ca66f604728} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\&Search\ (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media\WMSDK\Sources\f3PopularScreensavers (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform\FunWebProducts (Adware.MyWebSearch) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\System (Rootkit.DNSChanger) -> Data: kdonl.exe -> Quarantined and deleted successfully.

Dossier(s) infecté(s):
C:\Program Files\InternetGameBox (Adware.EGDAccess) -> Quarantined and deleted successfully.
C:\Program Files\InternetGameBoxessources (Adware.EGDAccess) -> Quarantined and deleted successfully.
C:\Program Files\InternetGameBox\skins (Adware.EGDAccess) -> Quarantined and deleted successfully.
C:\Program Files\InternetGameBoxessources\favoris (Adware.EGDAccess) -> Quarantined and deleted successfully.
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility_Icons (Adware.Hotbar) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\SeekmoSA (Adware.Seekmo) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\2ACA5CC3-0F83-453D-A079-1076FE1A8B65 (Adware.Seekmo) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
C:\Program Files\mozilla.org\Mozillaegxpcom.exe (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{884ABD06-6DEA-422C-82D8-E19330560632}\RP349\A0183411.exe (Adware.Hotbar) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{884ABD06-6DEA-422C-82D8-E19330560632}\RP359\A0185967.EXE (Adware.MyWeb.FunWeb) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{884ABD06-6DEA-422C-82D8-E19330560632}\RP359\A0185969.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{884ABD06-6DEA-422C-82D8-E19330560632}\RP359\A0185971.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{884ABD06-6DEA-422C-82D8-E19330560632}\RP359\A0185972.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{884ABD06-6DEA-422C-82D8-E19330560632}\RP359\A0185973.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{884ABD06-6DEA-422C-82D8-E19330560632}\RP359\A0185981.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\InternetGameBox\InternetGameBox.exe (Adware.EGDAccess) -> Quarantined and deleted successfully.
C:\Program Files\InternetGameBox\language (Adware.EGDAccess) -> Quarantined and deleted successfully.
C:\Program Files\InternetGameBox\uninst.exe (Adware.EGDAccess) -> Quarantined and deleted successfully.
C:\Program Files\InternetGameBoxessources\AttenteOff.html (Adware.EGDAccess) -> Quarantined and deleted successfully.
C:\Program Files\InternetGameBoxessources\AttenteOn.html (Adware.EGDAccess) -> Quarantined and deleted successfully.
C:\Program Files\InternetGameBoxessources\configv2_en.xml (Adware.EGDAccess) -> Quarantined and deleted successfully.
C:\Program Files\InternetGameBoxessources\configv2_es.xml (Adware.EGDAccess) -> Quarantined and deleted successfully.
C:\Program Files\InternetGameBoxessources\configv2_fr.xml (Adware.EGDAccess) -> Quarantined and deleted successfully.
C:\Program Files\InternetGameBoxessources\favoris\defaultv2.swf (Adware.EGDAccess) -> Quarantined and deleted successfully.
C:\Program Files\InternetGameBox\skins\skinv2.skn (Adware.EGDAccess) -> Quarantined and deleted successfully.
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility_Icons\Jamster2.ico (Adware.Hotbar) -> Quarantined and deleted successfully.
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility_Icons\Registryrepair.ico (Adware.Hotbar) -> Quarantined and deleted successfully.
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility_Icons\wallpapere1.ico (Adware.Hotbar) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\SeekmoSA\SeekmoSA.dat (Adware.Seekmo) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\SeekmoSA\SeekmoSAAbout.mht (Adware.Seekmo) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\SeekmoSA\SeekmoSAau.dat (Adware.Seekmo) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\SeekmoSA\SeekmoSAEULA.mht (Adware.Seekmo) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\SeekmoSA\SeekmoSA_kyf.dat (Adware.Seekmo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\pmnoPfeb.dll (Trojan.Vundo) -> Delete on reboot.
C:\WINDOWS\system32\urqQHWMD.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\efcYRllL.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\yayaaXPi.dll (Trojan.Vundo) -> Delete on reboot.
C:\WINDOWS\system32
vs2.inf (Adware.EGDAccess) -> Quarantined and deleted successfully.

Utilisateur anonyme · Answer

ok réouvre malewarebyte
va sur quarantaine
supprime tout

Télécharge clean.zip, de Malekal 
http://www.malekal.com/download/clean.zip 



(1) Dézippe-le sur ton bureau (clic droit / extraire tout), tu dois obtenir un dossier clean. 

(2) Ouvre le dossier clean qui se trouve sur ton bureau, et double-clic sur clean.cmd 

une fenêtre noire va apparaître pendant un instant, laisse la ouverte. 

(3) Choisis l'option 1 puis patiente 
Poste le rapport obtenu 


pour retrouver le rapport : double clique sur > C > double clique sur " rapport_clean txt. 
et copie/colle le sur ta prochaine réponse . 

Ne passe pas à l'option 2 sans notre avis ! la suite demain bonne nuit

Autumn1608 · Answer

Voici ce que ca me dit : 

jeu. 05/06/2008 a 13:03:28,42 
 
*** Recherche des fichiers dans C: 
 
*** Recherche des fichiers dans C:\WINDOWS\ 
 
*** Recherche des fichiers dans C:\WINDOWS\system32 
C:\WINDOWS\system32\bdod.bin FOUND 
"C:\Documents and Settings\autumn\Application Data\ezpinst.exe" FOUND 
 
*** Recherche des fichiers dans C:\Program Files 
"C:\Program Files\mozilla firefox\components
pclntax.xpt" FOUND 
"C:\Program Files\PartyGaming\" FOUND 
Veuillez svp envoyer le fichier C:\upload_moi_PAIX2007.tar.gz a l'adresse http://upload.malekal.com 

Mais quand j envoie le fichier,ca me met fichier invalide et la fenetre noire ne fait plus rien...

Utilisateur anonyme · Answer

-> Redémarre en mode sans échec : 

Comment redémarrer en mode sans echec? 

Tu redemarre le pc et tapote la touche F8 des le début de l allumage sans t´arrêter. 
Une fenêtre sur fond noir va s’ouvrir, tu te déplaces avec les flèches du clavier sur démarrer en mode sans échec puis tape entrée. 
Une fois sur le bureau si il n y a pas toutes les couleurs et autres c´est normal! 
Ps : si F8 ne marche pas utilise la touche F5. 

-> Tuto : http://forum.telecharger.01net.com/forum/ 

-> Une fois en mode sans echec, ouvre le dossier que tu auvais crée et click sur clean.cmd et choisis l'option 2. 

-> Redémarre normalement 


ensuite :

Démarrer > executer > ' services.msc ' , 

- Clic droit sur le service cité - Boonty games 
- propriétés 
- et dans "type de démarrage" et mets le sur « désactivé ». 
- Ensuite si le "Status du service" est sur "Démarré" faire : « arrêté » 

Tutorial : https://www.zebulon.fr/dossiers/windows/31-services.html 

2) Supprime le dossier : 

Va dans "C:\program files\fichiers communs\" trouve & supprime le dossier " boonty shared " 


ensuite refais un scan hijackthis et poste le rapport + celui de clean option 2

Autumn1608 · Answer

Rapport clean : 

Script execute en mode sans echec 
Rapport clean par Malekal_morte - http://www.malekal.com 
Script execute en mode sans echec jeu. 05/06/2008 a 13:36:45,51 

Microsoft Windows XP [version 5.1.2600]
 
*** Suppression des fichiers dans C: 
 
*** Suppression des fichiers dans C:\WINDOWS\ 
 
*** Suppression des fichiers dans C:\WINDOWS\system32 
tentative de suppression de C:\WINDOWS\system32\bdod.bin 
tentative de suppression de "C:\Documents and Settings\autumn\Application Data\ezpinst.exe" 
 
*** Suppression des fichiers dans C:\Program Files 
tentative de suppression de "C:\Program Files\mozilla firefox\components
pclntax.xpt" 
tentative de suppression de "C:\Program Files\PartyGaming\" 
 
*** Suppression des clefs du registre effectuee.. 
*** Fin du rapport ! 

Rapport Hijackthis : 

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:53:11, on 5/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Search Settings\SearchSettings.exe
C:\WINDOWS\system32\oodag.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ctfmon.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\documents and settings\autumn\local settings\application data\wokuwok.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: BHO pour Compagnon Web Encarta - {955BE0B8-BC85-4CAF-856E-8E0D8B610560} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Web Companion\2007\ENCWCBAR.DLL
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O2 - BHO: (no name) - {BA9A5E2B-606B-49CE-A429-FF6E66367B70} - C:\WINDOWS\system32\pmnoPfeb.dll (file missing)
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\en-us\msntb.dll
O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\en-us\msntb.dll
O3 - Toolbar: Compagnon Web Encarta - {147D6308-0614-4112-89B1-31402F9B82C4} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Web Companion\2007\ENCWCBAR.DLL
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [Lexmark 1200 Series] "C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe"
O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Itch ford four knob] C:\Documents and Settings\All Users\Application Data	hird lies itch ford\LOCKS ACTIVE.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [wokuwok] c:\documents and settings\autumn\local settings\application data\wokuwok.exe wokuwok
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: Barre de recherche Encarta - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\Alex\Menu Démarrer\Programmes\IMVU\Run IMVU.lnk
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://support.norton.com/sp/en/us/home/current/info
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {3451DEDE-631F-421C-8127-FD793AFC6CC8} (ActiveDataInfo Class) - https://support.norton.com/sp/en/us/home/current/info
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~3\Office12\GR99D3~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Unknown owner - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe (file missing)
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\Logitech\SrvLnch\SrvLnch.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe

Utilisateur anonyme · Answer

Télécharge combofix : http://download.bleepingcomputer.com/sUBs/ComboFix.exe 


-> Double clique combofix.exe. 
-> Tape sur la touche 1 (Yes) pour démarrer le scan. 
-> Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse. 

NOTE : Le rapport se trouve également ici : C:\Combofix.txt 

Avant d'utiliser ComboFix : 

-> Déconnecte toi d'internet et referme les fenêtres de tous les programmes en cours. 

-> Désactive provisoirement et seulement le temps de l'utilisation de ComboFix, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent géner fortement la procédure de recherche et de nettoyage de l'outil. 

Une fois fait, sur ton bureau double-clic sur Combofix.exe. 

- Répond oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc. 

/!\ Pendant la durée de cette étape, ne te sert pas du pc et n'ouvre aucun programmes. 

- En fin de scan il est possible que ComboFix ait besoin de redemarrer le pc pour finaliser la désinfection\recherche, laisses-le faire. 

- Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\Combofix.txt) 

-> Réactive la protection en temps réel de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet. 

-> Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message. 

-> Tutoriel https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix

Autumn1608 · Answer

ComboFix 08-06-04.5 - autumn 2008-06-05 14:20:19.1 - NTFSx86
Microsoft Windows XP Édition familiale  5.1.2600.2.1252.1.1036.18.146 [GMT 2:00]
Endroit: C:\Documents and Settings\autumn\Bureau\ComboFix.exe
 * Création d'un nouveau point de restauration

[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
.

