antivirus 2009 Fermé

Question

Bonjour,

J'ai un problème avec antivirus 2009,je n'aarive pas a le désinstallé car il n'est pas dans les programmes. De plus,je n'arrive pas la le supprimé avec des antivirus (Avg,ad-ware).
Pourreiz vous m'aidé a supprimé cette m****
Je suis tous ouï a vos conseille

merci d'avance pour votre aide ,podox.

Destrio5 · Answer

Salut,

- Télécharge Random's System Information Tool (RSIT) (par random/random) sur ton Bureau.

- Double-clique sur RSIT.exe afin de lancer le programme.

- Clique sur Continue à l'écran Disclaimer.

- Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.

- Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront. Poste le contenu de log.txt (c'est celui qui apparaît à l'écran) ainsi que de info.txt (que tu verras dans la barre des tâches).

Note : Les rapports sont sauvegardés dans le dossier C:\rsit.

podox · Answer

Salut 

Merci pour ton aide mais je n'arrive pas  a ouvrir le lien,Serveur introuvable...

Destrio5 · Answer

A mon avis, le rootkit TDSSServ est sur ton PC.

---> Télécharge ComboFix.exe de sUBs sur ton Bureau :
https://www.mediafire.com/?sharekey=424caed9c295f93dab1eab3e9fa335cab6a6e03bf5b57243

/!\ Déconnecte-toi du net et ferme toutes les applications, antivirus et antispyware y compris /!\

---> Double-clique sur Combofix.exe
Un "pop-up" va apparaître qui dit que "ComboFix est utilisé à vos risques et avec aucune garantie...".
Accepte en cliquant sur "Oui"

---> Je te conseille vivement d'installer la Console de récupération.

---> Mets-le en langue française F
Tape sur la touche 1 (Yes) pour démarrer le scan.

/!\ Ne touche à rien tant que le scan n'est pas terminé. /!\

En fin de scan, il est possible que ComboFix ait besoin de redémarrer le PC pour finaliser la désinfection, laisse-le faire.

Une fois le scan achevé, un rapport va s'afficher : Poste son contenu

/!\ Réactive la protection en temps réel de ton antivirus et de ton antispyware avant de te reconnecter à Internet. /!\

Note : Le rapport se trouve également là : C:\ComboFix\Combofix.txt

podox · Answer

Mon pc lague trop j'arrive pas a aller sur internet.
Est ce que le reformatage de windows sa va supprimer antivirus 2009 ?

Destrio5 · Answer

Tu ne peux pas télécharger ComboFix à partir d'un autre PC ?

podox · Answer

Oui je peux le telecharger d'un autre pc mais le probleme c'est que quand j'allume mon ordi ya antivirus 2009 s'ouvre et quand je le ferme je peux plus rien faire ni aller sur internet ni lancer combofix je peux juste bouger la souris apré je sui obliger de redemarer.

Destrio5 · Answer

Et en mode sans échec ?

podox · Answer

en mode sans echec avec prise en charge du reseaux,jarrive a me connecté a internet mais je n'arrive pas a lancer combofix car je n'arrive pas a coupé ad-ware on me dit "Eacessviolation in module ad-wara ..."

Destrio5 · Answer

Lance le scan ComboFix quand même.

Au pire, renomme ComboFix en Combo-Fix.

podox · Answer

c'est bon voici le rapport; ComboFix 08-11-13.02 - Administrateur 2008-11-16 20:10:15.2 - NTFSx86 Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.204 [GMT 1:00] . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . ?:\windows\system32 tdll.dll . ---- Previous Run ------- . c:\program files\Antivirus 2009 c:\program files\Antivirus 2009\av2009.exe c:\windows\IE4 Error Log.txt c:\windows\system32\Bifrost c:\windows\system32\bifrost\server.exe c:\windows\system32\drivers\TDSSmaxt.sys c:\windows\system32 vs2.inf c:\windows\system32\TDSScfub.dll c:\windows\system32\TDSSfpmp.dll c:\windows\system32\TDSSnmxh.log c:\windows\system32\TDSSnrsr.dll c:\windows\system32\TDSSofxh.dll c:\windows\system32\TDSSosvd.dat c:\windows\system32\TDSSrhym.log c:\windows\system32\TDSSriqp.dll c:\windows\system32\TDSSsbhc.dll c:\windows\system32\TDSStkdv.log . ((((((((((((((((((((((((((((((((((((((( Pilotes/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Service_TDSSSERV.SYS -------\Legacy_TDSSSERV.SYS -------\Legacy_BOONTY_GAMES -------\Legacy_ISODRIVE -------\Service_Boonty Games -------\Service_ISODrive ((((((((((((((((((((((((((((( Fichiers créés du 2008-10-16 au 2008-11-16 )))))))))))))))))))))))))))))))))))) . 2008-11-15 18:55 . 2008-11-15 18:55 d-------- c:\program files\Lavasoft 2008-11-15 18:55 . 2008-11-15 18:55 d-------- c:\documents and settings\All Users.WINDOWS\Application Data\Lavasoft 2008-11-15 18:54 . 2008-11-15 18:54 d-------- c:\program files\Fichiers communs\Wise Installation Wizard 2008-11-14 21:56 . 2008-11-15 23:31 d-------- c:\program files\Malwarebytes' Anti-Malware 2008-11-14 21:56 . 2008-11-14 21:56 d-------- c:\documents and settings\All Users.WINDOWS\Application Data\Malwarebytes 2008-11-14 21:56 . 2008-11-14 21:56 d-------- c:\documents and settings\Administrateur.ORDI-XPSP2.000\Application Data\Malwarebytes 2008-11-14 20:02 . 2008-11-14 20:02 d-------- c:\documents and settings\All Users.WINDOWS\Application Data\Grisoft 2008-11-14 20:02 . 2008-11-14 20:02 d-------- c:\documents and settings\Administrateur.ORDI-XPSP2.000\Application Data\Grisoft 2008-11-14 20:02 . 2007-05-30 13:10 10,872 --a------ c:\windows\system32\drivers\AvgAsCln.sys 2008-11-14 18:22 . 2008-11-16 20:40 54,156 --ah----- c:\windows\QTFont.qfn 2008-11-14 18:22 . 2008-11-14 18:22 1,409 --a------ c:\windows\QTFont.for 2008-11-11 21:53 . 2008-11-11 21:53 221 --a------ c:\windows\NCLogConfig.ini 2008-10-30 21:05 . 2008-10-31 18:30 d-------- c:\program files\Wakfu 2008-10-28 20:39 . 2008-10-28 20:39 107,888 --a------ c:\windows\system32\CmdLineExt.dll 2008-10-28 20:31 . 2008-10-28 20:31 d-------- c:\documents and settings\All Users.WINDOWS\Application Data\KONAMI 2008-10-28 20:20 . 2006-11-29 13:06 3,426,072 --a------ c:\windows\system32\d3dx9_32.dll 2008-10-28 20:20 . 2006-09-28 16:05 2,414,360 --a------ c:\windows\system32\d3dx9_31.dll 2008-10-28 20:20 . 2006-12-08 12:02 251,672 --a------ c:\windows\system32\xactengine2_5.dll 2008-10-28 20:20 . 2006-09-28 16:05 237,848 --a------ c:\windows\system32\xactengine2_4.dll 2008-10-28 20:20 . 2006-09-28 16:04 68,888 --a------ c:\windows\system32\xinput1_3.dll 2008-10-28 20:20 . 2006-11-15 11:38 15,128 --a------ c:\windows\system32\x3daudio1_1.dll 2008-10-28 19:45 . 2008-10-28 19:45 d-------- c:\program files\DAEMON Tools Toolbar 2008-10-28 19:45 . 2008-10-29 08:13 d-------- c:\program files\DAEMON Tools Lite 2008-10-28 19:07 . 2008-10-28 19:07 d-------- c:\documents and settings\Administrateur.ORDI-XPSP2.000\Application Data\DAEMON Tools 2008-10-28 19:07 . 2008-10-28 19:07 717,296 --a------ c:\windows\system32\drivers\sptd.sys 2008-10-18 07:49 . 2008-11-14 18:00 d-------- c:\program files\Norton Security Scan . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-11-16 19:41 --------- d-----w c:\program files\Steam 2008-11-15 22:31 --------- d-----w c:\program files\a-squared Free 2008-11-15 00:25 --------- d-----w c:\program files\GamesBar 2008-11-14 19:58 --------- d-----w c:\documents and settings\Administrateur.ORDI-XPSP2.000\Application Data\Skype 2008-11-14 18:48 --------- d-----w c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar 2008-11-14 17:58 --------- d-----w c:\documents and settings\Administrateur.ORDI-XPSP2.000\Application Data\skypePM 2008-11-14 17:03 --------- d-----w c:\program files\Fichiers communs\Symantec Shared 2008-11-14 16:03 --------- d-----w c:\documents and settings\All Users.WINDOWS\Application Data\Kiwee Toolbar2 2008-11-11 20:53 --------- d-----w c:\documents and settings\Administrateur.ORDI-XPSP2.000\Application Data\HP 2008-10-28 19:19 --------- d-----w c:\program files\Konami 2008-09-24 05:48 --------- d-----w c:\program files\Dofus 2008-09-16 15:57 --------- d-----w c:\program files\FlightGear 2008-09-16 15:55 --------- d-----w c:\documents and settings\Administrateur.ORDI-XPSP2.000\Application Data\flightgear.org . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks] "{6638A9DE-0745-4292-8A2E-AE530E7B9B3F}"= "c:\program files\Kiwee Toolbar2\1.5.131\KiweeIEToolbar.dll" [2008-04-03 265360] [HKEY_CLASSES_ROOT\clsid\{6638a9de-0745-4292-8a2e-ae530e7b9b3f}] [HKEY_CLASSES_ROOT\KiweeIEToolbar.KiweeToolbar.1] [HKEY_CLASSES_ROOT\TypeLib\{259EEB17-79AA-44DF-8410-8E55F82A902A}] [HKEY_CLASSES_ROOT\KiweeIEToolbar.KiweeToolbar] [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{6638A9DE-0745-4292-8A2E-AE530E7B9B3F}] 2008-04-03 09:52 265360 --a------ c:\program files\Kiwee Toolbar2\1.5.131\KiweeIEToolbar.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] "{6638A9DE-0745-4292-8A2E-AE530E7B9B3F}"= "c:\program files\Kiwee Toolbar2\1.5.131\KiweeIEToolbar.dll" [2008-04-03 265360] [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser] "{6638A9DE-0745-4292-8A2E-AE530E7B9B3F}"= "c:\program files\Kiwee Toolbar2\1.5.131\KiweeIEToolbar.dll" [2008-04-03 265360] [HKEY_CLASSES_ROOT\clsid\{6638a9de-0745-4292-8a2e-ae530e7b9b3f}] [HKEY_CLASSES_ROOT\KiweeIEToolbar.KiweeToolbar.1] [HKEY_CLASSES_ROOT\TypeLib\{259EEB17-79AA-44DF-8410-8E55F82A902A}] [HKEY_CLASSES_ROOT\KiweeIEToolbar.KiweeToolbar] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "MsnMsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 5724184] "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-03-03 68856] "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2004-08-03 15360] "Steam"="c:\program files\Steam\Steam.exe" [2008-10-08 1410296] "DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2008-07-24 490952] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SoundMAXPnP"="c:\program files\Analog Devices\SoundMAX\SMax4PNP.exe" [2004-10-14 1388544] "HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2006-02-19 49152] "QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2008-01-31 385024] "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2008-02-19 267048] "ATIPTA"="c:\program files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-02-01 339968] "KiweeHook"="c:\program files\Kiwee Toolbar2\1.5.131\kwtbaim.exe" [2008-04-03 56456] "AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2008-09-29 1234712] "ZSSnp211"="c:\windows\ZSSnp211.exe" [2007-06-07 49152] "Domino"="c:\windows\Domino.exe" [2006-06-28 49152] "BigDogPath323VMSnap"="c:\windows\VMSnap23.exe" [2006-09-19 212992] "BigDogPath323Domino"="c:\windows\Domino.exe" [2006-06-28 49152] "!AVG Anti-Spyware"="c:\program files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 6731312] c:\documents and settings\All Users.WINDOWS\Menu D‚marrer\Programmes\D‚marrage\ Ask Larousse Chambers.lnk - c:\program files\Larousse Multim‚dia\LCAD\bin\hiAksMultiling.exe [2008-05-02 36864] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer] "ClearDocsOnExit"= 64 (0x40) "NoSMHelp"= 1 (0x1) "MemCheckBoxInRunDlg"= 1 (0x1) "NoSMBalloonTip"= 1 (0x1) "NoWelcomeScreen"= 1 (0x1) "NoAutoUpdate"= 1 (0x1) [HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer] "ClearDocsOnExit"= 64 (0x40) "NoSMHelp"= 1 (0x1) "MemCheckBoxInRunDlg"= 1 (0x1) "NoSMBalloonTip"= 1 (0x1) "NoWelcomeScreen"= 1 (0x1) "NoAutoUpdate"= 1 (0x1) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows] "AppInit_DLLs"=avgrsstx.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "msacm.l3codec"= l3codecp.acm [HKEY_LOCAL_MACHINE\software\microsoft\security center] "AntiVirusOverride"=dword:00000001 "FirewallOverride"=dword:00000001 "UpdatesDisableNotify"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) "DisableUnicastResponsesToMulticastBroadcast"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\system32\sessmgr.exe"= "c:\Program Files\Windows Live\Messenger\msnmsgr.exe"= "c:\Program Files\Windows Live\Messenger\livecall.exe"= "c:\Program Files\iTunes\iTunes.exe"= "c:\Program Files\AVG\AVG8\avgupd.exe"= "c:\Program Files\AVG\AVG8\avgemc.exe"= "c:\Documents and Settings\Administrateur.ORDI-XPSP2.000\Bureau\pes2009.exe"= "c:\Program Files\Skype\Phone\Skype.exe"= R1 AvgLdx86;AVG AVI Loader Driver x86;c:\windows\system32\Drivers\avgldx86.sys [2008-05-24 97928] R2 avg8emc;AVG8 E-mail Scanner;c:\progra~1\AVG\AVG8\avgemc.exe [2008-07-04 875288] R2 avg8wd;AVG8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [2008-07-04 231704] R2 AvgTdiX;AVG8 Network Redirector;c:\windows\system32\Drivers\avgtdix.sys [2008-05-24 76040] S0 niuqmui;niuqmui;c:\windows\system32\drivers\frianv.sys [] S3 vmfilter323;323 filter service, Normal;c:\windows\system32\drivers\vmfilter323.sys [2008-07-25 476672] S3 ZSMC326;TD7 USB2.0 PC Camera(VC0323);c:\windows\system32\Drivers\usbvm323.sys [2008-07-25 259968] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{90bfc0b3-e50b-11dc-98d1-0013d4e98af4}] \Shell\AutoRun\command - E:\start.exe \Shell\iledefrance\command - E:\start.exe . Contenu du dossier 'Tâches planifiées' 2008-11-13 c:\windows\Tasks\AppleSoftwareUpdate.job - c:\program files\Apple Software Update\SoftwareUpdate.exe [2007-08-29 14:57] 2008-11-14 c:\windows\Tasks\Norton Security Scan.job - c:\program files\Norton Security Scan\Nss.exe [2008-01-09 03:08] . - - - - ORPHELINS SUPPRIMES - - - - HKCU-Run-WengoPhoneNG - e:\apps\PortableWengoPhone\qtwengophone.exe . ------- Examen supplémentaire ------- . FireFox -: Profile - c:\documents and settings\Administrateur.ORDI-XPSP2.000\Application Data\Mozilla\Firefox\Profiles\2lbpq2qw.default\ FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://www.ircdown.com/fr/index.php?rvs=hompag&d=79919085 . ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-11-16 20:39:22 Windows 5.1.2600 Service Pack 2 NTFS Recherche de processus cachés ... Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... Scan terminé avec succès Fichiers cachés: 0 ************************************************************************** . ------------------------ Autres processus actifs ------------------------ . c:\windows\system32\ati2evxx.exe c:\program files\Lavasoft\Ad-Aware\aawservice.exe c:\windows\system32\ati2evxx.exe c:\program files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe c:\program files\Grisoft\AVG Anti-Spyware 7.5\guard.exe c:\windows\system32\drivers\CDAC11BA.EXE c:\windows\system32\HPZipm12.exe c:\windows\system32\PnkBstrA.exe c:\program files\Analog Devices\SoundMAX\SMAgent.exe c:\program files\iPod\bin\iPodService.exe c:\program files\Larousse Multimédia\LCAD\bin\hiAksMultiling.exe c:\progra~1\Larousse Multimédia\Shared\bin\HISrv.exe c:\progra~1\AVG\AVG8\avgrsx.exe c:\progra~1\AVG\AVG8\avgrsx.exe . ************************************************************************** . Heure de fin: 2008-11-16 20:45:32 - La machine a redémarré [Administrateur] ComboFix-quarantined-files.txt 2008-11-16 19:45:22 Avant-CF: 7,350,001,664 octets libres Après-CF: 17,205,977,088 octets libres 215

Destrio5 · Answer

Ton PC se sent mieux ?

(Ce n'est pas fini)

podox · Answer

comment ce n'est pas fini?Et oui je ne lag plus...

Destrio5 · Answer

/!\ Seul podox peut suivre cette procédure /!\


1/

---> Clique sur Démarrer, Exécuter, tape notepad clique sur OK.

---> Copie le texte ci-dessous par sélection puis Ctrl+C :







KillAll::

Driver::
niuqmui

File::
c:\windows\system32\drivers\frianv.sys

Folder::
c:\program files\DAEMON Tools Toolbar  
c:\program files\GamesBar       
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar  






---> Colle la sélection dans le bloc-notes

---> Enregistre ce fichier sur le bureau (Impératif)

---> Nom du fichier : CFScript
---> Type du fichier : tous les fichiers
---> Clique sur Enregistrer
---> Quitte le bloc-notes


2/

---> Fait un glisser/déposer de ce fichier CFScript sur le fichier ComboFix.exe comme sur la capture :
http://www.searchengines.pl/phpbb203/pliki/picasso/virus/programs/combofix/combofix_cfscript.gif

[*] Une fenêtre bleue va apparaître : au message qui apparaît, tu acceptes.

[*] Patiente le temps du scan. Le bureau va disparaître à plusieurs reprises : c'est normal !
Ne touche à rien tant que le scan n'est pas terminé.