((((((((((((((((((((((((((((((((((((   Autres suppressions   ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\InternetGameBox
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\InternetGameBox\Conditions générales.url
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\InternetGameBox\Confidentialité.url
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\InternetGameBox\Désinstaller.lnk
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\InternetGameBox\InternetGameBox.lnk
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\InternetGameBox\Website.url
C:\Documents and Settings\autumn\Application Data\SpamBlocker
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\eskin\empty_bg_st.htm
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\eskin\FileManager.txt
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\SpamBlockerUtility.log
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\SpamBlockerUtility_1173480996.log
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\SpamBlockerUtility_1176678441.log
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]30104_emte10_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]30104_emte11_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]30104_emte12_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]30104_emte13_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]30104_emte14_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]30104_emte19_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]30104_emte20_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]30104_emte21_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]30104_emte9_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]30203lib_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]33102angel_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]33102bigluf_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]33102bigsmile_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]33102birthday_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]33102cheers_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]33102flo_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]33102good_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]33102jump_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]33102king_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]33102lough_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]33102luf_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]33102smile_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]33102smiled_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]33102sor_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]33102thanx_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]33102uhu_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]40103ahh_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]40103wow_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]40104_emi2_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]42102_1134_112_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]50103big_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]50103gig_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]50103hm_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]50103nomail_emoti_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]50103norm_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]60104_ema15_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]60104_ema16_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]60104_ema17_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]60104_ema18_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]60104_ema19_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]60104_ema20_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]60104_ema21_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]60104_ema24_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]60104_ema25_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]60104_ema26_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]60104_ema30_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]60104_ema33_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]60104_ema34_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]62802hippi_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]62802jumpie_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]80402argh_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]80402oops_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]80402ouch_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]82502no_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]82502yes_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\110103_boring1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\110103_confused_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\110103_crying_ugly_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\110103_fantastic_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\110103_feel_better_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\110103_gimme_break_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\110103_heehee_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\110103_hlopaet_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\110103_ign_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\110103_lol_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\110103_no_comment_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\110103_peace_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\110103_smashing_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\110103_talk2thehand_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\block_sm.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\block_sm2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\block_smli.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\block_smli2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\blocked.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\blocked2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\btn_add-but.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\btn_back-but.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\btn_left_cut_enabled_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\btn_left_enabled_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\btn_left_pressed_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\btn_middle_enabled_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\btn_middle_pressed_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\btn_right_cut_enabled_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\btn_right_enabled_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\btn_right_pressed_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\business_promo.htm
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\buttondir.txt
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\components.cdf
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\css_cattree.css
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\css_flashpreview.css
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\css2_main.css
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\css2_pagingmodule.css
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\css2_topbuttons.css
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\delete.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\edit_clear_sound.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\edit_fs.htm
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\edit_select.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-511724-549108.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-511724-9595.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-backgrounds.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-bcards.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-ecards.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-emoticons.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-estationery.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-funny.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-help.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-images.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-info.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-more.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-my.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-new.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-new2.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-options.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-people.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-photo.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-SpamBlocked.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-tell.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-temp.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-text.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-voice.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def.cdf
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-premium-email-premium.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-t7-bg.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\estatationery.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\flashpatch.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\flashpreview.htm
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\fs3.htm
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\hotbar_promo.htm
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\icon_checked_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\icon_close_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\icon_close_pressed_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\icon_edit_preview.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\icon_edit_send.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\icon_flash_preview.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\icon_recently_used.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\icon_remove_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\icon_remove_pressed_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\icon_sand-clock2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\icon_tell_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\icon_tell_pressed_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\icon_tree_null.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\icon_unchecked_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\icon_unchecked_pressed_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\img_barlayout.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\img_barlayout2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\img_barlayout4.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\img_corner_left.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\img_local_logo.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\js2_basetemplate.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\js2_hbgroups.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\js2_hbobject3.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\js2_hbobjectset3.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\js2_hotbarwrapper.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\js2_iteratorsandreaders3nf.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\js2_pagingmoduleobj3.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\js2_texts3.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\js2_xmltree3nf.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\layout.cdf
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\linkpathlegal.txt
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\n.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\nav_b_2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\nav_bb_2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\nav_f_2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\nav_ff_2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\progress.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\s_icons_buttons.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\searchbtn.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\submit.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\t6_bg.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\tab_bg.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\tab_bga.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\tab_bgia.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\tab_l.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\tab_la.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\tab_lia.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\tab_r.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\tab_ra.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\tab_ria.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\tree_dots.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\tree_minus.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\tree_plus.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\treedata_animations.xml
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\treedata_backgrounds.xml
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\treedata_ecards.xml
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\treedata_emoticons.xml
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\treedata_notifiers.xml
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\treedata_text.xml
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]30104_emte10_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]30104_emte11_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]30104_emte12_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]30104_emte13_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]30104_emte14_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]30104_emte19_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]30104_emte20_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]30104_emte21_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]30104_emte9_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]30203lib_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]33102angel_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]33102bigluf_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]33102bigsmile_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]33102birthday_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]33102cheers_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]33102flo_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]33102good_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]33102jump_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]33102king_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]33102lough_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]33102luf_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]33102smile_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]33102smiled_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]33102sor_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]33102thanx_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]33102uhu_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]40103ahh_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]40103wow_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]40104_emi2_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]42102_1134_112_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]50103big_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]50103gig_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]50103hm_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]50103nomail_emoti_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]50103norm_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]60104_ema15_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]60104_ema16_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]60104_ema17_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]60104_ema18_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]60104_ema19_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]60104_ema20_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]60104_ema21_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]60104_ema24_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]60104_ema25_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]60104_ema26_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]60104_ema30_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]60104_ema33_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]60104_ema34_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]62802hippi_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]62802jumpie_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]80402argh_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]80402oops_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]80402ouch_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]82502no_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]82502yes_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\110103_boring1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\110103_confused_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\110103_crying_ugly_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\110103_fantastic_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\110103_feel_better_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\110103_gimme_break_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\110103_heehee_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\110103_hlopaet_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\110103_ign_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\110103_lol_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\110103_no_comment_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\110103_peace_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\110103_smashing_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\110103_talk2thehand_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\block_sm.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\block_sm2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\block_smli.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\block_smli2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\blocked.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\blocked2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\btn_add-but.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\btn_back-but.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\btn_left_cut_enabled_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\btn_left_enabled_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\btn_left_pressed_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\btn_middle_enabled_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\btn_middle_pressed_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\btn_right_cut_enabled_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\btn_right_enabled_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\btn_right_pressed_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\business_promo.htm
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\buttondir.txt
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\components.cdf
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\css_cattree.css
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\css_flashpreview.css
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\css2_main.css
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\css2_pagingmodule.css
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\css2_topbuttons.css
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\delete.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\edit_clear_sound.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\edit_fs.htm
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\edit_select.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-511724-549108.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-511724-9595.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-backgrounds.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-bcards.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-ecards.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-emoticons.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-estationery.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-funny.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-help.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-images.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-info.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-more.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-my.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-new.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-new2.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-options.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-people.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-photo.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-SpamBlocked.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-tell.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-temp.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-text.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-voice.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def.cdf
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-premium-email-premium.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-t7-bg.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\estatationery.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\flashpatch.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\flashpreview.htm
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\fs3.htm
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\hotbar_promo.htm
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\icon_checked_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\icon_close_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\icon_close_pressed_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\icon_edit_preview.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\icon_edit_send.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\icon_flash_preview.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\icon_recently_used.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\icon_remove_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\icon_remove_pressed_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\icon_sand-clock2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\icon_tell_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\icon_tell_pressed_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\icon_tree_null.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\icon_unchecked_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\icon_unchecked_pressed_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\img_barlayout.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\img_barlayout2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\img_barlayout4.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\img_corner_left.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\img_local_logo.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\js2_basetemplate.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\js2_hbgroups.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\js2_hbobject3.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\js2_hbobjectset3.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\js2_hotbarwrapper.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\js2_iteratorsandreaders3nf.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\js2_pagingmoduleobj3.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\js2_texts3.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\js2_xmltree3nf.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\layout.cdf
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\linkpathlegal.txt
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\n.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\nav_b_2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\nav_bb_2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\nav_f_2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\nav_ff_2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\progress.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\s_icons_buttons.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\searchbtn.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\submit.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\t6_bg.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\tab_bg.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\tab_bga.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\tab_bgia.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\tab_l.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\tab_la.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\tab_lia.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\tab_r.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\tab_ra.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\tab_ria.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\tree_dots.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\tree_minus.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\tree_plus.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\treedata_animations.xml
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\treedata_backgrounds.xml
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\treedata_ecards.xml
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\treedata_emoticons.xml
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\treedata_notifiers.xml
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\treedata_text.xml
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\DownLoad\business_promo.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\DownLoad\buttondir.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\DownLoad\code.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\DownLoad\email-def.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\DownLoad\email-t7-bg.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\DownLoad\hotbar_promo.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\DownLoad\images.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\DownLoad\layout.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\DownLoad\linkpathlegal.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\DownLoad\localcontent.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\DownLoad\progress.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\DownLoad\s_icons_buttons.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\DownLoad\t6_bg.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\DownLoad\treexml.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]30104_emte10_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]30104_emte11_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]30104_emte12_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]30104_emte13_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]30104_emte14_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]30104_emte19_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]30104_emte20_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]30104_emte21_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]30104_emte9_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]30203lib_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]33102angel_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]33102bigluf_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]33102bigsmile_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]33102birthday_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]33102cheers_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]33102flo_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]33102good_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]33102jump_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]33102king_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]33102lough_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]33102luf_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]33102smile_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]33102smiled_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]33102sor_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]33102thanx_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]33102uhu_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]40103ahh_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]40103wow_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]40104_emi2_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]42102_1134_112_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]50103big_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]50103gig_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]50103hm_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]50103nomail_emoti_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]50103norm_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]60104_ema15_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]60104_ema16_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]60104_ema17_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]60104_ema18_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]60104_ema19_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]60104_ema20_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]60104_ema21_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]60104_ema24_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]60104_ema25_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]60104_ema26_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]60104_ema30_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]60104_ema33_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]60104_ema34_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]62802hippi_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]62802jumpie_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]80402argh_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]80402oops_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]80402ouch_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]82502no_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]82502yes_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\110103_boring1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\110103_confused_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\110103_crying_ugly_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\110103_fantastic_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\110103_feel_better_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\110103_gimme_break_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\110103_heehee_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\110103_hlopaet_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\110103_ign_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\110103_lol_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\110103_no_comment_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\110103_peace_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\110103_smashing_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\110103_talk2thehand_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\block_sm.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\block_sm2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\block_smli.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\block_smli2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\blocked.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\blocked2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\btn_add-but.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\btn_back-but.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\btn_left_cut_enabled_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\btn_left_enabled_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\btn_left_pressed_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\btn_middle_enabled_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\btn_middle_pressed_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\btn_right_cut_enabled_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\btn_right_enabled_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\btn_right_pressed_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\business_promo.htm
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\buttondir.txt
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\components.cdf
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\css_cattree.css
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\css_flashpreview.css
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\css2_main.css
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\css2_pagingmodule.css
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\css2_topbuttons.css
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\delete.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\edit_clear_sound.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\edit_fs.htm
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\edit_select.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-511724-512971.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-511724-512972.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-511724-549108.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-511724-589306.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-511724-591943.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-511724-592579.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-511724-598579.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-511724-603763.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-511724-9595.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-email-backgrounds.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-email-bcards.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-email-ecards.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-email-emoticons.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-email-estationery.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-email-funny.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-email-help.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-email-images.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-email-info.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-email-more.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-email-my.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-email-new.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-email-new2.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-email-options.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-email-people.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-email-photo.mnu
C:\Documents and Settings\autumn\Application Da

Utilisateur anonyme · Answer

re 

il me faut le suite du rapport combofix + un nouveau rapport hijackthis stp

Autumn1608 · Answer

desolee je n avais pas vu que c etait coupe.


ComboFix 08-06-04.5 - autumn 2008-06-05 14:20:19.1 - NTFSx86
Microsoft Windows XP Édition familiale  5.1.2600.2.1252.1.1036.18.146 [GMT 2:00]
Endroit: C:\Documents and Settings\autumn\Bureau\ComboFix.exe
 * Création d'un nouveau point de restauration

[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
.

((((((((((((((((((((((((((((((((((((   Autres suppressions   ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\InternetGameBox
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\InternetGameBox\Conditions générales.url
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\InternetGameBox\Confidentialité.url
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\InternetGameBox\Désinstaller.lnk
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\InternetGameBox\InternetGameBox.lnk
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\InternetGameBox\Website.url
C:\Documents and Settings\autumn\Application Data\SpamBlocker
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\eskin\empty_bg_st.htm
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\eskin\FileManager.txt
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\SpamBlockerUtility.log
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\SpamBlockerUtility_1173480996.log
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\SpamBlockerUtility_1176678441.log
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]30104_emte10_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]30104_emte11_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]30104_emte12_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]30104_emte13_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]30104_emte14_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]30104_emte19_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]30104_emte20_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]30104_emte21_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]30104_emte9_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]30203lib_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]33102angel_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]33102bigluf_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]33102bigsmile_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]33102birthday_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]33102cheers_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]33102flo_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]33102good_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]33102jump_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]33102king_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]33102lough_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]33102luf_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]33102smile_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]33102smiled_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]33102sor_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]33102thanx_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]33102uhu_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]40103ahh_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]40103wow_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]40104_emi2_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]42102_1134_112_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]50103big_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]50103gig_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]50103hm_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]50103nomail_emoti_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]50103norm_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]60104_ema15_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]60104_ema16_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]60104_ema17_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]60104_ema18_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]60104_ema19_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]60104_ema20_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]60104_ema21_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]60104_ema24_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]60104_ema25_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]60104_ema26_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]60104_ema30_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]60104_ema33_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]60104_ema34_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]62802hippi_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]62802jumpie_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]80402argh_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]80402oops_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]80402ouch_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]82502no_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]82502yes_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\110103_boring1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\110103_confused_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\110103_crying_ugly_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\110103_fantastic_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\110103_feel_better_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\110103_gimme_break_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\110103_heehee_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\110103_hlopaet_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\110103_ign_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\110103_lol_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\110103_no_comment_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\110103_peace_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\110103_smashing_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\110103_talk2thehand_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\block_sm.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\block_sm2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\block_smli.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\block_smli2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\blocked.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\blocked2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\btn_add-but.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\btn_back-but.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\btn_left_cut_enabled_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\btn_left_enabled_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\btn_left_pressed_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\btn_middle_enabled_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\btn_middle_pressed_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\btn_right_cut_enabled_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\btn_right_enabled_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\btn_right_pressed_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\business_promo.htm
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\buttondir.txt
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\components.cdf
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\css_cattree.css
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\css_flashpreview.css
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\css2_main.css
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\css2_pagingmodule.css
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\css2_topbuttons.css
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\delete.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\edit_clear_sound.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\edit_fs.htm
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\edit_select.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-511724-549108.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-511724-9595.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-backgrounds.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-bcards.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-ecards.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-emoticons.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-estationery.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-funny.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-help.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-images.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-info.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-more.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-my.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-new.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-new2.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-options.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-people.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-photo.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-SpamBlocked.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-tell.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-temp.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-text.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-voice.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def.cdf
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-premium-email-premium.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-t7-bg.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\estatationery.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\flashpatch.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\flashpreview.htm
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\fs3.htm
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\hotbar_promo.htm
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\icon_checked_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\icon_close_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\icon_close_pressed_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\icon_edit_preview.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\icon_edit_send.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\icon_flash_preview.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\icon_recently_used.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\icon_remove_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\icon_remove_pressed_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\icon_sand-clock2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\icon_tell_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\icon_tell_pressed_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\icon_tree_null.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\icon_unchecked_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\icon_unchecked_pressed_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\img_barlayout.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\img_barlayout2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\img_barlayout4.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\img_corner_left.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\img_local_logo.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\js2_basetemplate.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\js2_hbgroups.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\js2_hbobject3.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\js2_hbobjectset3.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\js2_hotbarwrapper.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\js2_iteratorsandreaders3nf.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\js2_pagingmoduleobj3.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\js2_texts3.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\js2_xmltree3nf.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\layout.cdf
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\linkpathlegal.txt
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\n.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\nav_b_2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\nav_bb_2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\nav_f_2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\nav_ff_2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\progress.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\s_icons_buttons.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\searchbtn.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\submit.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\t6_bg.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\tab_bg.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\tab_bga.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\tab_bgia.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\tab_l.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\tab_la.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\tab_lia.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\tab_r.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\tab_ra.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\tab_ria.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\tree_dots.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\tree_minus.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\tree_plus.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\treedata_animations.xml
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\treedata_backgrounds.xml
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\treedata_ecards.xml
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\treedata_emoticons.xml
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\treedata_notifiers.xml
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\treedata_text.xml
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]30104_emte10_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]30104_emte11_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]30104_emte12_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]30104_emte13_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]30104_emte14_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]30104_emte19_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]30104_emte20_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]30104_emte21_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]30104_emte9_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]30203lib_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]33102angel_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]33102bigluf_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]33102bigsmile_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]33102birthday_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]33102cheers_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]33102flo_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]33102good_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]33102jump_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]33102king_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]33102lough_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]33102luf_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]33102smile_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]33102smiled_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]33102sor_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]33102thanx_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]33102uhu_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]40103ahh_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]40103wow_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]40104_emi2_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]42102_1134_112_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]50103big_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]50103gig_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]50103hm_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]50103nomail_emoti_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]50103norm_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]60104_ema15_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]60104_ema16_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]60104_ema17_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]60104_ema18_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]60104_ema19_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]60104_ema20_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]60104_ema21_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]60104_ema24_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]60104_ema25_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]60104_ema26_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]60104_ema30_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]60104_ema33_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]60104_ema34_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]62802hippi_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]62802jumpie_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]80402argh_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]80402oops_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]80402ouch_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]82502no_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]82502yes_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\110103_boring1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\110103_confused_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\110103_crying_ugly_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\110103_fantastic_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\110103_feel_better_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\110103_gimme_break_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\110103_heehee_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\110103_hlopaet_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\110103_ign_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\110103_lol_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\110103_no_comment_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\110103_peace_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\110103_smashing_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\110103_talk2thehand_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\block_sm.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\block_sm2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\block_smli.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\block_smli2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\blocked.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\blocked2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\btn_add-but.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\btn_back-but.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\btn_left_cut_enabled_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\btn_left_enabled_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\btn_left_pressed_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\btn_middle_enabled_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\btn_middle_pressed_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\btn_right_cut_enabled_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\btn_right_enabled_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\btn_right_pressed_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\business_promo.htm
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\buttondir.txt
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\components.cdf
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\css_cattree.css
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\css_flashpreview.css
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\css2_main.css
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\css2_pagingmodule.css
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\css2_topbuttons.css
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\delete.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\edit_clear_sound.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\edit_fs.htm
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\edit_select.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-511724-549108.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-511724-9595.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-backgrounds.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-bcards.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-ecards.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-emoticons.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-estationery.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-funny.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-help.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-images.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-info.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-more.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-my.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-new.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-new2.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-options.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-people.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-photo.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-SpamBlocked.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-tell.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-temp.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-text.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-voice.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def.cdf
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-premium-email-premium.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-t7-bg.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\estatationery.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\flashpatch.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\flashpreview.htm
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\fs3.htm
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\hotbar_promo.htm
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\icon_checked_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\icon_close_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\icon_close_pressed_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\icon_edit_preview.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\icon_edit_send.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\icon_flash_preview.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\icon_recently_used.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\icon_remove_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\icon_remove_pressed_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\icon_sand-clock2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\icon_tell_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\icon_tell_pressed_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\icon_tree_null.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\icon_unchecked_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\icon_unchecked_pressed_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\img_barlayout.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\img_barlayout2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\img_barlayout4.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\img_corner_left.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\img_local_logo.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\js2_basetemplate.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\js2_hbgroups.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\js2_hbobject3.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\js2_hbobjectset3.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\js2_hotbarwrapper.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\js2_iteratorsandreaders3nf.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\js2_pagingmoduleobj3.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\js2_texts3.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\js2_xmltree3nf.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\layout.cdf
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\linkpathlegal.txt
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\n.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\nav_b_2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\nav_bb_2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\nav_f_2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\nav_ff_2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\progress.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\s_icons_buttons.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\searchbtn.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\submit.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\t6_bg.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\tab_bg.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\tab_bga.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\tab_bgia.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\tab_l.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\tab_la.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\tab_lia.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\tab_r.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\tab_ra.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\tab_ria.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\tree_dots.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\tree_minus.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\tree_plus.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\treedata_animations.xml
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\treedata_backgrounds.xml
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\treedata_ecards.xml
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\treedata_emoticons.xml
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\treedata_notifiers.xml
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\treedata_text.xml
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\DownLoad\business_promo.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\DownLoad\buttondir.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\DownLoad\code.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\DownLoad\email-def.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\DownLoad\email-t7-bg.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\DownLoad\hotbar_promo.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\DownLoad\images.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\DownLoad\layout.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\DownLoad\linkpathlegal.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\DownLoad\localcontent.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\DownLoad\progress.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\DownLoad\s_icons_buttons.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\DownLoad\t6_bg.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\DownLoad\treexml.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]30104_emte10_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]30104_emte11_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]30104_emte12_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]30104_emte13_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]30104_emte14_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]30104_emte19_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]30104_emte20_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]30104_emte21_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]30104_emte9_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]30203lib_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]33102angel_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]33102bigluf_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]33102bigsmile_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]33102birthday_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]33102cheers_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]33102flo_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]33102good_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]33102jump_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]33102king_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]33102lough_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]33102luf_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]33102smile_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]33102smiled_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]33102sor_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]33102thanx_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]33102uhu_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]40103ahh_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]40103wow_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]40104_emi2_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]42102_1134_112_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]50103big_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]50103gig_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]50103hm_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]50103nomail_emoti_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]50103norm_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]60104_ema15_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]60104_ema16_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]60104_ema17_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]60104_ema18_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]60104_ema19_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]60104_ema20_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]60104_ema21_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]60104_ema24_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]60104_ema25_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]60104_ema26_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]60104_ema30_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]60104_ema33_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]60104_ema34_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]62802hippi_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]62802jumpie_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]80402argh_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]80402oops_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]80402ouch_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]82502no_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]82502yes_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\110103_boring1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\110103_confused_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\110103_crying_ugly_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\110103_fantastic_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\110103_feel_better_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\110103_gimme_break_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\110103_heehee_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\110103_hlopaet_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\110103_ign_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\110103_lol_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\110103_no_comment_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\110103_peace_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\110103_smashing_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\110103_talk2thehand_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\block_sm.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\block_sm2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\block_smli.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\block_smli2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\blocked.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\blocked2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\btn_add-but.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\btn_back-but.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\btn_left_cut_enabled_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\btn_left_enabled_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\btn_left_pressed_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\btn_middle_enabled_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\btn_middle_pressed_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\btn_right_cut_enabled_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\btn_right_enabled_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\btn_right_pressed_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\business_promo.htm
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\buttondir.txt
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\components.cdf
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\css_cattree.css
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\css_flashpreview.css
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\css2_main.css
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\css2_pagingmodule.css
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\css2_topbuttons.css
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\delete.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\edit_clear_sound.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\edit_fs.htm
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\edit_select.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-511724-512971.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-511724-512972.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-511724-549108.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-511724-589306.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-511724-591943.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-511724-592579.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-511724-598579.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-511724-603763.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-511724-9595.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-email-backgrounds.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-email-bcards.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-email-ecards.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-email-emoticons.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-email-estationery.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-email-funny.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-email-help.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-email-images.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-email-info.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-email-more.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-email-my.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-email-new.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-email-new2.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-email-options.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-email-people.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-em