[*] Une fois le scan achevé, un rapport va s'afficher : poste-le

[*] Si le fichier ne s'ouvre pas, il se trouve ici C:\ComboFix\Combofix.txt

podox · Answer

Apres que mon pc redemarre un message apparait en indicant "< utait inattendu" ca fait quelque minutes que c'est affiché

edit:la fenetre c'est fermé toujours avec ce meme messagec" utait inattendu"

Destrio5 · Answer

Ok, regarde si tu as le rapport dans : C:\ComboFix\Combofix.txt

podox · Answer

C'est repartie pour mon lag d'internet...a votre avis si je met le rapport sur une clé usb,sera t'elle infectée par le virus?

Destrio5 · Answer

Je ne pense pas.

podox · Answer

voici le rapport; desolé pour les temps d'attnte.


ComboFix 08-11-13.02 - Administrateur 2008-11-16 21:27:08.4 - NTFSx86
Microsoft Windows XP Professionnel  5.1.2600.2.1252.1.1036.18.201 [GMT 1:00]
Lancé depuis: C:\Documents and Settings\Administrateur.ORDI-XPSP2.000\Bureau\Com-boFix.exe
Commutateurs utilisés :: C:\Documents and Settings\Administrateur.ORDI-XPSP2.000\Bureau\CFScript.txt
 * Un nouveau point de restauration a été créé

FILE ::
c:\windows\system32\drivers\frianv.sys
.