Autumn1608 · Answer

C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\85062 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\85268 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\85313 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\85365 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\85381 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\85418 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\8544 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\85564 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\85568 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\85587 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\8573 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\85932 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\86172 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\86173 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\86379 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\86380 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\86416 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\86423 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\86432 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\86654 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\86837 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\86919 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\87002 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\87028 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\87090 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\8732 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\87385 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\87387 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\8743 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\87439 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\87499 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\87555 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\87579 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\87594 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\87770 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\87908 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\87995 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\88119 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\88152 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\88467 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\88533 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\88668 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\890 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\89075 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\89116 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\89151 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\89200 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\89235 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\896 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\89673 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\89841 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\89936 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\90009 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\90098 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\90128 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\90154 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\90163 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\90195 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\90300 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\90358 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\90389 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\91096 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\91204 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\91224 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\91231 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\91236 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\9146 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\91629 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\91840 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\91925 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\92061 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\92573 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\92855 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\92886 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\92912 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\93110 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\93116 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\9313 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\93279 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\93295 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\93310 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\93515 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\93845 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\93899 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\93921 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\93934 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\93950 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\93997 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\94011 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\9413 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\94230 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\94246 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\94272 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\94407 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\94469 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\94748 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\94789 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\94844 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\95052 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\95319 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\95325 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\95610 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\95615 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\95678 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\95679 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\95692 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\95704 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\95716 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\95740 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\95774 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\95798 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\95803 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\95825 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\95828 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\95849 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\95866 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\95873 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\96458 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\96961 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\97380 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\97462 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\97487 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\97498 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\97499 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\97507 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\97524 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\97546 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\97558 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\97734 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\97741 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\97801 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\97964 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\9805 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\98060 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\9807 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\98120 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\98348 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\98732 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\99008 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\99163 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\9941 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\99533 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\99612 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\99739 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\99795 C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\ustat\3543.dat C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\ads.cdf C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\btntrans.idx C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\btntrans1.dat C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\business_promo.htm C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\buttondir.txt C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\components.cdf C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_1000.res C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_2000.res C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_3000.res C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_bar.res C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_bbar1.res C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_logos.res C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_other.res C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_weather.res C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\default.cdf C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz1.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz10.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz11.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz12.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz13.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz14.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz15.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz16.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz17.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz18.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz19.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz2.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz20.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz3.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz4.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz5.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz6.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz7.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz8.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz9.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_categorize.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_comparison.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_em_PROFL_CA_flow_b_IEB.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_explorer-Mails.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_explorer-people.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_fastutilities.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_favorites.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_Games.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_Hide.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_hotbarcom.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_Hotmail.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_hsskin.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_jemster.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_jemsterie.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_jemsteruk.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_jobsearch.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_Mails.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_new.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_premium.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_reun.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_ringtones.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_SearchBoxTrapper.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_searchfor.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_searchgo.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_weather.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_yellowpages.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\email-def-511724-9595.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\email-t1-bg.res C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\hotbar-premium-hotbar-premium.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\hotbar-premium.cdf C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\hotbar_promo.htm C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\icons2.res C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\keywords.idx C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\keywords1.dat C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\layout.cdf C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\linkpathlegal.txt C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\progress.res C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\s_icons_buttons.res C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\sales_buttons.res C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1 2_bg.res C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1 heweb.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1 op7.cdf C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Top7_theweb.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1 sd_bg.res C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\ads.cdf C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\btntrans.idx C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\btntrans1.dat C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\business_promo.htm C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\buttondir.txt C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\components.cdf C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_1000.res C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_2000.res C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_3000.res C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_bar.res C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_bbar1.res C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_logos.res C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_other.res C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_weather.res C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\default.cdf C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz1.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz10.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz11.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz12.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz13.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz14.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz15.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz16.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz17.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz18.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz19.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz2.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz20.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz3.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz4.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz5.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz6.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz7.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz8.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz9.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_categorize.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_comparison.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_em_PROFL_CA_flow_b_IEB.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_explorer-Mails.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_explorer-people.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_fastutilities.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_favorites.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_Games.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_Hide.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_hotbarcom.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_Hotmail.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_hsskin.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_jemster.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_jemsterie.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_jemsteruk.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_jobsearch.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_Mails.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_new.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_premium.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_reun.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_ringtones.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_SearchBoxTrapper.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_searchfor.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_searchgo.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_weather.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_yellowpages.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\email-def-511724-9595.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\email-t1-bg.res C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\hotbar-premium-hotbar-premium.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\hotbar-premium.cdf C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\hotbar_promo.htm C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\icons2.res C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\keywords.idx C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\keywords1.dat C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\layout.cdf C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\linkpathlegal.txt C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\progress.res C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\s_icons_buttons.res C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\sales_buttons.res C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2 2_bg.res C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2 heweb.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2 op7.cdf C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Top7_theweb.mnu C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2 sd_bg.res C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\ads.xip C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\BtnTrans.xip C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\BtnTrans1.xip C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\business_promo.xip C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\buttondir.xip C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_1000.xip C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_2000.xip C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_3000.xip C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_bar.xip C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_bbar1.xip C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_logos.xip C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_other.xip C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_weather.xip C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\default.xip C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\email-t1-bg.xip C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\hotbar-premium.xip C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\hotbar_promo.xip C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\icons2.xip C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\keywords.xip C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\keywords1.xip C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\layout.xip C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\linkpathlegal.xip C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\progress.xip C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\s_icons_buttons.xip C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\sales_buttons.xip C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\samplegroups2.txt C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\samplegroups2.xip C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad 2_bg.xip C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad op7.xip C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad sd_bg.xip C:\Documents and Settings\autumn\Local Settings\Application Data\wokuwok.dat c:\documents and settings\autumn\local settings\application data\wokuwok.exe C:\Documents and Settings\autumn\Local Settings\Application Data\wokuwok_nav.dat C:\Documents and Settings\autumn\Local Settings\Application Data\wokuwok_navps.dat C:\Redemption.ECF C:\WINDOWS\system32\befPonmp.ini C:\WINDOWS\system32\befPonmp.ini2 . ((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-05-05 to 2008-06-05 )))))))))))))))))))))))))))))))))))) . 2008-06-05 13:03 . 2008-06-05 13:03 3,594,628 --a------ C:\upload_moi_PAIX2007.tar.gz 2008-06-04 22:25 . 2008-06-04 22:25 d-------- C:\Program Files\Malwarebytes' Anti-Malware 2008-06-04 22:25 . 2008-06-04 22:25 d-------- C:\Documents and Settings\autumn\Application Data\Malwarebytes 2008-06-04 22:25 . 2008-06-04 22:25 d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes 2008-06-04 22:25 . 2008-05-30 01:06 34,296 --a------ C:\WINDOWS\system32\drivers\mbamcatchme.sys 2008-06-04 22:25 . 2008-05-30 01:06 15,864 --a------ C:\WINDOWS\system32\drivers\mbam.sys 2008-06-04 21:14 . 2008-06-04 21:14 d-------- C:\Program Files\Trend Micro 2008-06-04 17:17 . 2008-06-04 17:17 d-------- C:\Program Files\Shareaza 2008-06-04 17:17 . 2008-06-04 17:17 d-------- C:\Documents and Settings\autumn\Application Data\Shareaza 2008-06-03 16:48 . 2008-03-01 14:58 6,066,176 -----c--- C:\WINDOWS\system32\dllcache\ieframe.dll 2008-06-03 16:48 . 2007-04-17 11:32 2,455,488 -----c--- C:\WINDOWS\system32\dllcache\ieapfltr.dat 2008-06-03 16:48 . 2007-03-08 07:10 1,048,576 -----c--- C:\WINDOWS\system32\dllcache\ieframe.dll.mui 2008-06-03 16:48 . 2008-03-01 14:58 459,264 -----c--- C:\WINDOWS\system32\dllcache\msfeeds.dll 2008-06-03 16:48 . 2008-03-01 14:58 383,488 -----c--- C:\WINDOWS\system32\dllcache\ieapfltr.dll 2008-06-03 16:48 . 2008-03-01 14:58 267,776 -----c--- C:\WINDOWS\system32\dllcache\iertutil.dll 2008-06-03 16:48 . 2008-03-01 14:58 63,488 -----c--- C:\WINDOWS\system32\dllcache\icardie.dll 2008-06-03 16:48 . 2008-03-01 14:58 52,224 -----c--- C:\WINDOWS\system32\dllcache\msfeedsbs.dll 2008-06-03 16:48 . 2008-02-22 12:00 13,824 -----c--- C:\WINDOWS\system32\dllcache\ieudinit.exe 2008-06-03 01:15 . 2008-06-03 01:15 d-------- C:\Program Files\Microsoft CAPICOM 2.1.0.2 2008-06-02 20:19 . 2008-06-03 17:39 d-------- C:\Program Files\Fichiers communs\Softwin 2008-06-02 19:59 . 2008-06-04 10:01 d-------- C:\WINDOWS\system32\fr-fr 2008-06-02 19:55 . 2008-06-04 10:01 1,355 --a------ C:\WINDOWS\imsins.BAK 2008-06-02 19:49 . 2007-07-30 19:19 271,224 --a------ C:\WINDOWS\system32\mucltui.dll 2008-06-02 19:49 . 2007-07-30 19:19 207,736 --a------ C:\WINDOWS\system32\muweb.dll 2008-06-02 19:49 . 2007-07-30 19:18 30,072 --a------ C:\WINDOWS\system32\mucltui.dll.mui 2008-06-02 19:47 . 2008-06-02 19:47 d-------- C:\Program Files\AxBx 2008-06-02 15:21 . 2008-06-02 15:24 d-------- C:\Documents and Settings\All Users\Application Data\Lavasoft 2008-06-02 10:08 . 2008-06-05 13:48 54,156 --ah----- C:\WINDOWS\QTFont.qfn 2008-06-02 10:08 . 2008-06-02 10:08 1,409 --a------ C:\WINDOWS\QTFont.for 2008-06-01 14:19 . 2008-06-01 14:19 d-------- C:\Program Files\Size The Acid 2008-05-31 19:46 . 2008-05-31 19:46 d-------- C:\Program Files\iTunes 2008-05-31 19:46 . 2008-05-31 19:46 d-------- C:\Program Files\iPod 2008-05-31 19:46 . 2008-05-31 19:46 d-------- C:\Documents and Settings\autumn\Application Data\Apple Computer 2008-05-31 19:44 . 2008-05-31 19:45 d-------- C:\Program Files\QuickTime 2008-05-31 19:44 . 2008-05-31 19:44 d-------- C:\Program Files\Apple Software Update 2008-05-31 19:44 . 2008-05-31 19:46 d-------- C:\Documents and Settings\All Users\Application Data\Apple Computer 2008-05-31 19:43 . 2008-05-31 19:43 d-------- C:\Program Files\Fichiers communs\Apple 2008-05-31 19:43 . 2008-05-31 19:43 d-------- C:\Documents and Settings\All Users\Application Data\Apple 2008-05-28 12:16 . 2008-05-28 12:16 d-------- C:\Documents and Settings\autumn\Application Data\Search Settings 2008-05-27 15:03 . 2008-05-27 15:03 d-------- C:\Program Files\Search Settings 2008-05-27 15:02 . 2008-05-27 15:10 d-------- C:\Program Files\Free FLV Converter 2008-05-27 15:02 . 2007-06-19 01:22 364,544 --a------ C:\WINDOWS\system32\PropertyGrid.ocx 2008-05-27 15:02 . 2008-05-15 11:30 208,896 --a------ C:\WINDOWS\system32\TubeFinder.exe 2008-05-27 15:02 . 2005-10-13 15:42 208,500 --a------ C:\WINDOWS\system32\ReyXpBasics.tlb 2008-05-27 15:02 . 1998-07-13 01:00 141,312 --a------ C:\WINDOWS\system32\MSCMCFR.DLL 2008-05-27 15:02 . 2000-07-15 07:00 101,888 --a------ C:\WINDOWS\system32\VB6STKIT.DLL 2008-05-27 15:02 . 2004-03-09 02:00 84,512 --a------ C:\WINDOWS\system32\PICCLP32.OCX 2008-05-27 15:02 . 1998-07-12 21:00 32,768 --a------ C:\WINDOWS\system32\CMDLGFR.DLL 2008-05-27 15:02 . 2005-09-28 03:31 24,576 --a------ C:\WINDOWS\system32\ControlSubX.ocx 2008-05-27 15:02 . 1998-07-13 02:00 9,728 --a------ C:\WINDOWS\system32\PCCLPFR.DLL 2008-05-27 14:25 . 2008-05-27 14:44 d-------- C:\Documents and Settings\autumn\dwhelper 2008-05-23 14:26 . 2007-04-24 11:33 108,680 -ra------ C:\WINDOWS\system32\drivers\s125mdm.sys 2008-05-23 14:26 . 2007-04-24 11:33 100,488 -ra------ C:\WINDOWS\system32\drivers\s125mgmt.sys 2008-05-23 14:26 . 2007-04-24 11:33 98,696 -ra------ C:\WINDOWS\system32\drivers\s125obex.sys 2008-05-23 14:26 . 2007-04-24 11:33 83,336 -ra------ C:\WINDOWS\system32\drivers\s125bus.sys 2008-05-23 14:26 . 2007-04-24 11:33 15,112 -ra------ C:\WINDOWS\system32\drivers\s125mdfl.sys 2008-05-23 14:26 . 2007-04-24 11:33 12,424 -ra------ C:\WINDOWS\system32\drivers\s125whnt.sys 2008-05-23 14:26 . 2007-04-24 11:33 12,424 -ra------ C:\WINDOWS\system32\drivers\s125wh.sys 2008-05-23 14:26 . 2007-04-24 11:33 12,424 -ra------ C:\WINDOWS\system32\drivers\s125cmnt.sys 2008-05-23 14:26 . 2007-04-24 11:33 12,424 -ra------ C:\WINDOWS\system32\drivers\s125cm.sys 2008-05-22 23:27 . 2008-05-22 23:28 d-------- C:\Program Files\Lexmark 1200 Series 2008-05-22 23:27 . 2006-01-12 12:32 983,107 --a------ C:\WINDOWS\system32\LXCZGF.DLL 2008-05-22 23:27 . 2006-07-13 13:24 458,752 --a------ C:\WINDOWS\system32\LXCZJSWR.DLL 2008-05-22 23:27 . 2006-07-13 13:17 356,352 --a------ C:\WINDOWS\system32\LXCZUTIL.DLL 2008-05-22 23:27 . 2006-07-13 13:45 69,632 --a------ C:\WINDOWS\system32\lxczscin.dll 2008-05-22 23:27 . 2006-07-13 13:45 57,344 --a------ C:\WINDOWS\system32\lxczcinf.dll 2008-05-22 23:27 . 2006-07-13 13:45 49,152 --a------ C:\WINDOWS\system32\lxczcoin.dll 2008-05-22 23:27 . 2006-01-30 20:42 270 --a------ C:\WINDOWS\system32\lxczcoin.ini 2008-05-22 23:15 . 2008-05-22 23:15 d-------- C:\Lexmark 2008-05-22 21:04 . 2008-05-22 21:04 d-------- C:\Documents and Settings\autumn\Application Data\Teleca 2008-05-22 21:02 . 2008-05-22 21:02 d-------- C:\Documents and Settings\autumn\Application Data\Sony Ericsson 2008-05-20 18:03 . 2008-05-20 18:03 d-------- C:\Program Files\Sony Ericsson 2008-05-20 18:03 . 2008-05-20 18:07 d-------- C:\Program Files\Fichiers communs\Teleca Shared 2008-05-20 18:03 . 2008-05-20 18:03 d-------- C:\Program Files\Fichiers communs\Sony Ericsson Shared 2008-05-20 18:02 . 2008-05-20 18:02 d-------- C:\WINDOWS\Downloaded Installations 2008-05-20 18:00 . 2008-05-20 18:03 d-------- C:\Documents and Settings\All Users\Application Data\Teleca 2008-05-20 18:00 . 2008-05-20 18:03 d-------- C:\Documents and Settings\All Users\Application Data\Sony Ericsson 2008-05-16 13:31 . 2004-08-03 23:08 31,616 --a------ C:\WINDOWS\system32\drivers\usbccgp.sys 2008-05-16 13:31 . 2004-08-03 23:08 31,616 --a--c--- C:\WINDOWS\system32\dllcache\usbccgp.sys 2008-05-16 11:58 . 2008-05-16 11:58 12,632 --a------ C:\WINDOWS\system32\lsdelete.exe 2008-05-13 03:53 . 2008-05-13 03:53 3,596,288 --a------ C:\WINDOWS\system32\qt-dx331.dll 2008-05-13 03:53 . 2008-05-13 03:53 524,288 --a------ C:\WINDOWS\system32\DivXsm.exe 2008-05-13 03:53 . 2008-05-13 03:53 9,878 --a------ C:\WINDOWS\system32\dsm_fr.qm 2008-05-13 03:53 . 2008-05-13 03:53 4,816 --a------ C:\WINDOWS\system32\divxsm.tlb 2008-05-13 03:51 . 2008-05-13 03:51 1,044,480 --a------ C:\WINDOWS\system32\libdivx.dll 2008-05-13 03:51 . 2008-05-13 03:51 200,704 --a------ C:\WINDOWS\system32\ssldivx.dll 2008-05-13 03:49 . 2008-05-13 03:49 630,784 --a------ C:\WINDOWS\system32\divxdec.ax 2008-05-13 03:49 . 2008-05-13 03:49 352,401 --a------ C:\WINDOWS\system32\DivXMedia.ax 2008-05-13 03:49 . 2008-05-13 03:49 161,096 --a------ C:\WINDOWS\system32\DivXCodecVersionChecker.exe 2008-05-13 03:49 . 2008-05-13 03:49 12,288 --a------ C:\WINDOWS\system32\DivXWMPExtType.dll 2008-05-13 03:48 . 2008-05-13 03:48 8,835 --a------ C:\WINDOWS\system32\dpufr.qm 2008-05-12 12:37 . 2008-05-12 12:39 d-------- C:\Program Files\Startup Manager 2008-05-12 12:37 . 2008-05-12 12:37 d-------- C:\Documents and Settings\All Users\Application Data\Startup Manager 2008-05-12 12:33 . 2008-05-12 12:33 d-------- C:\Program Files\SystemRequirementsLab 2008-05-12 12:33 . 2008-05-12 12:33 d-------- C:\Documents and Settings\autumn\Application Data\SystemRequirementsLab 2008-05-12 12:07 . 2008-05-12 12:10 664 --a------ C:\WINDOWS\system32\d3d9caps.dat 2008-05-11 18:11 . 2008-05-11 18:11 d-------- C:\WINDOWS\Profiles 2008-05-06 17:11 . 2008-05-06 17:12 d-------- C:\Program Files\SecondLife . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-06-05 10:42 --------- d-----w C:\Program Files\eMule 2008-06-04 15:05 --------- d-----w C:\Documents and Settings\All Users\Application Data\Google Updater 2008-06-02 23:18 --------- d-----w C:\Documents and Settings\All Users\Application Data\Microsoft Help 2008-06-02 15:06 --------- d-----w C:\Program Files\MSN Messenger 2008-06-02 13:21 --------- d-----w C:\Program Files\Lavasoft 2008-06-02 13:20 --------- d-----w C:\Program Files\Fichiers communs\Wise Installation Wizard 2008-06-01 12:20 --------- d-----w C:\Documents and Settings\All Users\Application Data hird lies itch ford 2008-06-01 12:04 --------- d-----w C:\Program Files\DivX 2008-05-30 16:00 --------- d-----w C:\Program Files\Norton Security Scan 2008-05-28 15:46 --------- d-----w C:\Program Files\Yahoo! 2008-05-26 11:12 --------- d-----w C:\Program Files\Zylom Games 2008-05-13 01:53 9,464 ------w C:\WINDOWS\system32\drivers\cdralw2k.sys 2008-05-13 01:53 9,336 ------w C:\WINDOWS\system32\drivers\cdr4_xp.sys 2008-05-13 01:53 43,528 ------w C:\WINDOWS\system32\drivers\PxHelp20.sys 2008-05-12 12:16 --------- d-----w C:\Program Files\EA GAMES 2008-05-11 16:06 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-05-11 16:06 --------- d-----w C:\Documents and Settings\autumn\Application Data\Microsoft Games 2008-05-11 16:06 --------- d-----w C:\Documents and Settings\All Users\Application Data\Microsoft Games 2008-05-11 16:00 --------- d-----w C:\Program Files\Fichiers communs\Logitech 2008-05-11 15:58 --------- d-----w C:\Program Files\Google 2008-05-06 15:45 --------- d-----w C:\Documents and Settings\autumn\Application Data\SecondLife 2008-05-01 20:23 --------- d-----w C:\Documents and Settings\autumn\Application Data\Skype 2008-04-30 22:30 --------- d-----w C:\Program Files\Common Files 2008-04-29 09:20 15,648 ----a-w C:\WINDOWS\system32\drivers\NSDriver.sys 2008-04-29 09:19 15,648 ----a-w C:\WINDOWS\system32\drivers\Awrtrd.sys 2008-04-29 09:19 12,960 ----a-w C:\WINDOWS\system32\drivers\Awrtpd.sys 2008-04-28 20:45 --------- d-----w C:\Program Files\Messenger Plus! Live 2008-04-28 07:23 --------- d-----w C:\Program Files\GOA 2008-04-25 10:57 --------- d-----w C:\Documents and Settings\autumn\Application Data\IMVU 2008-04-21 13:41 --------- d-----w C:\Program Files\Atari 2008-04-21 12:34 --------- d-----w C:\Program Files\Sims2Pack Clean Installer 2008-04-21 12:34 --------- d-----w C:\Program Files\MySpace 2008-04-21 12:34 --------- d-----w C:\Program Files\GIMP-2.0 2008-04-21 12:34 --------- d-----w C:\Program Files\Beneton Movie GIF 2008-04-19 21:41 --------- dcsh--w C:\Program Files\Fichiers communs\WindowsLiveInstaller 2008-04-19 21:41 --------- d-----w C:\Program Files\Windows Live 2008-04-19 21:40 --------- d-----w C:\Documents and Settings\All Users\Application Data\WLInstaller 2008-04-19 15:56 --------- d-----w C:\Documents and Settings\All Users\Application Data\DVD Shrink 2007-03-30 14:53 47,360 ----a-w C:\Documents and Settings\autumn\Application Data\pcouffin.sys 2006-03-02 12:00 73,728 -csh--w C:\WINDOWS\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}$BACKUP$\System\wmplayer.exe . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{BA9A5E2B-606B-49CE-A429-FF6E66367B70}] C:\WINDOWS\system32\pmnoPfeb.dll [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}] 2008-04-16 17:56 1107296 --a------ C:\Program Files\Search Settings\kb127\SearchSettings.dll [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2006-03-02 14:00 15360] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RTHDCPL"="RTHDCPL.EXE" [2006-08-24 04:08 16050688 C:\WINDOWS\RTHDCPL.exe] "Sony Ericsson PC Suite"="C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" [2007-06-13 08:16 528384] "Lexmark 1200 Series"="C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe" [2006-07-13 13:25 57344] "SearchSettings"="C:\Program Files\Search Settings\SearchSettings.exe" [2008-04-16 17:56 985440] "QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-03-28 23:37 413696] "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-03-30 10:36 267048] "Itch ford four knob"="C:\Documents and Settings\All Users\Application Data hird lies itch ford\LOCKS ACTIVE.exe" [2008-06-05 14:33 2157056] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2006-03-02 14:00 15360] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] --a------ 2008-01-11 23:16 39792 C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr] --a------ 2005-05-04 02:43 69632 C:\WINDOWS\Alcmtr.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe] --a------ 2006-03-02 14:00 15360 C:\WINDOWS\system32\ctfmon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor] --a------ 2006-10-27 01:47 31016 C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg] --a------ 2007-04-25 13:34 68856 C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion un-] "Windows Registry Repair Pro"=C:\Program Files\3B Software\Windows Registry Repair Pro\RegistryRepairPro.exe 4 "swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe "E07FXLRD_5793000"="C:\Program Files\Microsoft Encarta\Microsoft Encarta 2007 - Collection DVD\EDICT.EXE" -m "E07FXLRD_9880078"="C:\Program Files\Microsoft Encarta\Microsoft Encarta 2007 - Collection DVD\EDICT.EXE" -m "MyWebSearch Email Plugin"=C:\PROGRA~1\MYWEBS~1\bar\2.bin\mwsoemon.exe "E07FXLRD_5371953"="C:\Program Files\Microsoft Encarta\Microsoft Encarta 2007 - Collection DVD\EDICT.EXE" -m "ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion un-] "Lexmark 1200 Series"="C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe" "LogitechCommunicationsManager"="C:\Program Files\Fichiers communs\Logitech\LComMgr\Communications_Helper.exe" "LogitechQuickCamRibbon"="C:\Program Files\Logitech\QuickCam10\QuickCam10.exe" /hide "ATICCC"="C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe" "PCMService"="c:\APPS\Powercinema\PCMService.exe" "NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe "Google Desktop Search"="C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup "My Web Search Bar"=rundll32 C:\PROGRA~1\MYWEBS~1\bar\1.bin\MWSBAR.DLL,S "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" "WinampAgent"="C:\Program Files\Winamp\Winampa.exe" "LVCOMSX"="C:\Program Files\Fichiers communs\Logitech\LComMgr\LVComSX.exe" "MyWebSearch Email Plugin"=C:\PROGRA~1\MYWEBS~1\bar\2.bin\mwsoemon.exe "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" "SeekmoOE"=C:\Program Files\Seekmo\bin\10.0.370.0\OEAddOn.exe "SeekmoSA"="C:\Program Files\Seekmo\bin\10.0.370.0\SeekmoSA.exe" "Itch ford four knob"=C:\Documents and Settings\All Users\Application Data hird lies itch ford\Online deaf.exe [HKEY_LOCAL_MACHINE\software\microsoft\security center] "AntiVirusDisableNotify"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\system32\sessmgr.exe"= "C:\APPS\Powercinema\PowerCinema.exe"= "C:\APPS\Powercinema\PCMService.exe"= "C:\Program Files\Messenger\msmsgs.exe"= "C:\Program Files\eMule\eMule.exe"= "C:\WINDOWS\system32\LEXPPS.EXE"= "C:\Program Files\Internet Explorer\IEXPLORE.EXE"= "C:\Program Files\Mozilla Firefox\firefox.exe"= "C:\Program Files\SecondLife\SLVoice.exe"= "C:\WINDOWS\system32\mcoinstall.exe"= "C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"= "C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"= "C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"= "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"= "C:\Program Files\Windows Live\Messenger\livecall.exe"= "C:\Program Files\iTunes\iTunes.exe"= "C:\Program Files\Shareaza\Shareaza.exe"= R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-05-16 01:20] R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-05-16 01:16] R2 UxTuneUp;Extension de conception TuneUp;C:\WINDOWS\System32\svchost.exe [2006-03-02 14:00] S3 s125bus;Sony Ericsson Device 125 driver (WDM);C:\WINDOWS\system32\DRIVERS\s125bus.sys [2007-04-24 11:33] S3 s125mdfl;Sony Ericsson Device 125 USB WMC Modem Filter;C:\WINDOWS\system32\DRIVERS\s125mdfl.sys [2007-04-24 11:33] S3 s125mdm;Sony Ericsson Device 125 USB WMC Modem Driver;C:\WINDOWS\system32\DRIVERS\s125mdm.sys [2007-04-24 11:33] S3 s125mgmt;Sony Ericsson Device 125 USB WMC Device Management Drivers (WDM);C:\WINDOWS\system32\DRIVERS\s125mgmt.sys [2007-04-24 11:33] S3 s125obex;Sony Ericsson Device 125 USB WMC OBEX Interface;C:\WINDOWS\system32\DRIVERS\s125obex.sys [2007-04-24 11:33] S3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 22:58] S3 usbstor;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2006-03-02 14:00] S4 Boonty Games;Boonty Games;"C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe" [] HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs UxTuneUp . Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es' "2008-06-05 12:00:00 C:\WINDOWS\Tasks\A61B837B91E434A7.job" - c:\docume~1\alex\applic~1\sizeth~1\MfcdSeekDefault.exe "2008-05-31 17:44:16 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job" - C:\Program Files\Apple Software Update\SoftwareUpdate.exe "20

Autumn1608 · Answer

Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es'
"2008-06-05 12:00:00 C:\WINDOWS\Tasks\A61B837B91E434A7.job"
- c:\docume~1\alex\applic~1\sizeth~1\MfcdSeekDefault.exe
"2008-05-31 17:44:16 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
"2008-06-04 16:00:03 C:\WINDOWS\Tasks\Norton Security Scan.job"
- C:\Program Files\Norton Security Scan\Nss.exe
.
**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-06-05 14:30:41
Windows 5.1.2600 Service Pack 2 NTFS

Balayage processus cach‚s ...

Balayage cach‚ autostart entries ...

Balayage des fichiers cach‚s ...


C:\Documents and Settings\autumn\Local Settings\Application Data\Microsoft\Windows\GameExplorer\{DFEF49D9-FC95-4301-99B9-2FB91C6ABA06}\PlayTasks\1\Les Sims™ 2 : Boit@Look.lnk 1087 bytes hidden from API

Scan termin‚ avec succŠs
Les fichiers cach‚s: 1

**************************************************************************
.
------------------------ Other Running Processes ------------------------
.
C:\WINDOWS\system32\ati2evxx.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\ati2evxx.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
C:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\system32\oodag.exe
C:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
.
**************************************************************************
.
Temps d'accomplissement: 2008-06-05 14:47:11 - machine was rebooted
ComboFix-quarantined-files.txt  2008-06-05 12:47:00

Pre-Run: 47,663,505,408 octets libres
Post-Run: 49,881,632,768 octets libres

2877	--- E O F ---	2008-06-04 08:01:43

Autumn1608 · Answer

Nouveau rapport Hijack : 

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:03:56, on 5/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Search Settings\SearchSettings.exe
C:\WINDOWS\system32\oodag.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\svchost.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: BHO pour Compagnon Web Encarta - {955BE0B8-BC85-4CAF-856E-8E0D8B610560} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Web Companion\2007\ENCWCBAR.DLL
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O2 - BHO: (no name) - {BA9A5E2B-606B-49CE-A429-FF6E66367B70} - C:\WINDOWS\system32\pmnoPfeb.dll (file missing)
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\en-us\msntb.dll
O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\en-us\msntb.dll
O3 - Toolbar: Compagnon Web Encarta - {147D6308-0614-4112-89B1-31402F9B82C4} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Web Companion\2007\ENCWCBAR.DLL
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [Itch ford four knob] C:\Documents and Settings\All Users\Application Data	hird lies itch ford\LOCKS ACTIVE.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Splash screen for Avast!] C:\Program Files\Alwil Software\Avast4\ashAvast.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: Barre de recherche Encarta - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\Alex\Menu Démarrer\Programmes\IMVU\Run IMVU.lnk
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://support.norton.com/sp/en/us/home/current/info
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {3451DEDE-631F-421C-8127-FD793AFC6CC8} (ActiveDataInfo Class) - https://support.norton.com/sp/en/us/home/current/info
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~3\Office12\GR99D3~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Unknown owner - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe (file missing)
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\Logitech\SrvLnch\SrvLnch.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe

Utilisateur anonyme · Answer

OK Je regarde ça plus tard et te dis la suite

Utilisateur anonyme · Answer

Copie le texte ci-dessous : 


File:: 
C:\Program Files\Search Settings\kb127\SearchSettings.dll 
C:\upload_moi_PAIX2007.tar.gz 
C:\WINDOWS\QTFont.qfn 
C:\WINDOWS\QTFont.for 
C:\Program Files\Search Settings\SearchSettings.exe
C:\PROGRA~1\MYWEBS~1\bar\2.bin\mwsoemon.exe 
C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
C:\Documents and Settings\All Users\Application Data	hird lies itch ford\Online deaf.exe 
C:\PROGRA~1\MYWEBS~1\bar\1.bin\MWSBAR.DLL,S


Folder:: 
C:\Program Files\Search Settings 
C:\Program Files\Fichiers communs\BOONTY Shared


Registry:: 
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}] 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 
 "SearchSettings"=-
[HKEY_CURRENT_USER\software\microsoft\windows\currentversionun-] 
 "MyWebSearch Email Plugin"=-
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversionun-] 
"My Web Search Bar"=-
"MyWebSearch Email Plugin"=-
"Itch ford four knob"=-





Ouvre le Bloc-Notes puis colle le texte copié. 
(Démarrer\Tous les programmes\Accessoires\Bloc notes.) 
Sauvegarde ce fichier sous le nom de CFScript.txt. 

Glisse maintenant le fichier CFScript.txt dans Combofix.exe comme ci-dessous : 

http://sd-1.archive-host.com/membres/up/1366464061/CFScript.gif 

Cela va relancer Combofix, 

Une fenêtre bleue va apparaître: au message qui apparaît ( Type 1 to continue, or 2 to abort) , tape 1 puis valide. 

Patiente le temps du scan.Le bureau va disparaître à plusieurs reprises: c'est normal! 

Ne touche à rien tant que le scan n'est pas terminé. 

Après redémarrage, poste le contenu du rapport Combofix.txt accompagné d'un rapport Hijackthis. 

S'il n'y a pas de rédémarrage, poste quand même les rapports.