.
.
---- Previous Run -------
.
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-04-07-16-57-58.xm_
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-04-07-16-57-58\about.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-04-07-16-57-58\action.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-04-07-16-57-58\arcade.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-04-07-16-57-58\around_the_world_in_80_days16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-04-07-16-57-58\babysitting_mania16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-04-07-16-57-58\buy.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-04-07-16-57-58\cards.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-04-07-16-57-58\cradle_of_persia16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-04-07-16-57-58\deals.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-04-07-16-57-58\discovering_nature16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-04-07-16-57-58\download.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-04-07-16-57-58\feedback.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-04-07-16-57-58\help.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-04-07-16-57-58\highlight.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-04-07-16-57-58\jigsaw.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-04-07-16-57-58\lucky_clover16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-04-07-16-57-58\mahjong.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-04-07-16-57-58\MCF_raven16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-04-07-16-57-58\multiplayer.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-04-07-16-57-58\mygames.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-04-07-16-57-58
ewGames.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-04-07-16-57-58\paparazzi16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-04-07-16-57-58\partner.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-04-07-16-57-58\popup_off.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-04-07-16-57-58\popup_on.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-04-07-16-57-58\puzzle.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-04-07-16-57-58\search.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-04-07-16-57-58\search_goog.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-04-07-16-57-58\seasonmatch16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-04-07-16-57-58\sendafriend.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-04-07-16-57-58\sports.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-04-07-16-57-58	rial.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-04-07-16-57-58	urbo_pizza16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-04-07-16-57-58\uninstall.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-04-07-16-57-58\update.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-04-07-16-57-58\webgame.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-10-20-17-11.xm_
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-10-20-17-11\16x16talismania.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-10-20-17-11\about.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-10-20-17-11\action.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-10-20-17-11\arcade.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-10-20-17-11\bricks_of_egypt16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-10-20-17-11\buy.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-10-20-17-11\cards.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-10-20-17-11\cradle_of_persia16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-10-20-17-11\cradle_rome16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-10-20-17-11\deals.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-10-20-17-11\download.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-10-20-17-11\farm_frenzy16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-10-20-17-11\feedback.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-10-20-17-11\help.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-10-20-17-11\highlight.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-10-20-17-11\jewelquest16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-10-20-17-11\jigsaw.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-10-20-17-11\magic_match16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-10-20-17-11\mahjong.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-10-20-17-11\micro_olympics16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-10-20-17-11\multiplayer.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-10-20-17-11\mygames.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-10-20-17-11
ewGames.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-10-20-17-11\Ocean_Express16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-10-20-17-11\partner.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-10-20-17-11\peril_at_end_house16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-10-20-17-11\popup_off.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-10-20-17-11\popup_on.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-10-20-17-11\puzzle.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-10-20-17-11iseAtlantis16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-10-20-17-11\scurbbles16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-10-20-17-11\search.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-10-20-17-11\search_goog.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-10-20-17-11\seasonmatch16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-10-20-17-11\sendafriend.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-10-20-17-11\sports.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-10-20-17-11	rial.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-10-20-17-11\uninstall.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-10-20-17-11\update.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-10-20-17-11\webgame.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-10-20-17-11\xango16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-12-21-08-00.xm_
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-12-21-08-00\16x16talismania.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-12-21-08-00\about.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-12-21-08-00\action.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-12-21-08-00\arcade.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-12-21-08-00\bricks_of_egypt16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-12-21-08-00\buy.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-12-21-08-00\cards.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-12-21-08-00\cradle_of_persia16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-12-21-08-00\cradle_rome16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-12-21-08-00\deals.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-12-21-08-00\download.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-12-21-08-00\farm_frenzy16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-12-21-08-00\feedback.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-12-21-08-00\help.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-12-21-08-00\highlight.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-12-21-08-00\jewelquest16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-12-21-08-00\jigsaw.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-12-21-08-00\magic_match16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-12-21-08-00\mahjong.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-12-21-08-00\micro_olympics16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-12-21-08-00\multiplayer.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-12-21-08-00\mygames.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-12-21-08-00
ewGames.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-12-21-08-00\Ocean_Express16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-12-21-08-00\partner.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-12-21-08-00\peril_at_end_house16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-12-21-08-00\popup_off.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-12-21-08-00\popup_on.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-12-21-08-00\puzzle.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-12-21-08-00iseAtlantis16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-12-21-08-00\scurbbles16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-12-21-08-00\search.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-12-21-08-00\search_goog.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-12-21-08-00\seasonmatch16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-12-21-08-00\sendafriend.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-12-21-08-00\sports.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-12-21-08-00	rial.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-12-21-08-00\uninstall.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-12-21-08-00\update.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-12-21-08-00\webgame.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-12-21-08-00\xango16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-16-15-00-29.xm_
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-16-15-00-29\16x16talismania.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-16-15-00-29\about.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-16-15-00-29\action.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-16-15-00-29\arcade.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-16-15-00-29\bricks_of_egypt16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-16-15-00-29\buy.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-16-15-00-29\cards.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-16-15-00-29\cradle_of_persia16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-16-15-00-29\cradle_rome16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-16-15-00-29\deals.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-16-15-00-29\download.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-16-15-00-29\farm_frenzy16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-16-15-00-29\feedback.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-16-15-00-29\help.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-16-15-00-29\highlight.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-16-15-00-29\jewelquest16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-16-15-00-29\jigsaw.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-16-15-00-29\magic_match16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-16-15-00-29\mahjong.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-16-15-00-29\micro_olympics16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-16-15-00-29\multiplayer.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-16-15-00-29\mygames.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-16-15-00-29
ewGames.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-16-15-00-29\Ocean_Express16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-16-15-00-29\partner.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-16-15-00-29\peril_at_end_house16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-16-15-00-29\popup_off.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-16-15-00-29\popup_on.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-16-15-00-29\puzzle.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-16-15-00-29iseAtlantis16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-16-15-00-29\scurbbles16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-16-15-00-29\search.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-16-15-00-29\search_goog.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-16-15-00-29\seasonmatch16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-16-15-00-29\sendafriend.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-16-15-00-29\sports.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-16-15-00-29	rial.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-16-15-00-29\uninstall.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-16-15-00-29\update.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-16-15-00-29\webgame.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-16-15-00-29\xango16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-17-17-00-16.xm_
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-17-17-00-16\16x16talismania.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-17-17-00-16\about.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-17-17-00-16\action.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-17-17-00-16\arcade.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-17-17-00-16\bricks_of_egypt16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-17-17-00-16\buy.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-17-17-00-16\cards.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-17-17-00-16\cradle_of_persia16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-17-17-00-16\cradle_rome16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-17-17-00-16\deals.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-17-17-00-16\download.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-17-17-00-16\farm_frenzy16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-17-17-00-16\feedback.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-17-17-00-16\help.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-17-17-00-16\highlight.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-17-17-00-16\jewelquest16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-17-17-00-16\jigsaw.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-17-17-00-16\magic_match16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-17-17-00-16\mahjong.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-17-17-00-16\micro_olympics16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-17-17-00-16\multiplayer.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-17-17-00-16\mygames.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-17-17-00-16
ewGames.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-17-17-00-16\Ocean_Express16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-17-17-00-16\partner.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-17-17-00-16\peril_at_end_house16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-17-17-00-16\popup_off.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-17-17-00-16\popup_on.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-17-17-00-16\puzzle.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-17-17-00-16iseAtlantis16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-17-17-00-16\scurbbles16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-17-17-00-16\search.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-17-17-00-16\search_goog.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-17-17-00-16\seasonmatch16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-17-17-00-16\sendafriend.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-17-17-00-16\sports.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-17-17-00-16	rial.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-17-17-00-16\uninstall.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-17-17-00-16\update.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-17-17-00-16\webgame.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-05-17-17-00-16\xango16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-12-21-44-45.xm_
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-12-21-44-45\16x16talismania.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-12-21-44-45\about.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-12-21-44-45\action.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-12-21-44-45\arcade.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-12-21-44-45\bricks_of_egypt16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-12-21-44-45\buy.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-12-21-44-45\cards.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-12-21-44-45\cradle_of_persia16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-12-21-44-45\cradle_rome16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-12-21-44-45\deals.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-12-21-44-45\download.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-12-21-44-45\farm_frenzy16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-12-21-44-45\feedback.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-12-21-44-45\help.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-12-21-44-45\highlight.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-12-21-44-45\jewelquest16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-12-21-44-45\jigsaw.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-12-21-44-45\magic_match16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-12-21-44-45\mahjong.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-12-21-44-45\micro_olympics16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-12-21-44-45\multiplayer.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-12-21-44-45\mygames.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-12-21-44-45
ewGames.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-12-21-44-45\Ocean_Express16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-12-21-44-45\partner.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-12-21-44-45\peril_at_end_house16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-12-21-44-45\popup_off.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-12-21-44-45\popup_on.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-12-21-44-45\puzzle.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-12-21-44-45iseAtlantis16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-12-21-44-45\scurbbles16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-12-21-44-45\search.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-12-21-44-45\search_goog.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-12-21-44-45\seasonmatch16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-12-21-44-45\sendafriend.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-12-21-44-45\sports.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-12-21-44-45	rial.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-12-21-44-45\uninstall.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-12-21-44-45\update.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-12-21-44-45\webgame.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-12-21-44-45\xango16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-29-12-45-56.xm_
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-29-12-45-56\16x16talismania.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-29-12-45-56\about.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-29-12-45-56\action.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-29-12-45-56\arcade.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-29-12-45-56\bricks_of_egypt16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-29-12-45-56\buy.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-29-12-45-56\cards.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-29-12-45-56\cradle_of_persia16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-29-12-45-56\cradle_rome16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-29-12-45-56\deals.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-29-12-45-56\download.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-29-12-45-56\farm_frenzy16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-29-12-45-56\feedback.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-29-12-45-56\help.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-29-12-45-56\highlight.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-29-12-45-56\jewelquest16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-29-12-45-56\jigsaw.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-29-12-45-56\magic_match16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-29-12-45-56\mahjong.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-29-12-45-56\micro_olympics16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-29-12-45-56\multiplayer.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-29-12-45-56\mygames.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-29-12-45-56
ewGames.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-29-12-45-56\Ocean_Express16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-29-12-45-56\partner.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-29-12-45-56\peril_at_end_house16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-29-12-45-56\popup_off.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-29-12-45-56\popup_on.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-29-12-45-56\puzzle.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-29-12-45-56iseAtlantis16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-29-12-45-56\scurbbles16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-29-12-45-56\search.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-29-12-45-56\search_goog.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-29-12-45-56\seasonmatch16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-29-12-45-56\sendafriend.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-29-12-45-56\sports.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-29-12-45-56	rial.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-29-12-45-56\uninstall.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-29-12-45-56\update.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-29-12-45-56\webgame.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-06-29-12-45-56\xango16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-07-19-10-26.xm_
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-07-19-10-26\about.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-07-19-10-26\action.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-07-19-10-26\AliceGreenfingers16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-07-19-10-26\arcade.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-07-19-10-26\Azada16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-07-19-10-26\buy.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-07-19-10-26\Cake_mania_216x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-07-19-10-26\cards.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-07-19-10-26\deals.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-07-19-10-26\download.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-07-19-10-26\dream_day_first_home16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-07-19-10-26\eye_for_design16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-07-19-10-26\family_restaurant16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-07-19-10-26\feedback.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-07-19-10-26\heart_of_egypt16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-07-19-10-26\hells_kitchen16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-07-19-10-26\help.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-07-19-10-26\highlight.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-07-19-10-26\jigsaw.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-07-19-10-26\mahjong.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-07-19-10-26\multiplayer.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-07-19-10-26\mygames.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-07-19-10-26
ewGames.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-07-19-10-26\partner.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-07-19-10-26\penguins_journey16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-07-19-10-26\peril_at_end_house16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-07-19-10-26\pet_shop_hop16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-07-19-10-26\popup_off.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-07-19-10-26\popup_on.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-07-19-10-26\puzzle.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-07-19-10-26anch_rush16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-07-19-10-26\search.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-07-19-10-26\search_goog.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-07-19-10-26\sendafriend.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-07-19-10-26\sports.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-07-19-10-26	rial.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-07-19-10-26\uninstall.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-07-19-10-26\update.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-07-19-10-26\virtualvillagers16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-07-19-10-26\vogue_tales16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-07-19-10-26\webgame.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-07-19-10-26\west16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-10.xm_
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-10\4_elements16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-10\about.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-10\action.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-10\arcade.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-10\astro_avenger_216x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-10\beach_party_craze16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-10\BigCity_SF16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-10\bookworm_ad16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-10\buy.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-10\cards.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-10\deals.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-10\download.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-10\family_restaurant16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-10\feedback.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-10\help.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-10\highlight.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-10\in_living_colors16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-10\jigsaw.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-10\lettriq16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-10\mahjong.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-10\multiplayer.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-10\mygames.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-10
ewGames.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-10\partner.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-10\popup_off.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-10\popup_on.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-10\puzzle.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-10anch_rush16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-10\search.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-10\search_goog.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-10\sendafriend.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-10\sports.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-10	rial.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-10\uninstall.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-10\update.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-10\virtualvillagers16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-10\webgame.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-12.xm_
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-12\4_elements16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-12\about.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-12\action.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-12\arcade.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-12\astro_avenger_216x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-12\beach_party_craze16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-12\BigCity_SF16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-12\bookworm_ad16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-12\buy.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-12\cards.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-12\deals.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-12\download.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-12\family_restaurant16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-12\feedback.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-12\help.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-12\highlight.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-12\in_living_colors16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-12\jigsaw.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-12\lettriq16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-12\mahjong.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-12\multiplayer.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-12\mygames.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-12
ewGames.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-12\partner.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-12\popup_off.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-12\popup_on.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-12\puzzle.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-12anch_rush16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-12\search.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-12\search_goog.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-12\sendafriend.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-12\sports.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-12	rial.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-12\uninstall.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-12\update.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-12\virtualvillagers16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\08-09-18-08-05-12\webgame.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\7_wonders_treasures_of_seven16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\about.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\action.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\arcade.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\big_city_adventure_sydney16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\buy.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\cards.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\deals.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\death_nile16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\diner_dash_flo_through_time16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\download.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\feedback.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\help.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\highlight.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\jigsaw.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\luxor_quest_for_the_afterlife16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\mahjong.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\multiplayer.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\mygames.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar
atalie_brooks16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar
ewGames.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\oberonconfig.xm_
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\obSearchHistory.dat
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\partner.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\peggle_nights16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\popup_off.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\popup_on.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\puzzle.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\search.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\search_goog.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\sendafriend.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\sports.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar	he_hidden_object_show16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar	rial.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\uninstall.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\update.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\virtualvillagers16x16.gif
c:\documents and settings\All Users.WINDOWS\Application Data\GamesBar\webgame.gif
c:\program files\DAEMON Tools Toolbar
c:\program files\DAEMON Tools Toolbar\_DTLite.xml
c:\program files\DAEMON Tools Toolbar\DTToolbar.dll
c:\program files\DAEMON Tools Toolbar\Resources\about.ico
c:\program files\DAEMON Tools Toolbar\Resources\AboutWindow.ico
c:\program files\DAEMON Tools Toolbar\Resources\as.ico
c:\program files\DAEMON Tools Toolbar\Resources\as.png
c:\program files\DAEMON Tools Toolbar\Resources\astro.ico
c:\program files\DAEMON Tools Toolbar\Resources\b1.bmp
c:\program files\DAEMON Tools Toolbar\Resources\b1.png
c:\program files\DAEMON Tools Toolbar\Resources\BurnImage.ico
c:\program files\DAEMON Tools Toolbar\Resources\buy.ico
c:\program files\DAEMON Tools Toolbar\Resources\cond000.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond001.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond003.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond004.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond005.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond006.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond007.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond008.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond009.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond010.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond011.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond019.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond020.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond021.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond022.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond023.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond024.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond025.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond026.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond037.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond038.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond039.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond040.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond041.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond046.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond048.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond050.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond051.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond052.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond053.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond054.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond055.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond056.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond057.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond058.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond059.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond060.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond061.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond062.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond063.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond064.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond065.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond066.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond067.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond068.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond069.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond075.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond076.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond077.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond078.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond079.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond080.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond084.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond085.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond086.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond087.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond088.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond089.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond090.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond091.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond092.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond093.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond094.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond095.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond108.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond109.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond110.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond111.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond112.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond113.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond120.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond121.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond122.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond126.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond127.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond128.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond129.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond130.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond131.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond132.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond133.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond134.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond135.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond136.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond137.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond138.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond140.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond141.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond142.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond143.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond148.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond149.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond152.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond154.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond155.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond156.gif
c:\program files\DAEMON Tools Toolbar\Resources\cond157.gif
c:\program files\DAEMON Tools Toolbar\Resources\Config.ico
c:\program files\DAEMON Tools Toolbar\Resources\d.ico
c:\program files\DAEMON Tools Toolbar\Resources\d2.ico
c:\program files\DAEMON Tools Toolbar\Resources\daemon.ico
c:\program files\DAEMON Tools Toolbar\Resources\ds.ico
c:\program files\DAEMON Tools Toolbar\Resources\dsearch.ico
c:\program files\DAEMON Tools Toolbar\Resources\dt.ico
c:\program files\DAEMON Tools Toolbar\Resources\DTPro.ico
c:\program files\DAEMON Tools Toolbar\Resources\Dwnl.ico
c:\program files\DAEMON Tools Toolbar\Resources\emulation.ico
c:\program files\DAEMON Tools Toolbar\Resources\features.ico
c:\program files\DAEMON Tools Toolbar\Resources\gd.ico
c:\program files\DAEMON Tools Toolbar\Resources\genre.xml
c:\program files\DAEMON Tools Toolbar\Resources\globe.ico
c:\program files\DAEMON Tools Toolbar\Resources\GrabImage.ico
c:\program files\DAEMON Tools Toolbar\Resources\hb.bmp
c:\program files\DAEMON Tools Toolbar\Resources\hb.ico
c:\program files\DAEMON Tools Toolbar\Resources\help.ico
c:\program files\DAEMON Tools Toolbar\Resources\ip.ico
c:\program files\DAEMON Tools Toolbar\Resources\lang.xml
c:\program files\DAEMON Tools Toolbar\Resources\lingvo.ico
c:\program files\DAEMON Tools Toolbar\Resources\m.ico
c:\program files\DAEMON Tools Toolbar\Resources\mail.bmp
c:\program files\DAEMON Tools Toolbar\Resources\mail_disable.bmp
c:\program files\DAEMON Tools Toolbar\Resources\mail_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\mail_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\mail_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\mailc.bmp
c:\program files\DAEMON Tools Toolbar\Resources\mailc_disable.bmp
c:\program files\DAEMON Tools Toolbar\Resources\mailc_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\mailc_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\mailc_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\MenuRadioConfig.ico
c:\program files\DAEMON Tools Toolbar\Resources\MenuRadioStation.ico
c:\program files\DAEMON Tools Toolbar\Resources\MenuTr.ico
c:\program files\DAEMON Tools Toolbar\Resources
ext.bmp
c:\program files\DAEMON Tools Toolbar\Resources
ext_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources
ext_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources
ext_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources
one.bmp
c:\program files\DAEMON Tools Toolbar\Resources
one_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources
oW.gif
c:\program files\DAEMON Tools Toolbar\Resources\op.ico
c:\program files\DAEMON Tools Toolbar\Resources\play.bmp
c:\program files\DAEMON Tools Toolbar\Resources\play.ico
c:\program files\DAEMON Tools Toolbar\Resources\play_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\play_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\play_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\pragma.ico
c:\program files\DAEMON Tools Toolbar\Resources\prev.bmp
c:\program files\DAEMON Tools Toolbar\Resources\prev_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\prev_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\prev_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\prod.ico
c:\program files\DAEMON Tools Toolbar\Resources\Radio.ico
c:\program files\DAEMON Tools Toolbar\Resources\RadioBg.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioBgMask.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioDisp.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioDisp_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioDown.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioDown.ico
c:\program files\DAEMON Tools Toolbar\Resources\RadioDown_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioDown_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioDown_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioError.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioError_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioSmallDisp.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioSmallDisp_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioVolume.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioVolume_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioVolume_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioVolume_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioWait.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioWait_m.bmp
c:\program files\DAEMON Tools Toolbar\Resourcesefresh.bmp
c:\program files\DAEMON Tools Toolbar\Resourcesefresh_down.bmp
c:\program files\DAEMON Tools Toolbar\Resourcesefresh_m.bmp
c:\program files\DAEMON Tools Toolbar\Resourcesefresh_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\Rss.ico
c:\program files\DAEMON Tools Toolbar\Resources\Rss1.ico
c:\program files\DAEMON Tools Toolbar\ResourcesssClose.ico
c:\program files\DAEMON Tools Toolbar\ResourcesssL.bmp
c:\program files\DAEMON Tools Toolbar\ResourcesssOpen.ico
c:\program files\DAEMON Tools Toolbar\Resources\size.bmp
c:\program files\DAEMON Tools Toolbar\Resources\size_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\skins.ico
c:\program files\DAEMON Tools Toolbar\Resources\spt.ico
c:\program files\DAEMON Tools Toolbar\Resources\stop.bmp
c:\program files\DAEMON Tools Toolbar\Resources\stop.ico
c:\program files\DAEMON Tools Toolbar\Resources\stop_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\stop_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\stop_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\SupportRequest.ico
c:\program files\DAEMON Tools Toolbar\Resources	ime.ico
c:\program files\DAEMON Tools Toolbar\Resources\TitleIcon.ico
c:\program files\DAEMON Tools Toolbar\Resources	oolbar.xml
c:\program files\DAEMON Tools Toolbar\Resources	rans.ico
c:\program files\DAEMON Tools Toolbar\Resources\Trash.bmp
c:\program files\DAEMON Tools Toolbar\Resources\Trash_disable.bmp
c:\program files\DAEMON Tools Toolbar\Resources\Trash_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\Trash_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\Trash_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\u.ico
c:\program files\DAEMON Tools Toolbar\Resources\vol.bmp
c:\program files\DAEMON Tools Toolbar\Resources\vol.ico
c:\program files\DAEMON Tools Toolbar\Resources\vol_back.bmp
c:\program files\DAEMON Tools Toolbar\Resources\vol_dott.bmp
c:\program files\DAEMON Tools Toolbar\Resources\vol_dott_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\vol_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\vol_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\vol_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\wb.bmp
c:\program files\DAEMON Tools Toolbar\Resources\wBtClose.bmp
c:\program files\DAEMON Tools Toolbar\Resources\wBtClose_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\wBtClose_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\wBtClose_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\wBtText.bmp
c:\program files\DAEMON Tools Toolbar\Resources\wBtText_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\wBtText_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\wBtText_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\Weather_m42.bmp
c:\program files\DAEMON Tools Toolbar\Resources\Weather_m43.bmp
c:\program files\DAEMON Tools Toolbar\Resources\wi.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi0.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi1.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi10.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi11.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi12.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi13.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi2.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi3.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi4.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi5.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi6.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi7.ico
c:\program files\DAEMON Tools Toolbar\R