Autumn1608 · Answer

ComboFix 08-06-04.5 - autumn 2008-06-06 12:33:10.2 - NTFSx86 Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.142 [GMT 2:00] Endroit: C:\Documents and Settings\autumn\Bureau\ComboFix.exe Command switches used :: C:\Documents and Settings\autumn\Bureau\CFScript.txt..txt * Création d'un nouveau point de restauration [color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color] FILE :: C:\Documents and Settings\All Users\Application Data hird lies itch ford\Online deaf.exe C:\PROGRA~1\MYWEBS~1\bar\1.bin\MWSBAR.DLL,S C:\PROGRA~1\MYWEBS~1\bar\2.bin\mwsoemon.exe C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe C:\Program Files\Search Settings\kb127\SearchSettings.dll C:\Program Files\Search Settings\SearchSettings.exe C:\upload_moi_PAIX2007.tar.gz C:\WINDOWS\QTFont.for C:\WINDOWS\QTFont.qfn . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\Program Files\Search Settings C:\Program Files\Search Settings\kb127\SearchSettings.dll C:\Program Files\Search Settings\kb127\SearchSettingsRes409.dll C:\Program Files\Search Settings\SearchSettings.exe C:\WINDOWS\QTFont.for C:\WINDOWS\QTFont.qfn . ((((((((((((((((((((((((((((( Fichiers créés 2008-05-06 to 2008-06-06 )))))))))))))))))))))))))))))))))))) . 2008-06-04 22:25 . 2008-06-04 22:25 d-------- C:\Program Files\Malwarebytes' Anti-Malware 2008-06-04 22:25 . 2008-06-04 22:25 d-------- C:\Documents and Settings\autumn\Application Data\Malwarebytes 2008-06-04 22:25 . 2008-06-04 22:25 d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes 2008-06-04 22:25 . 2008-05-30 01:06 34,296 --a------ C:\WINDOWS\system32\drivers\mbamcatchme.sys 2008-06-04 22:25 . 2008-05-30 01:06 15,864 --a------ C:\WINDOWS\system32\drivers\mbam.sys 2008-06-04 21:14 . 2008-06-04 21:14 d-------- C:\Program Files\Trend Micro 2008-06-04 17:17 . 2008-06-04 17:17 d-------- C:\Program Files\Shareaza 2008-06-04 17:17 . 2008-06-04 17:17 d-------- C:\Documents and Settings\autumn\Application Data\Shareaza 2008-06-03 16:48 . 2008-03-01 14:58 6,066,176 -----c--- C:\WINDOWS\system32\dllcache\ieframe.dll 2008-06-03 16:48 . 2007-04-17 11:32 2,455,488 -----c--- C:\WINDOWS\system32\dllcache\ieapfltr.dat 2008-06-03 16:48 . 2007-03-08 07:10 1,048,576 -----c--- C:\WINDOWS\system32\dllcache\ieframe.dll.mui 2008-06-03 16:48 . 2008-03-01 14:58 459,264 -----c--- C:\WINDOWS\system32\dllcache\msfeeds.dll 2008-06-03 16:48 . 2008-03-01 14:58 383,488 -----c--- C:\WINDOWS\system32\dllcache\ieapfltr.dll 2008-06-03 16:48 . 2008-03-01 14:58 267,776 -----c--- C:\WINDOWS\system32\dllcache\iertutil.dll 2008-06-03 16:48 . 2008-03-01 14:58 63,488 -----c--- C:\WINDOWS\system32\dllcache\icardie.dll 2008-06-03 16:48 . 2008-03-01 14:58 52,224 -----c--- C:\WINDOWS\system32\dllcache\msfeedsbs.dll 2008-06-03 16:48 . 2008-02-22 12:00 13,824 -----c--- C:\WINDOWS\system32\dllcache\ieudinit.exe 2008-06-03 01:15 . 2008-06-03 01:15 d-------- C:\Program Files\Microsoft CAPICOM 2.1.0.2 2008-06-02 20:19 . 2008-06-03 17:39 d-------- C:\Program Files\Fichiers communs\Softwin 2008-06-02 19:59 . 2008-06-04 10:01 d-------- C:\WINDOWS\system32\fr-fr 2008-06-02 19:55 . 2008-06-04 10:01 1,355 --a------ C:\WINDOWS\imsins.BAK 2008-06-02 19:49 . 2007-07-30 19:19 271,224 --a------ C:\WINDOWS\system32\mucltui.dll 2008-06-02 19:49 . 2007-07-30 19:19 207,736 --a------ C:\WINDOWS\system32\muweb.dll 2008-06-02 19:49 . 2007-07-30 19:18 30,072 --a------ C:\WINDOWS\system32\mucltui.dll.mui 2008-06-02 19:47 . 2008-06-02 19:47 d-------- C:\Program Files\AxBx 2008-06-02 15:21 . 2008-06-02 15:24 d-------- C:\Documents and Settings\All Users\Application Data\Lavasoft 2008-06-01 14:19 . 2008-06-01 14:19 d-------- C:\Program Files\Size The Acid 2008-05-31 19:46 . 2008-05-31 19:46 d-------- C:\Program Files\iTunes 2008-05-31 19:46 . 2008-05-31 19:46 d-------- C:\Program Files\iPod 2008-05-31 19:46 . 2008-05-31 19:46 d-------- C:\Documents and Settings\autumn\Application Data\Apple Computer 2008-05-31 19:44 . 2008-05-31 19:45 d-------- C:\Program Files\QuickTime 2008-05-31 19:44 . 2008-05-31 19:44 d-------- C:\Program Files\Apple Software Update 2008-05-31 19:44 . 2008-05-31 19:46 d-------- C:\Documents and Settings\All Users\Application Data\Apple Computer 2008-05-31 19:43 . 2008-05-31 19:43 d-------- C:\Program Files\Fichiers communs\Apple 2008-05-31 19:43 . 2008-05-31 19:43 d-------- C:\Documents and Settings\All Users\Application Data\Apple 2008-05-28 12:16 . 2008-05-28 12:16 d-------- C:\Documents and Settings\autumn\Application Data\Search Settings 2008-05-27 15:02 . 2008-05-27 15:10 d-------- C:\Program Files\Free FLV Converter 2008-05-27 15:02 . 2007-06-19 01:22 364,544 --a------ C:\WINDOWS\system32\PropertyGrid.ocx 2008-05-27 15:02 . 2008-05-15 11:30 208,896 --a------ C:\WINDOWS\system32\TubeFinder.exe 2008-05-27 15:02 . 2005-10-13 15:42 208,500 --a------ C:\WINDOWS\system32\ReyXpBasics.tlb 2008-05-27 15:02 . 1998-07-13 01:00 141,312 --a------ C:\WINDOWS\system32\MSCMCFR.DLL 2008-05-27 15:02 . 2000-07-15 07:00 101,888 --a------ C:\WINDOWS\system32\VB6STKIT.DLL 2008-05-27 15:02 . 2004-03-09 02:00 84,512 --a------ C:\WINDOWS\system32\PICCLP32.OCX 2008-05-27 15:02 . 1998-07-12 21:00 32,768 --a------ C:\WINDOWS\system32\CMDLGFR.DLL 2008-05-27 15:02 . 2005-09-28 03:31 24,576 --a------ C:\WINDOWS\system32\ControlSubX.ocx 2008-05-27 15:02 . 1998-07-13 02:00 9,728 --a------ C:\WINDOWS\system32\PCCLPFR.DLL 2008-05-27 14:25 . 2008-05-27 14:44 d-------- C:\Documents and Settings\autumn\dwhelper 2008-05-23 14:26 . 2007-04-24 11:33 108,680 -ra------ C:\WINDOWS\system32\drivers\s125mdm.sys 2008-05-23 14:26 . 2007-04-24 11:33 100,488 -ra------ C:\WINDOWS\system32\drivers\s125mgmt.sys 2008-05-23 14:26 . 2007-04-24 11:33 98,696 -ra------ C:\WINDOWS\system32\drivers\s125obex.sys 2008-05-23 14:26 . 2007-04-24 11:33 83,336 -ra------ C:\WINDOWS\system32\drivers\s125bus.sys 2008-05-23 14:26 . 2007-04-24 11:33 15,112 -ra------ C:\WINDOWS\system32\drivers\s125mdfl.sys 2008-05-23 14:26 . 2007-04-24 11:33 12,424 -ra------ C:\WINDOWS\system32\drivers\s125whnt.sys 2008-05-23 14:26 . 2007-04-24 11:33 12,424 -ra------ C:\WINDOWS\system32\drivers\s125wh.sys 2008-05-23 14:26 . 2007-04-24 11:33 12,424 -ra------ C:\WINDOWS\system32\drivers\s125cmnt.sys 2008-05-23 14:26 . 2007-04-24 11:33 12,424 -ra------ C:\WINDOWS\system32\drivers\s125cm.sys 2008-05-22 23:27 . 2008-05-22 23:28 d-------- C:\Program Files\Lexmark 1200 Series 2008-05-22 23:27 . 2006-01-12 12:32 983,107 --a------ C:\WINDOWS\system32\LXCZGF.DLL 2008-05-22 23:27 . 2006-07-13 13:24 458,752 --a------ C:\WINDOWS\system32\LXCZJSWR.DLL 2008-05-22 23:27 . 2006-07-13 13:17 356,352 --a------ C:\WINDOWS\system32\LXCZUTIL.DLL 2008-05-22 23:27 . 2006-07-13 13:45 69,632 --a------ C:\WINDOWS\system32\lxczscin.dll 2008-05-22 23:27 . 2006-07-13 13:45 57,344 --a------ C:\WINDOWS\system32\lxczcinf.dll 2008-05-22 23:27 . 2006-07-13 13:45 49,152 --a------ C:\WINDOWS\system32\lxczcoin.dll 2008-05-22 23:27 . 2006-01-30 20:42 270 --a------ C:\WINDOWS\system32\lxczcoin.ini 2008-05-22 23:15 . 2008-05-22 23:15 d-------- C:\Lexmark 2008-05-22 21:04 . 2008-05-22 21:04 d-------- C:\Documents and Settings\autumn\Application Data\Teleca 2008-05-22 21:02 . 2008-05-22 21:02 d-------- C:\Documents and Settings\autumn\Application Data\Sony Ericsson 2008-05-20 18:03 . 2008-05-20 18:03 d-------- C:\Program Files\Sony Ericsson 2008-05-20 18:03 . 2008-05-20 18:07 d-------- C:\Program Files\Fichiers communs\Teleca Shared 2008-05-20 18:03 . 2008-05-20 18:03 d-------- C:\Program Files\Fichiers communs\Sony Ericsson Shared 2008-05-20 18:02 . 2008-05-20 18:02 d-------- C:\WINDOWS\Downloaded Installations 2008-05-20 18:00 . 2008-05-20 18:03 d-------- C:\Documents and Settings\All Users\Application Data\Teleca 2008-05-20 18:00 . 2008-05-20 18:03 d-------- C:\Documents and Settings\All Users\Application Data\Sony Ericsson 2008-05-16 13:31 . 2004-08-03 23:08 31,616 --a------ C:\WINDOWS\system32\drivers\usbccgp.sys 2008-05-16 13:31 . 2004-08-03 23:08 31,616 --a--c--- C:\WINDOWS\system32\dllcache\usbccgp.sys 2008-05-16 11:58 . 2008-05-16 11:58 12,632 --a------ C:\WINDOWS\system32\lsdelete.exe 2008-05-13 03:53 . 2008-05-13 03:53 3,596,288 --a------ C:\WINDOWS\system32\qt-dx331.dll 2008-05-13 03:53 . 2008-05-13 03:53 524,288 --a------ C:\WINDOWS\system32\DivXsm.exe 2008-05-13 03:53 . 2008-05-13 03:53 9,878 --a------ C:\WINDOWS\system32\dsm_fr.qm 2008-05-13 03:53 . 2008-05-13 03:53 4,816 --a------ C:\WINDOWS\system32\divxsm.tlb 2008-05-13 03:51 . 2008-05-13 03:51 1,044,480 --a------ C:\WINDOWS\system32\libdivx.dll 2008-05-13 03:51 . 2008-05-13 03:51 200,704 --a------ C:\WINDOWS\system32\ssldivx.dll 2008-05-13 03:49 . 2008-05-13 03:49 630,784 --a------ C:\WINDOWS\system32\divxdec.ax 2008-05-13 03:49 . 2008-05-13 03:49 352,401 --a------ C:\WINDOWS\system32\DivXMedia.ax 2008-05-13 03:49 . 2008-05-13 03:49 161,096 --a------ C:\WINDOWS\system32\DivXCodecVersionChecker.exe 2008-05-13 03:49 . 2008-05-13 03:49 12,288 --a------ C:\WINDOWS\system32\DivXWMPExtType.dll 2008-05-13 03:48 . 2008-05-13 03:48 8,835 --a------ C:\WINDOWS\system32\dpufr.qm 2008-05-12 12:37 . 2008-05-12 12:39 d-------- C:\Program Files\Startup Manager 2008-05-12 12:37 . 2008-05-12 12:37 d-------- C:\Documents and Settings\All Users\Application Data\Startup Manager 2008-05-12 12:33 . 2008-05-12 12:33 d-------- C:\Program Files\SystemRequirementsLab 2008-05-12 12:33 . 2008-05-12 12:33 d-------- C:\Documents and Settings\autumn\Application Data\SystemRequirementsLab 2008-05-12 12:07 . 2008-05-12 12:10 664 --a------ C:\WINDOWS\system32\d3d9caps.dat 2008-05-11 18:11 . 2008-05-11 18:11 d-------- C:\WINDOWS\Profiles 2008-05-06 17:11 . 2008-05-06 17:12 d-------- C:\Program Files\SecondLife . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-06-06 09:57 --------- d-----w C:\Program Files\eMule 2008-06-05 16:05 --------- d-----w C:\Documents and Settings\All Users\Application Data\Google Updater 2008-06-02 23:18 --------- d-----w C:\Documents and Settings\All Users\Application Data\Microsoft Help 2008-06-02 15:06 --------- d-----w C:\Program Files\MSN Messenger 2008-06-02 13:21 --------- d-----w C:\Program Files\Lavasoft 2008-06-02 13:20 --------- d-----w C:\Program Files\Fichiers communs\Wise Installation Wizard 2008-06-01 12:20 --------- d-----w C:\Documents and Settings\All Users\Application Data hird lies itch ford 2008-06-01 12:04 --------- d-----w C:\Program Files\DivX 2008-05-30 16:00 --------- d-----w C:\Program Files\Norton Security Scan 2008-05-28 15:46 --------- d-----w C:\Program Files\Yahoo! 2008-05-26 11:12 --------- d-----w C:\Program Files\Zylom Games 2008-05-13 01:53 9,464 ------w C:\WINDOWS\system32\drivers\cdralw2k.sys 2008-05-13 01:53 9,336 ------w C:\WINDOWS\system32\drivers\cdr4_xp.sys 2008-05-13 01:53 43,528 ------w C:\WINDOWS\system32\drivers\PxHelp20.sys 2008-05-13 01:53 129,784 ------w C:\WINDOWS\system32\pxafs.dll 2008-05-13 01:53 120,056 ------w C:\WINDOWS\system32\pxcpyi64.exe 2008-05-13 01:53 118,520 ------w C:\WINDOWS\system32\pxinsi64.exe 2008-05-12 12:16 --------- d-----w C:\Program Files\EA GAMES 2008-05-11 17:57 107,888 ----a-w C:\WINDOWS\system32\CmdLineExt.dll 2008-05-11 16:06 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-05-11 16:06 --------- d-----w C:\Documents and Settings\autumn\Application Data\Microsoft Games 2008-05-11 16:06 --------- d-----w C:\Documents and Settings\All Users\Application Data\Microsoft Games 2008-05-11 16:00 --------- d-----w C:\Program Files\Fichiers communs\Logitech 2008-05-11 15:58 --------- d-----w C:\Program Files\Google 2008-05-06 15:45 --------- d-----w C:\Documents and Settings\autumn\Application Data\SecondLife 2008-05-01 20:23 --------- d-----w C:\Documents and Settings\autumn\Application Data\Skype 2008-04-30 22:30 --------- d-----w C:\Program Files\Common Files 2008-04-29 09:20 15,648 ----a-w C:\WINDOWS\system32\drivers\NSDriver.sys 2008-04-29 09:19 15,648 ----a-w C:\WINDOWS\system32\drivers\Awrtrd.sys 2008-04-29 09:19 12,960 ----a-w C:\WINDOWS\system32\drivers\Awrtpd.sys 2008-04-28 20:45 --------- d-----w C:\Program Files\Messenger Plus! Live 2008-04-28 07:23 --------- d-----w C:\Program Files\GOA 2008-04-25 10:57 --------- d-----w C:\Documents and Settings\autumn\Application Data\IMVU 2008-04-21 13:41 --------- d-----w C:\Program Files\Atari 2008-04-21 12:34 --------- d-----w C:\Program Files\Sims2Pack Clean Installer 2008-04-21 12:34 --------- d-----w C:\Program Files\MySpace 2008-04-21 12:34 --------- d-----w C:\Program Files\GIMP-2.0 2008-04-21 12:34 --------- d-----w C:\Program Files\Beneton Movie GIF 2008-04-19 21:41 --------- dcsh--w C:\Program Files\Fichiers communs\WindowsLiveInstaller 2008-04-19 21:41 --------- d-----w C:\Program Files\Windows Live 2008-04-19 21:40 --------- d-----w C:\Documents and Settings\All Users\Application Data\WLInstaller 2008-04-19 15:56 --------- d-----w C:\Documents and Settings\All Users\Application Data\DVD Shrink 2008-03-25 04:51 621,344 ----a-w C:\WINDOWS\system32\mswstr10.dll 2008-03-25 04:51 194,144 ----a-w C:\WINDOWS\system32\msjint40.dll 2008-03-20 08:09 1,845,376 ----a-w C:\WINDOWS\system32\win32k.sys 2007-03-30 14:53 47,360 ----a-w C:\Documents and Settings\autumn\Application Data\pcouffin.sys 2006-03-02 12:00 73,728 -csh--w C:\WINDOWS\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}$BACKUP$\System\wmplayer.exe . ((((((((((((((((((((((((((((( snapshot@2008-06-05_14.46.17.45 ))))))))))))))))))))))))))))))))))))))))) . - 2008-06-05 12:29:29 2,048 --s-a-w C:\WINDOWS\bootstat.dat + 2008-06-06 07:16:13 2,048 --s-a-w C:\WINDOWS\bootstat.dat . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{BA9A5E2B-606B-49CE-A429-FF6E66367B70}] C:\WINDOWS\system32\pmnoPfeb.dll [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2006-03-02 14:00 15360] "Splash screen for Avast!"="C:\Program Files\Alwil Software\Avast4\ashAvast.exe" [2008-05-16 01:10 271736] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RTHDCPL"="RTHDCPL.EXE" [2006-08-24 04:08 16050688 C:\WINDOWS\RTHDCPL.exe] "Sony Ericsson PC Suite"="C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" [2007-06-13 08:16 528384] "QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-03-28 23:37 413696] "Itch ford four knob"="C:\Documents and Settings\All Users\Application Data hird lies itch ford\LOCKS ACTIVE.exe" [2008-06-06 12:17 2157568] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2006-03-02 14:00 15360] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] --a------ 2008-01-11 23:16 39792 C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr] --a------ 2005-05-04 02:43 69632 C:\WINDOWS\Alcmtr.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe] --a------ 2006-03-02 14:00 15360 C:\WINDOWS\system32\ctfmon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor] --a------ 2006-10-27 01:47 31016 C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg] --a------ 2007-04-25 13:34 68856 C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion un-] "Windows Registry Repair Pro"=C:\Program Files\3B Software\Windows Registry Repair Pro\RegistryRepairPro.exe 4 "swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe "E07FXLRD_5793000"="C:\Program Files\Microsoft Encarta\Microsoft Encarta 2007 - Collection DVD\EDICT.EXE" -m "E07FXLRD_9880078"="C:\Program Files\Microsoft Encarta\Microsoft Encarta 2007 - Collection DVD\EDICT.EXE" -m "E07FXLRD_5371953"="C:\Program Files\Microsoft Encarta\Microsoft Encarta 2007 - Collection DVD\EDICT.EXE" -m "ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion un-] "Lexmark 1200 Series"="C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe" "LogitechCommunicationsManager"="C:\Program Files\Fichiers communs\Logitech\LComMgr\Communications_Helper.exe" "LogitechQuickCamRibbon"="C:\Program Files\Logitech\QuickCam10\QuickCam10.exe" /hide "ATICCC"="C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe" "PCMService"="c:\APPS\Powercinema\PCMService.exe" "NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe "Google Desktop Search"="C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" "WinampAgent"="C:\Program Files\Winamp\Winampa.exe" "LVCOMSX"="C:\Program Files\Fichiers communs\Logitech\LComMgr\LVComSX.exe" "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" "SeekmoOE"=C:\Program Files\Seekmo\bin\10.0.370.0\OEAddOn.exe "SeekmoSA"="C:\Program Files\Seekmo\bin\10.0.370.0\SeekmoSA.exe" "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [HKEY_LOCAL_MACHINE\software\microsoft\security center] "AntiVirusDisableNotify"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\system32\sessmgr.exe"= "C:\APPS\Powercinema\PowerCinema.exe"= "C:\APPS\Powercinema\PCMService.exe"= "C:\Program Files\Messenger\msmsgs.exe"= "C:\Program Files\eMule\eMule.exe"= "C:\WINDOWS\system32\LEXPPS.EXE"= "C:\Program Files\Internet Explorer\IEXPLORE.EXE"= "C:\Program Files\Mozilla Firefox\firefox.exe"= "C:\Program Files\SecondLife\SLVoice.exe"= "C:\WINDOWS\system32\mcoinstall.exe"= "C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"= "C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"= "C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"= "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"= "C:\Program Files\Windows Live\Messenger\livecall.exe"= "C:\Program Files\iTunes\iTunes.exe"= "C:\Program Files\Shareaza\Shareaza.exe"= R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-05-16 01:20] R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-05-16 01:16] R2 UxTuneUp;Extension de conception TuneUp;C:\WINDOWS\System32\svchost.exe [2006-03-02 14:00] S3 s125bus;Sony Ericsson Device 125 driver (WDM);C:\WINDOWS\system32\DRIVERS\s125bus.sys [2007-04-24 11:33] S3 s125mdfl;Sony Ericsson Device 125 USB WMC Modem Filter;C:\WINDOWS\system32\DRIVERS\s125mdfl.sys [2007-04-24 11:33] S3 s125mdm;Sony Ericsson Device 125 USB WMC Modem Driver;C:\WINDOWS\system32\DRIVERS\s125mdm.sys [2007-04-24 11:33] S3 s125mgmt;Sony Ericsson Device 125 USB WMC Device Management Drivers (WDM);C:\WINDOWS\system32\DRIVERS\s125mgmt.sys [2007-04-24 11:33] S3 s125obex;Sony Ericsson Device 125 USB WMC OBEX Interface;C:\WINDOWS\system32\DRIVERS\s125obex.sys [2007-04-24 11:33] S3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 22:58] S3 usbstor;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2006-03-02 14:00] S4 Boonty Games;Boonty Games;"C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe" [] HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs UxTuneUp *Newly Created Service* - CATCHME . Contenu du dossier 'Scheduled Tasks/Tâches planifiées' "2008-06-06 10:00:01 C:\WINDOWS\Tasks\A61B837B91E434A7.job" - c:\docume~1\alex\applic~1\sizeth~1\MfcdSeekDefault.exe "2008-06-05 13:15:06 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job" - C:\Program Files\Apple Software Update\SoftwareUpdate.exe "2008-06-04 16:00:03 C:\WINDOWS\Tasks\Norton Security Scan.job" - C:\Program Files\Norton Security Scan\Nss.exe . ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-06-06 12:36:08 Windows 5.1.2600 Service Pack 2 NTFS Balayage processus cachés ... Balayage caché autostart entries ... Balayage des fichiers cachés ... C:\Documents and Settings\autumn\Local Settings\Application Data\Microsoft\Windows\GameExplorer\{DFEF49D9-FC95-4301-99B9-2FB91C6ABA06}\PlayTasks\1\Les Sims™ 2 : Boit@Look.lnk 1087 bytes hidden from API Scan terminé avec succès Les fichiers cachés: 1 ************************************************************************** . Temps d'accomplissement: 2008-06-06 12:49:02 ComboFix-quarantined-files.txt 2008-06-06 10:48:57 ComboFix2.txt 2008-06-05 12:47:12 Pre-Run: 49,135,628,288 octets libres Post-Run: 49,146,945,536 octets libres 289 --- E O F --- 2008-06-04 08:01:43

Autumn1608 · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:49:46, on 6/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\system32\oodag.exe
C:\WINDOWS\system32\svchost.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\lexpps.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\WINDOWS\system32
otepad.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
R3 - URLSearchHook: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - (no file)
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: BHO pour Compagnon Web Encarta - {955BE0B8-BC85-4CAF-856E-8E0D8B610560} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Web Companion\2007\ENCWCBAR.DLL
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O2 - BHO: (no name) - {BA9A5E2B-606B-49CE-A429-FF6E66367B70} - C:\WINDOWS\system32\pmnoPfeb.dll (file missing)
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\en-us\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\en-us\msntb.dll
O3 - Toolbar: Compagnon Web Encarta - {147D6308-0614-4112-89B1-31402F9B82C4} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Web Companion\2007\ENCWCBAR.DLL
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [Itch ford four knob] C:\Documents and Settings\All Users\Application Data	hird lies itch ford\LOCKS ACTIVE.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Splash screen for Avast!] C:\Program Files\Alwil Software\Avast4\ashAvast.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-21-528292789-866590285-122395991-1010\..\Run: [E07FXLRD_8894968] "C:\Program Files\Microsoft Encarta\Microsoft Encarta 2007 - Collection DVD\EDICT.EXE" -m (User 'Alex')
O4 - HKUS\S-1-5-21-528292789-866590285-122395991-1010\..\Run: [CURB SPAM] C:\DOCUME~1\Alex\APPLIC~1\SIZETH~1\logamok.exe (User 'Alex')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - S-1-5-21-528292789-866590285-122395991-1010 Startup: IMVU.lnk = C:\Program Files\IMVU\IMVUClient.exe (User 'Alex')
O4 - S-1-5-21-528292789-866590285-122395991-1010 User Startup: IMVU.lnk = C:\Program Files\IMVU\IMVUClient.exe (User 'Alex')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: Barre de recherche Encarta - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\Alex\Menu Démarrer\Programmes\IMVU\Run IMVU.lnk
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://support.norton.com/sp/en/us/home/current/info
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {3451DEDE-631F-421C-8127-FD793AFC6CC8} (ActiveDataInfo Class) - https://support.norton.com/sp/en/us/home/current/info
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~3\Office12\GR99D3~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Unknown owner - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe (file missing)
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\Logitech\SrvLnch\SrvLnch.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe

Utilisateur anonyme · Answer

télécharge OTMoveIt http://download.bleepingcomputer.com/oldtimer/OTMoveIt2.exe (de Old_Timer) sur ton Bureau. 
double-clique sur OTMoveIt.exe pour le lancer. 
copie la liste qui se trouve en gras ci-dessous, 
et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved. 


C:\Documents and Settings\All Users\Application Data	hird lies itch ford\LOCKS ACTIVE.exe
C:\DOCUME~1\Alex\APPLIC~1\SIZETH~1\logamok.exe
C:\Documents and Settings\All Users\Application Data	hird lies itch ford\


clique sur MoveIt! pour lancer la suppression. 
le résultat apparaitra dans le cadre "Results". 
clique sur Exit pour fermer. 
poste le rapport situé dans C:\_OTMoveIt\MovedFiles. 

il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes.