Destrio5 · Answer

--> Télécharge UsbFix (de Chiquitine29) sur ton Bureau :
http://sd-1.archive-host.com/membres/up/116615172019703188/UsbFix.exe

--> Lance l'installation avec les paramètres par défaut.

--> Branche tes sources de données externes à ton PC (clé USB, disque dur externe, etc...) sans les ouvrir.

--> Double-clique sur le raccourci UsbFix sur ton Bureau.

--> Le PC va redémarrer.

--> Après redémarrage, poste le rapport UsbFix.txt

Note : le rapport UsbFix.txt est sauvegardé à la racine du disque.

(Si le Bureau ne réapparait pas, presse Ctrl+Alt+Suppr, Onglet "Fichier", "Nouvelle tâche", tape explorer.exe et valide)

podox · Answer

j'ai cliqué sur UsbFix mais rien ne se passe. y'a t il un temps d'attente avant le redemerage?

Destrio5 · Answer

Non mais il faut choisir l'option 1 (Nettoyage).

podox · Answer

UsbFix est sur mon bureau je l'ai telechargé, mais lorsque je clique dessus rien ne se passe,comment choisis t'on l'option (1) alors etr-ce au démarage?
pourtant on ne pas  rien proposé de tel.

Destrio5 · Answer

---> Télécharge Malwarebytes' Anti-Malware (MBAM) sur ton Bureau.
---> Double-clique sur le fichier téléchargé pour lancer le processus d'installation.
---> Dans l'onglet Mise à jour, clique sur le bouton Recherche de mise à jour : si le pare-feu demande l'autorisation à MBAM de se connecter à Internet, accepte.
---> Une fois la mise à jour terminée, rends-toi dans l'onglet Recherche.
---> Sélectionne Exécuter un examen rapide.
---> Clique sur Rechercher. L'analyse démarre.

A la fin de l'analyse, un message s'affiche :

L'examen s'est terminé normalement. Cliquez sur 'Afficher les résultats' pour afficher tous les objets trouvés.