Autumn1608 · Answer

C:\Documents and Settings\All Users\Application Data	hird lies itch ford\LOCKS ACTIVE.exe moved successfully.
File/Folder C:\DOCUME~1\Alex\APPLIC~1\SIZETH~1\logamok.exe not found.
C:\Documents and Settings\All Users\Application Data	hird lies itch ford moved successfully.
File/Folder  not found.
 
OTMoveIt2 by OldTimer - Version 1.0.4.2 log created on 06062008_130459

Utilisateur anonyme · Answer

ok refais un scan hijackthis et poste le rapport stp

Autumn1608 · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:12:30, on 6/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\system32\oodag.exe
C:\WINDOWS\system32\svchost.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\lexpps.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
R3 - URLSearchHook: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - (no file)
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: BHO pour Compagnon Web Encarta - {955BE0B8-BC85-4CAF-856E-8E0D8B610560} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Web Companion\2007\ENCWCBAR.DLL
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O2 - BHO: (no name) - {BA9A5E2B-606B-49CE-A429-FF6E66367B70} - C:\WINDOWS\system32\pmnoPfeb.dll (file missing)
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\en-us\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\en-us\msntb.dll
O3 - Toolbar: Compagnon Web Encarta - {147D6308-0614-4112-89B1-31402F9B82C4} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Web Companion\2007\ENCWCBAR.DLL
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [Itch ford four knob] C:\Documents and Settings\All Users\Application Data	hird lies itch ford\LOCKS ACTIVE.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Splash screen for Avast!] C:\Program Files\Alwil Software\Avast4\ashAvast.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-21-528292789-866590285-122395991-1010\..\Run: [E07FXLRD_8894968] "C:\Program Files\Microsoft Encarta\Microsoft Encarta 2007 - Collection DVD\EDICT.EXE" -m (User 'Alex')
O4 - HKUS\S-1-5-21-528292789-866590285-122395991-1010\..\Run: [CURB SPAM] C:\DOCUME~1\Alex\APPLIC~1\SIZETH~1\logamok.exe (User 'Alex')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - S-1-5-21-528292789-866590285-122395991-1010 Startup: IMVU.lnk = C:\Program Files\IMVU\IMVUClient.exe (User 'Alex')
O4 - S-1-5-21-528292789-866590285-122395991-1010 User Startup: IMVU.lnk = C:\Program Files\IMVU\IMVUClient.exe (User 'Alex')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: Barre de recherche Encarta - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\Alex\Menu Démarrer\Programmes\IMVU\Run IMVU.lnk
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://support.norton.com/sp/en/us/home/current/info
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {3451DEDE-631F-421C-8127-FD793AFC6CC8} (ActiveDataInfo Class) - https://support.norton.com/sp/en/us/home/current/info
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~3\Office12\GR99D3~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Unknown owner - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe (file missing)
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\Logitech\SrvLnch\SrvLnch.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe

Utilisateur anonyme · Answer

réouvre hijackthis
fais scan only
coche ces lignes :

R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file) 
R3 - URLSearchHook: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - (no file) 


O2 - BHO: (no name) - {BA9A5E2B-606B-49CE-A429-FF6E66367B70} - C:\WINDOWS\system32\pmnoPfeb.dll (file missing) 

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') 
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') 


O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://support.norton.com/sp/en/us/home/current/info 
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll 
O16 - DPF: {3451DEDE-631F-421C-8127-FD793AFC6CC8} (ActiveDataInfo Class) - https://support.norton.com/sp/en/us/home/current/info 

tu les coches et tu clic sur fix checked 

ensuite fais ça :

Démarrer > executer > ' services.msc ' , 

- Clic droit sur le service cité - Logitech Process Monitor 
- propriétés 
- et dans "type de démarrage" et mets le sur « désactivé ». 
- Ensuite si le "Status du service" est sur "Démarré" faire : « arrêté » 

Tutorial : https://www.zebulon.fr/dossiers/windows/31-services.html 

ensuite :

Télecharge et instal AVG anti spyware:

http://www.commentcamarche.net/telecharger/telecharger 218 avg anti spyware


instal le et met le a jours

ensuite lance le scan et supprime

puis poste le rapport sur le forum stp


ensuite déisntal java car pas a jours et telecharge et instal cette version :


https://www.java.com/fr/download/manual.jsp

ensuite :


telecharge Ccleaner :

https://www.01net.com/telecharger/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/32599.html

instal le sans la barre yahoo 

fais lancer le nettoyage

repete l opération jusqu a ce qu il trouve rien 

ensuite fais registre

fais chercher les erreures 

ensuite fais corriger les erreures 

repete l opération jusqu a ce qu il trouve rien 


ensuit eregarde si tu trouve ce dossier :


C:\Documents and Settings\All Users\Application Data	hird lies itch ford

si oui supprime le 

ensuite refai sun scan hijackthis et poste le rapport stp

Autumn1608 · Answer

---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

 + Créé à:	14:45:03 6/06/2008

 + Résultat de l'analyse:	



:mozilla.143:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.144:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.145:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.146:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.18:C:\Documents and Settings\autumn\Application Data\Mozilla\Profiles\default\sizt37lq.slt\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.19:C:\Documents and Settings\autumn\Application Data\Mozilla\Profiles\default\sizt37lq.slt\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.20:C:\Documents and Settings\autumn\Application Data\Mozilla\Profiles\default\sizt37lq.slt\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.21:C:\Documents and Settings\autumn\Application Data\Mozilla\Profiles\default\sizt37lq.slt\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.22:C:\Documents and Settings\autumn\Application Data\Mozilla\Profiles\default\sizt37lq.slt\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.23:C:\Documents and Settings\autumn\Application Data\Mozilla\Profiles\default\sizt37lq.slt\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.284:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.285:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.286:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.298:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.44:C:\Documents and Settings\autumn\Application Data\Mozilla\Profiles\default\sizt37lq.slt\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.307:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.308:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.309:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.310:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
C:\Documents and Settings\autumn\Cookies\autumn@adbrite[1].txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.178:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
C:\Documents and Settings\autumn\Cookies\autumn@adtech[1].txt -> TrackingCookie.Adtech : Nettoyé.
C:\Documents and Settings\autumn\Cookies\autumn@adtech[2].txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.84:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.90:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.91:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.92:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.93:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.11:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Adviva : Nettoyé.
:mozilla.42:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Atdmt : Nettoyé.
:mozilla.102:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Bluestreak : Nettoyé.
:mozilla.26:C:\Documents and Settings\autumn\Application Data\Mozilla\Profiles\default\sizt37lq.slt\cookies.txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\autumn\Cookies\autumn@bluestreak[2].txt -> TrackingCookie.Bluestreak : Nettoyé.
:mozilla.321:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.322:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.323:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.324:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.508:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Com : Nettoyé.
:mozilla.176:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.177:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.179:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.17:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Doubleclick : Nettoyé.
:mozilla.17:C:\Documents and Settings\autumn\Application Data\Mozilla\Profiles\default\sizt37lq.slt\cookies.txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\autumn\Cookies\autumn@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\autumn\Cookies\autumn@doubleclick[3].txt -> TrackingCookie.Doubleclick : Nettoyé.
:mozilla.391:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Enhance : Nettoyé.
:mozilla.392:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Enhance : Nettoyé.
:mozilla.131:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Estat : Nettoyé.
C:\Documents and Settings\autumn\Cookies\autumn@estat[1].txt -> TrackingCookie.Estat : Nettoyé.
:mozilla.94:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.95:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.96:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.97:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.98:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
C:\Documents and Settings\autumn\Cookies\autumn@fastclick[1].txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.584:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Imrworldwide : Nettoyé.
:mozilla.585:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Imrworldwide : Nettoyé.
:mozilla.10:C:\Documents and Settings\autumn\Application Data\Mozilla\Profiles\default\sizt37lq.slt\cookies.txt -> TrackingCookie.Information : Nettoyé.
:mozilla.8:C:\Documents and Settings\autumn\Application Data\Mozilla\Profiles\default\sizt37lq.slt\cookies.txt -> TrackingCookie.Information : Nettoyé.
:mozilla.9:C:\Documents and Settings\autumn\Application Data\Mozilla\Profiles\default\sizt37lq.slt\cookies.txt -> TrackingCookie.Information : Nettoyé.
C:\Documents and Settings\autumn\Cookies\autumn@www.lop[1].txt -> TrackingCookie.Lop : Nettoyé.
:mozilla.379:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Netflame : Nettoyé.
:mozilla.45:C:\Documents and Settings\autumn\Application Data\Mozilla\Profiles\default\sizt37lq.slt\cookies.txt -> TrackingCookie.Netflame : Nettoyé.
:mozilla.292:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Overture : Nettoyé.
:mozilla.129:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Revsci : Nettoyé.
C:\Documents and Settings\autumn\Cookies\autumn@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.164:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Sitestat : Nettoyé.
:mozilla.165:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Sitestat : Nettoyé.
C:\WINDOWS\system32\config\systemprofile\Cookies\system@skype[1].txt -> TrackingCookie.Skype : Nettoyé.
:mozilla.16:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.18:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.19:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.20:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\autumn\Cookies\autumn@smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.227:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.228:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.229:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
C:\Documents and Settings\autumn\Cookies\autumn@statcounter[1].txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.316:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Tacoda : Nettoyé.
:mozilla.317:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Tacoda : Nettoyé.
:mozilla.318:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Tacoda : Nettoyé.
:mozilla.319:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Tacoda : Nettoyé.
:mozilla.320:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Tacoda : Nettoyé.
:mozilla.21:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.22:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.23:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.24:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.39:C:\Documents and Settings\autumn\Application Data\Mozilla\Profiles\default\sizt37lq.slt\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.40:C:\Documents and Settings\autumn\Application Data\Mozilla\Profiles\default\sizt37lq.slt\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
C:\Documents and Settings\autumn\Cookies\autumn@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.252:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.253:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.87:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.88:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.89:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.356:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Webtrends : Nettoyé.
C:\Documents and Settings\autumn\Cookies\autumn@m.webtrends[1].txt -> TrackingCookie.Webtrends : Nettoyé.
:mozilla.157:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Webtrendslive : Nettoyé.
:mozilla.116:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.117:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.118:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.119:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.120:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.121:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.122:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
C:\Documents and Settings\autumn\Cookies\autumn@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Nettoyé.
C:\Documents and Settings\autumn\Cookies\autumn@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Nettoyé.


Fin du rapport

Autumn1608 · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:56:05, on 6/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\system32\oodag.exe
C:\WINDOWS\system32\svchost.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: BHO pour Compagnon Web Encarta - {955BE0B8-BC85-4CAF-856E-8E0D8B610560} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Web Companion\2007\ENCWCBAR.DLL
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\en-us\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\en-us\msntb.dll
O3 - Toolbar: Compagnon Web Encarta - {147D6308-0614-4112-89B1-31402F9B82C4} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Web Companion\2007\ENCWCBAR.DLL
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Splash screen for Avast!] C:\Program Files\Alwil Software\Avast4\ashAvast.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: Barre de recherche Encarta - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\Alex\Menu Démarrer\Programmes\IMVU\Run IMVU.lnk
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~3\Office12\GR99D3~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\Logitech\SrvLnch\SrvLnch.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe

Utilisateur anonyme · Answer

OK C est clean !


regarde ceci concernant avast : 

antivir vs avast : 

-> http://forum.malekal.com/ftopic3528.php 

alors je te conseille de le desinstaller et d´installer antivir a la place 

Telecharge et instales l'antivirus Antivir Personal Edition Classic : 

->https://www.malekal.com/avira-free-security-antivirus-gratuit/ 

https://www.avira.com/en/prime 

http://mickael.barroux.free.fr/securite/antivir.php 
http://speedweb1.free.fr/frames2.php?page=tuto5 

Pour désinstaller Avast telecharge cet outil

https://www.avast.com/fr-fr/uninstall-utility


ensuite pour finir :


* pour supprimer les outils/fix utilisés : 

Télécharge ToolsCleaner sur ton bureau. 
--> 
http://pagesperso-orange.fr/AceRothstein/ToolsCleaner2.exe 
http://a-rothstein.changelog.fr/TC/ToolsCleaner2.exe 

# Clique sur Recherche et laisse le scan agir ... 
# Clique sur Suppression pour finaliser. 
# Tu peux, si tu le souhaites, te servir des Options facultatives. 
# Clique sur Quitter pour obtenir le rapport. 
# Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).

Autumn1608 · Answer

-->- Recherche: 

C:\Qoobox: trouvé !
C:\_OtMoveIt: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: trouvé !
C:\Documents and Settings\autumn\Bureau\HijackThis.lnk: trouvé !
C:\Documents and Settings\autumn\Bureau\OtMoveIt2.exe: trouvé !
C:\Documents and Settings\autumn\Bureau\ComboFix.exe: trouvé !
C:\Program Files\Trend Micro\HijackThis: trouvé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !

---------------------------------
-->- Suppression: 

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: supprimé !
C:\Documents and Settings\autumn\Bureau\HijackThis.lnk: supprimé !
C:\Documents and Settings\autumn\Bureau\OtMoveIt2.exe: supprimé !
C:\Documents and Settings\autumn\Bureau\ComboFix.exe: supprimé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: supprimé !
C:\Qoobox: supprimé !
C:\_OtMoveIt: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: supprimé !
C:\Program Files\Trend Micro\HijackThis: supprimé !

Utilisateur anonyme · Answer

ok c est clean :


Si tu es satisfait de mon intervention

et que tu n as plus de probleme 

change le statut du sujet en résolu stp

pour cela va en haut sur ta premiere question et la tu as le choix

Autumn1608 · Answer

Ok Merci beaucoup pour ton aide et pour le temps que tu y a passé...Je suis tres tres tres satisfaite ; )))))
Bizzzz
Stef

Utilisateur anonyme · Answer

de rien ciao et bon surf

Infectée par vundo.dll

29 réponses

Discussions similaires

Newsletters