---> Clique sur OK pour poursuivre. Si MBAM n'a rien trouvé, il te le dira aussi.
---> Ferme tes navigateurs.
Si des malwares ont été détectés, clique sur Afficher les résultats.
---> Sélectionne tout (ou laisse coché) et clique sur Supprimer la sélection, MBAM va détruire les fichiers et clés de registre infectés et en mettre une copie dans la quarantaine.
---> MBAM va ouvrir le Bloc-notes et y copier le rapport d'analyse. Copie-colle ce rapport dans ta prochaine réponse.

podox · Answer

Salut,voici le rapport malaware

Malwarebytes' Anti-Malware 1.30
Version de la base de données: 1403
Windows 5.1.2600 Service Pack 2

2008-11-17 16:49:52
mbam-log-2008-11-17 (16-49-52).txt

Type de recherche: Examen rapide
Eléments examinés: 62920
Temps écoulé: 17 minute(s), 14 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 113

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\AMS_FreeSetup.exe (Rogue.Installer) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\babies.exe (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\boot.ini (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\eeevsnet.exe (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\eeevsnet.tmp (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\mmmatt.exe (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\bl4ck.com (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\krnln.fnr (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\aiyyunzz.exe (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\auuftcml.exe (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\liar5.exe (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\liar6.exe (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\liar7.exe (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\7-v3av.exe (Trojan.TDSS) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\egchvjgw.exe (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\ie.exe (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\cthirosg.exe (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\.tt15.tmp (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\mc229.tmp (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\Bot.exe (Trojan.FakeAlert) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\Buckster.exe (Trojan.FakeAlert) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\BEEIKA.EX (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\6VKQ322c.exe (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\0\svchost.exe (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\1\svchost.exe (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\2\svchost.exe (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\3\svchost.exe (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\4\svchost.exe (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\5\svchost.exe (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\6\svchost.exe (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\7\svchost.exe (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\8\svchost.exe (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\9\svchost.exe (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\10\svchost.exe (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\11\svchost.exe (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\12\svchost.exe (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\1ow.dll (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\85rtkct.dll (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\lhoioovb.exe (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\ijuwvhnd.exe (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\CPV.stt (Malware.Trace) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\696A.tmp (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\lfgkfihu.exe (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\deskmlpu.exe (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\cnmtkn.dll (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\ehcrqpob.drv (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\etkjeponats.sys (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\lsubwyko.exe (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\epagyhle.exe (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\ea-good.exe (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\babkinepaxnut.exe (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\comsvr32.exe (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\!update.exe (Trojan.Downloader) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\dknqpcjqhcj.dll (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\bmtor.sys (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\22.exe (Trojan.Downloader) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\0wl.tmp (Trojan.Patched) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\ieobj.dll (Trojan.Zlob) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\iframestat.exe (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\lokocash.exe (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\gold.exe (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\lla0.exe (Trojan.Zlob) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\lla1.exe (Trojan.Zlob) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\lla2.exe (Trojan.Zlob) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\lla3.exe (Trojan.Zlob) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\lla4.exe (Trojan.Zlob) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\lla5.exe (Trojan.Zlob) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\laf0.exe (Trojan.Zlob) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\laf2.exe (Trojan.Zlob) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\laf3.exe (Trojan.Zlob) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\Explorer32.exe (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\Explorer.exe (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\lxvwaxxebnacnyd.exe (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\dllsvr32.exe (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\bx18dxv.dat (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\cmdinst.exe (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\ctxad.exe (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\Cd1iC2cT.exe (Trojan.Downloader) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\mozzi.exe (Trojan.FakeAlert) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\ldr1.tmp (Trojan.Vundo) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\decsysrox.exe (Trojan.FakeAlert) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\HDVideodll_ver1.5903.0.exe (Trojan.FakeAlert) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\installer_sbd_en.exe (Trojan.FakeAlert) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\cbxww.dll (Trojan.FakeAlert) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\lowpower.exe (Trojan.FakeAlert) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\dssc32.exe (Trojan.FakeAlert) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\a..exe (Trojan.FakeAlert) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\bindsrv2.exe (Trojan.FakeAlert) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\atmadm2.exe (Trojan.FakeAlert) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\lwpwer.exe (Trojan.FakeAlert) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\IcnOvrly.dll (Trojan.FakeAlert) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\bindserv.exe (Trojan.FakeAlert) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\media.php (Trojan.FakeAlert) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\inst1.exe (Trojan.FakeAlert) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\inst2.exe (Trojan.FakeAlert) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\inst3.exe (Trojan.FakeAlert) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\get_file.php (Trojan.FakeAlert) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\c-setup.exe (Trojan.FakeAlert) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\ax1BFE7.tmp (Trojan.FakeAlert) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\AdobeFlashPlayerHD.exe (Trojan.FakeAlert) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\AV2010Installer.exe (Trojan.FakeAlert) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\hipomx.exe (Trojan.FakeAlert) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\32power.exe (Trojan.Downloader) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\looklook.exe (Trojan.Downloader) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\lprn32.exe (Trojan.Zlob) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\dmxonk.exe (Trojan.FakeAlert) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\64look.exe (Trojan.Downloader) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\look32.exe (Trojan.Downloader) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\ddxplugin.exe (Trojan.FakeAlert) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\econf32.exe (Trojan.FakeAlert) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\dnlsvc.exe (Trojan.Downloader) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\cjphnmli.dat (Rootkit.Agent) -> Delete on reboot.
C:\Documents and Settings\Administrateur.ORDI-XPSP2\Local Settings\Temp\csrssc.exe (Trojan.Downloader) -> Delete on reboot.

Destrio5 · Answer

Le rapport n'est pas complet, envoie-le sur destrio5@free.fr

podox · Answer

c'est touc ce que j'ai dans le document,rien de plus ,rien de moins..

Destrio5 · Answer

Pardon.

&#9679; Télécharge ATF Cleaner sur ton Bureau.
&#9679; Double-clique sur le programme.
&#9679; Coche Select All et clique sur le bouton Empty Selected.

Si tu utilises le navigateur Firefox :
&#9679; Clique Firefox en haut et coche : Select All.
&#9679; Clique sur Empty Selected.
NOTE : Si tu veux conserver tes mots de passe sauvegardés, clique No à l'invite.

Si tu utilises le navigateur Opera :
&#9679; Clique Opera en haut et coche : Select All.
&#9679; Clique sur Empty Selected.
NOTE : Si tu veux conserver tes mots de passe sauvegardés, clique No à l'invite.

&#9679; Clique sur Exit du menu prinicipal pour fermer le programme.

podox · Answer

ce n'est pas grave,

c'est bon,cet fait mais je n'utilise aucun des des 2 navigateurs,j'utlise internet epxlorer.

Destrio5 · Answer

C'est dommage, Mozilla Firefox est bien mieux.

podox · Answer

Oki je vais le téléchargé,sinon pouvons nous continué la désinfection,stp?

Destrio5 · Answer

---> Relance MBAM, va dans Quarantaine et supprime tout.

---> Désinstalle UsbFix.

---> Réessaye UsbFix.

podox · Answer

ça marche pas,j'ai désinstallé usbfix puis reinstallé en laissant  le lien sur le bureau mais sa marche pas l'ordi ne redemarre pas.

Destrio5 · Answer

- Télécharge Random's System Information Tool (RSIT) (par random/random) sur ton Bureau.

- Double-clique sur RSIT.exe afin de lancer le programme.

- Clique sur Continue à l'écran Disclaimer.

- Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.

- Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront. Poste le contenu de log.txt (c'est celui qui apparaît à l'écran) ainsi que de info.txt (que tu verras dans la barre des tâches).

Note : Les rapports sont sauvegardés dans le dossier C:\rsit.

podox · Answer

voici rapport se trouvant dans log.txt,
Logfile of random's system information tool 1.04 (written by random/random)
Run by Administrateur at 2008-11-17 18:22:17
Microsoft Windows XP Professionnel Service Pack 2
System drive C: has 16 GB (21%) free of 76 GB
Total RAM: 511 MB (18% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:22, on 2008-11-17
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Kiwee Toolbar2\1.5.131\kwtbaim.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\WINDOWS\ZSSnp211.exe
C:\WINDOWS\Domino.exe
C:\WINDOWS\VMSnap23.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Steam\Steam.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Larousse Multimédia\LCAD\bin\hiAksMultiling.exe
C:\PROGRA~1\Larousse Multimédia\Shared\bin\hisrv.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\PROGRA~1\AVG\AVG8\aAvgApi.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Administrateur.ORDI-XPSP2.000\Bureau\RSIT.exe
C:\Program Files	rend micro\Administrateur.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Kiwee Toolbar - {6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - C:\Program Files\Kiwee Toolbar2\1.5.131\KiweeIEToolbar.dll
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Kiwee Toolbar - {6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - C:\Program Files\Kiwee Toolbar2\1.5.131\KiweeIEToolbar.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\avgtoolbar.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Barre d'outils MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar\01.01.2607.0\fr\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Kiwee Toolbar - {6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - C:\Program Files\Kiwee Toolbar2\1.5.131\KiweeIEToolbar.dll
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\avgtoolbar.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [KiweeHook] "C:\Program Files\Kiwee Toolbar2\1.5.131\kwtbaim.exe"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [ZSSnp211] C:\WINDOWS\ZSSnp211.exe
O4 - HKLM\..\Run: [Domino] C:\WINDOWS\Domino.exe
O4 - HKLM\..\Run: [BigDogPath323VMSnap] C:\WINDOWS\VMSnap23.exe
O4 - HKLM\..\Run: [BigDogPath323Domino] C:\WINDOWS\Domino.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\Steam.exe" -silent
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - Global Startup: Ask Larousse Chambers.lnk = ?
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\Microsoft Office\Office12\EXCEL.EXE/3000
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\Skype4COM.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

podox · Answer

et voici celui de info txt;



info.txt logfile of random's system information tool 1.04 2008-11-17 18:22:48

======Uninstall list======

-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Adobe Acrobat 5.0-->C:\WINDOWS\ISUNINST.EXE -f"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.isu" -c"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.dll"
Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Shockwave Player 11-->C:\WINDOWS\system32\adobe\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Adobe\SHOCKW~1\Install.log
Apple Mobile Device Support-->MsiExec.exe /I{44734179-8A79-4DEE-BB08-73037F065543}
Apple Software Update-->MsiExec.exe /I{B74F042E-E1B9-4A5B-8D46-387BB172F0A4}
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
Assistant de connexion Windows Live-->MsiExec.exe /I{AFA4E5FD-ED70-4D92-99D0-162FD56DC986}
ATI - Utilitaire de désinstallation du logiciel-->C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe
ATI Control Panel-->RunDll32 C:\PROGRA~1\FICHIE~1\InstallShield\engine\6\Intel 32\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe" 
ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
ATI HydraVision-->RunDll32 C:\PROGRA~1\FICHIE~1\InstallShield\engine\6\Intel 32\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3EA9D975-BFDC-4E8E-B88B-0446FBC8CA66}\setup.exe" 
AVG Anti-Spyware 7.5-->C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\Uninstall.exe
AVG Free 8.0-->C:\Program Files\AVG\AVG8\setup.exe /UNINSTALL
Barre d'outils MSN-->C:\Program Files\MSN Toolbar\01.01.2607.0\fr\mtbs.exe c
Battlefield Vietnam(TM)-->RunDll32 C:\PROGRA~1\FICHIE~1\InstallShield\engine\6\Intel 32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E35B3C63-E958-4E31-A178-95D22024109A}\setup.exe" -l0x40c 
Casino Inc-->RunDll32 C:\PROGRA~1\FICHIE~1\InstallShield\engine\6\Intel 32\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CE2A2504-46FD-4408-8999-5AF433EA0C66}\setup.exe" 
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
Code de la route-->"C:\Program Files\Anuman Interactive\Code de la route\unins000.exe"
Codeur Windows Media Série 9-->msiexec.exe /I {E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}
Codeur Windows Media Série 9-->MsiExec.exe /I{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}
Counter-Strike: Source-->"C:\Program Files\Steam\steam.exe" steam://uninstall/240
DAEMON Tools Toolbar-->C:\Program Files\DAEMON Tools Toolbar\uninst.exe
Day of Defeat: Source-->"C:\Program Files\Steam\steam.exe" steam://uninstall/300
DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
Dofus 1.25.0-->C:\Program Files\Dofus\uninstall.exe
Dofus-Arena-->C:\Program Files\Ankama Games\DofusArenaBeta2\uninstall.exe
Favorit-->"c:\documents and settings\administrateur.ordi-xpsp2.000\local settings\application data
iiaerjyd.exe" -uninstall
GamesBar 1.1.0.5-->C:\Program Files\GamesBar\uninst.exe
Google Toolbar for Internet Explorer-->MsiExec.exe /I{DBEA1034-5882-4A88-8033-81C4EF0CFA29}
Google Toolbar for Internet Explorer-->regsvr32 /u /s "c:\program files\google\googletoolbar2.dll"
HijackThis 2.0.2-->"C:\Program Files	rend micro\HijackThis.exe" /uninstall
HP Customer Participation Program 7.0-->C:\Program Files\HP\Digital Imaging\ExtCapUninstall\hpzscr01.exe -datfile hpqhsc01.dat
HP Document Viewer 7.0-->C:\Program Files\HP\Digital Imaging\DocumentViewer\hpzscr01.exe -datfile hpqbud04.dat
HP Imaging Device Functions 7.0-->C:\Program Files\HP\Digital Imaging\DeviceManagement\hpzscr01.exe -datfile hpqbud01.dat
HP Photosmart Premier Software 6.5-->C:\Program Files\HP\Digital Imaging\uninstall\hpzscr01.exe -datfile hpqscr01.dat
HP Photosmart, Officejet and Deskjet 7.0.A-->C:\Program Files\HP\Digital Imaging\{BDBE2F3E-42DB-4d4a-8CB1-19BA765DBC6C}\setup\hpzscr01.exe -datfile hposcr11.dat
HP Software Update-->MsiExec.exe /X{BB85ED9C-AFC9-43BD-B8DC-258C3C7DF72E}
HP Solution Center 7.0-->C:\Program Files\HP\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat
Incoming-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Rage\Incoming\Uninst.isu"
Intel(R) PRO Network Connections Drivers-->C:\Program Files\Intel\DMIX\uninst\DxSetup.exe /x /qr /le C:\DOCUME~1\Administrateur.ORDI-XPSP2.000\Local Settings\Temp\PROSetDX\DMIX\DxUninst.log
iTunes-->MsiExec.exe /I{80FD852F-5AAC-4129-B931-06AAFFA43138}
Kiwee Toolbar-->MsiExec.exe /X{12403F20-DE27-4067-B083-A42E8A6432BA}
Larousse Chambers Advanced Dictionary-->C:\WINDOWS\ISUN040C.EXE -f"C:\Program Files\Larousse Multimédia\LCAD\UNINSTgbil.isu" -c"C:\Program Files\Larousse Multimédia\LCAD\_UnInstall.dll"
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Mise à jour pour Windows XP (KB898461)-->"C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
Mozilla Firefox (3.0.4)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MP3 Player Utilities 4.13-->MsiExec.exe /I{8B9852AF-B0B0-47B7-9BC5-89A95D77B6C9}
Norton Security Scan-->MsiExec.exe /I{1A8A214F-6BAC-4E01-A27D-25C19A484908}
Nostale Online FR (Remove)-->"C:\Nostale(FR)\unins000.exe"
OCR Software by I.R.I.S 7.0-->C:\Program Files\HP\Digital Imaging\OCR\hpzscr01.exe -datfile hpqbud11.dat
Pets Fun House-->"C:\Program Files\Gamenext\Pets Fun House\Uninstall.exe" "C:\Program Files\Gamenext\Pets Fun House\install.log"
Pro Evolution Soccer 2009-->MsiExec.exe /X{A8DB611A-D80E-450D-85F6-3ACDD164BE31}
PunkBuster pour Battlefield Vietnam-->RunDll32 C:\PROGRA~1\FICHIE~1\InstallShield\engine\6\Intel 32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D07643A3-CE41-4286-8C78-EB9C83E76DDB}\setup.exe" -l0x40c 
QuickTime-->MsiExec.exe /I{BFD96B89-B769-4CD6-B11E-E79FFD46F067}
SafeCast Shared Components-->C:\Program Files\Fichiers communs\Macrovision Shared\SafeCast\Install\CDAC13BA.EXE /uninstall
Shadow Of Memories (TM)-->C:\PROGRA~1\Konami\Shadow Of Memories\UNWISE.EXE C:\PROGRA~1\Konami\Shadow Of Memories\INSTALL.LOG
Skype™ 3.8-->MsiExec.exe /X{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}
SoundMAX-->RunDll32 C:\PROGRA~1\FICHIE~1\InstallShield\Professional\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F0A37341-D692-11D4-A984-009027EC0A9C}\setup.exe" -l0x40c  -removeonly
Steam-->MsiExec.exe /X{048298C9-A4D3-490B-9FF9-AB023A9238F3}
TD7 USB2.0 PC Camera (VC0323)-->RunDll32 C:\PROGRA~1\FICHIE~1\InstallShield\Professional\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{36820BCA-FC55-452E-9085-6E6F1F55508D}\Setup.exe" -l0x9 
Téléchargeur de Prince of Persia 1 - Sands of Time fr-->"C:\Program Files\Téléchargeur de Prince of Persia 1 - Sands of Time\unins000.exe"
Téléchargeur de Worms 4 Mayhem fr-->"C:\Program Files\Téléchargeur de Worms 4 Mayhem\unins000.exe"
UltraISO Premium V9.3-->"C:\Program Files\UltraISO\unins000.exe"
UsbFix-->C:\Program Files\UsbFix\Uninstal.exe
Wakfu-->C:\Program Files\Wakfu\uninstall.exe
WarRock-->C:\Program Files\InstallShield Installation Information\{00D15456-F679-4AD4-8BD2-56450D4C3F72}\setup.exe -runfromtemp -l0x0009 -removeonly
Westward-->"C:\Program Files\Gamenext\Westward\Uninstall.exe" "C:\Program Files\Gamenext\Westward\install.log"
Windows Live installer-->MsiExec.exe /X{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390}
Windows Live Messenger-->MsiExec.exe /X{BADF6744-3787-48F6-B8C9-4C4995401D65}
Wolfenstein - Enemy Territory-->C:\PROGRA~1\Wolfenstein - Enemy Territory\Uninstall\Unwise.exe /u C:\PROGRA~1\Wolfenstein - Enemy Territory\Uninstall\Install.log
Yahoo! Install Manager-->C:\WINDOWS\system32egsvr32 /u C:\PROGRA~1\Yahoo!\Common\yinsthelper.dll
Yahoo! Toolbar avec bloqueur de fenêtres pop-up-->C:\PROGRA~1\Yahoo!\Common\unyt.exe

======Security center information======

AV: AVG Anti-Virus Free

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%systemroot%\system32;%systemroot%;%systemroot%\system32\wbem;C:\Program Files\Intel\DMIX;C:\Program Files\QuickTime\QTSystem;C:\Program Files\ATI Technologies\ATI Control Panel
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 4 Stepping 3, GenuineIntel
"PROCESSOR_REVISION"=0403
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"CLASSPATH"=.;C:\Program Files\QuickTime\QTSystem\QTJava.zip
"QTJAVA"=C:\Program Files\QuickTime\QTSystem\QTJava.zip

Destrio5 · Answer

- Télécharge Navilog1 (de IL-MAFIOSO) et enregistre-le sur le bureau : 
http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe 

- Double-clique sur Navilog1.exe afin de lancer l'installation

- Si le fix ne se lance pas automatiquement après son installation, double-clique sur Navilog1 présent sur le bureau

- Appuie sur F ou f  puis valide par Entrée

- Appuie sur une touche de ton clavier à chaque fois que cela est demandé, tu arriveras au menu des options

- Choisis l'option 1 et appuie sur la touche Entrée pour valider ton choix

- Patiente jusqu'au message : *** Analyse terminée le ..... ***

- Le scan fini, le bloc-notes contenant le rapport sera affiché, poste le contenu de ce rapport dans ta prochaine réponse

- Si le résultat du scan ne s'affiche pas, tu le trouveras dans C:\fixnavi.txt

N'utilise pas l'option 2, 3 et 4 sans notre accord, des fichiers légitimes peuvent être inclus dans ce scan.

podox · Answer

earch Navipromo version 3.6.9 commencé le 2008-11-19 à 13:33:32.85

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files
avilog1
Session actuelle : "Administrateur" 

Mise à jour le 05.11.2008 à 21h00 par IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 6.0.2900.2180 
Système de fichiers : NTFS

Recherche executé en mode normal

*** Recherche Programmes installés ***

Favorit

*** Recherche dossiers dans "C:\WINDOWS" ***


*** Recherche dossiers dans "C:\Program Files" ***


*** Recherche dossiers dans "C:\Documents and Settings\All Users.WINDOWS\menu démarrer\programmes" ***


*** Recherche dossiers dans "C:\Documents and Settings\All Users.WINDOWS\menu démarrer" ***


*** Recherche dossiers dans "c:\docume~1\alluse~1.win\applic~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\Administrateur.ORDI-XPSP2.000\application data" *** 


*** Recherche dossiers dans "C:\Documents and Settings\Administrateur.ORDI-XPSP2.000\local settings\application data" *** 


*** Recherche dossiers dans "C:\Documents and Settings\Administrateur.ORDI-XPSP2.000\menu dÚmarrer\programmes" *** 


*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net



*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans "C:\WINDOWS\system32" *

* Recherche dans "C:\Documents and Settings\Administrateur.ORDI-XPSP2.000\local settings\application data" * 



*** Recherche fichiers *** 



*** Recherche clés spécifiques dans le Registre ***


*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :


2)Recherche Heuristique :

* Dans "C:\WINDOWS\system32" :


* Dans "C:\Documents and Settings\Administrateur.ORDI-XPSP2.000\local settings\application data" : 


3)Recherche Certificats :

Certificat Egroup absent !
Certificat Electronic-Group trouvé !
Certificat Montorgueil absent !
Certificat OOO-Favorit trouvé !
Certificat Sunny-Day-Design-Ltd absent !

4)Recherche fichiers connus :



*** Analyse terminée le 2008-11-19 à 13:38:02.20 ***

Destrio5 · Answer

---> Relance Navilog1, fais l'option 2 et poste le rapport.

podox · Answer

Nettoyage exécuté au redémarrage de l'ordinateur

 
*** fsbl1.txt non trouvé ***
(Assurez-vous que Catchme n'avait rien trouvé lors de la recherche)
 

*** Suppression avec sauvegardes résultats GenericNaviSearch ***

* Suppression dans "C:\WINDOWS\System32" *


* Suppression dans "C:\Documents and Settings\Administrateur.ORDI-XPSP2.000\local settings\application data" * 



*** Suppression dossiers dans "C:\WINDOWS" ***


*** Suppression dossiers dans "C:\Program Files" ***


*** Suppression dossiers dans "C:\Documents and Settings\All Users.WINDOWS\menu démarrer\programmes" ***


*** Suppression dossiers dans "C:\Documents and Settings\All Users.WINDOWS\menu démarrer" ***


*** Suppression dossiers dans "c:\docume~1\alluse~1.win\applic~1" ***


*** Suppression dossiers dans "C:\Documents and Settings\Administrateur.ORDI-XPSP2.000\application data" *** 


*** Suppression dossiers dans "C:\Documents and Settings\Administrateur.ORDI-XPSP2.000\local settings\application data" *** 


*** Suppression dossiers dans "C:\Documents and Settings\Administrateur.ORDI-XPSP2.000\menu dÚmarrer\programmes" *** 



*** Suppression fichiers ***


*** Suppression fichiers temporaires ***

Nettoyage contenu C:\WINDOWS\Temp effectué !
Nettoyage contenu C:\Documents and Settings\Administrateur.ORDI-XPSP2.000\local settings\Temp effectué !

*** Traitement Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Suppression avec sauvegardes nouveaux fichiers Instant Access :

2)Recherche, création sauvegardes et suppression Heuristique :


* Dans "C:\WINDOWS\system32" *


* Dans "C:\Documents and Settings\Administrateur.ORDI-XPSP2.000\local settings\application data" * 


*** Sauvegarde du Registre vers dossier Safebackup ***

sauvegarde du Registre réalisée avec succès !

*** Nettoyage Registre ***

Nettoyage Registre Ok


*** Certificats ***

Certificat Egroup absent !
Certificat Electronic-Group supprimé !
Certificat Montorgueil absent !
Certificat OOO-Favorit supprimé !
Certificat Sunny-Day-Design-Ltdt absent !

*** Nettoyage terminé le 2008-11-19 à 14:20:22.21 ***

Destrio5 · Answer

---> Désinstalle Navilog1.

- Fais un scan en ligne ici https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr (Avec Internet Explorer).

- En bas à droite, clique sur Démarrer Online-scanner.

- Dans la nouvelle fenêtre qui s'affiche, clique sur J'accepte.

- Accepte les Contrôles ActiveX.

- Choisis Poste de travail pour le scan.

- Celui-ci terminé, sauvegarde (Choisis fichier texte) et poste le rapport.

- Pour t'aider à utiliser le scan en ligne :
https://www.malekal.com/scan-antivirus-ligne-nod32/#mozTocId291566

NOTE : Si tu reçois le message La licence de Kaspersky On-line Scanner est périmée, va dans Ajout/Suppression de programmes puis désinstalle On-Line Scanner, reconnecte-toi sur le site de Kaspersky pour retenter le scan en ligne.

- Lis ceci en cas de problème d'installation du Contrôle ActiveX :
http://cybersecurite.xooit.com/t123-Les-controles-ActiveX.htm

podox · Answer

salut,voici le lien,j'espere ces ce que tu m'a demandé.



file:///C:/Documents%20and%20Settings/Administrateur.ORDI-XPSP2.000/Mes%20documents/rapport%20scan%20kaspersky.html

Destrio5 · Answer

Je ne peux pas accéder à ton disque dur donc upload le fichier rapportscankaspersky.html qui se trouve dans Mes documents sur mediafire.

---> Uploader un fichier sur Mediafire :
&#9679; Rends-toi sur ce lien : https://www.mediafire.com/
&#9679; Clique en haut sur Upload files To Media fire. Choisis ensuite I want to upload without an account.
&#9679; Une fenêtre de ton explorateur windows va s'ouvrir. Navigue jusqu'au rapport que je te demande d'uploader, sélectionne-le puis clique sur ouvrir.
&#9679; Clique ensuite sur Upload.
&#9679; A droite de l'écran, choisis : upload to a new folder. Laisse le nom par défaut (= la date).
&#9679; Valide et laisse l'upload se faire.
&#9679; Clique sur View uploaded file et copie-moi l'url (= le lien) du nouvel onglet ou de la nouvelle fenêtre qui va s'ouvrir dans ton prochain message. Ainsi, je pourrais télécharger le rapport demandé.

podox · Answer

salut,voila le lien

https://www.mediafire.com/?sharekey=65ec2be4d58f3c88ab1eab3e9fa335ca00037384a9002bef

Destrio5 · Answer

Pour l'instant, je ne peux pas le télécharger à cause du site.

podox · Answer

oki,bon j'attend ta reponse alors^^

Destrio5 · Answer

1/

---> Menu Démarrer > Exécuter > Tu tapes Combofix /u et valide par Entrée.

---> Désinstalle les programmes suivants :
- UsbFix
- Adobe Acrobat 5.0

---> Installe Adobe Reader 9 :
https://get2.adobe.com/reader/otherversions/

---> Mets à jour Internet Explorer :
http://www.microsoft.com/downloads/details.aspx?FamilyId=9AE91EBE-3385-447C-8A30-081805B2F90B&displaylang=fr

---> Télécharge et installe CCleaner (N'installe pas la Yahoo Toolbar) :
* Lance-le. Va dans Outils puis Programmes de désinstallations.
* Sélectionne DAEMON Tools Toolbar puis clique sur Efface l'Entrée.
* Fais pareil avec Favorit et GamesBar 1.1.0.5.*


2/

---> Télécharge OTMoveIt3 (OldTimer) sur ton Bureau :
http://oldtimer.geekstogo.com/OTMoveIt3.exe

---> Double-clique sur OTMoveIt3.exe afin de le lancer.

---> Copie (Ctrl+C) le texte suivant ci-dessous : 





:processes
explorer.exe 

:services
a8yy2wkd

:files 
C:\WINDOWS\system32\CF19655.exe     

:commands
[purity]
[emptytemp]
[start explorer]
[reboot]





---> Colle (Ctrl+V) le texte précédemment copié dans le cadre Paste Instructions for Items to be Moved.

---> Clique maintenant sur le bouton MoveIt! puis ferme OTMoveIt3.

Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
Accepte en cliquant sur YES.

---> Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\
Le nom du rapport correspond au moment de sa création : date_heure.log 


3/

---> Supprime le dossier RSIT situé dans C:\

---> Refais un scan RSIT et poste les deux rapports.

podox · Answer

non rien dit :x

Destrio5 · Answer

Et oui, un peu de boulot XD

podox · Answer

voici le rapport de ot Error: Unable to interpret in the current context! Error: Unable to interpret in the current context! ========== SERVICES/DRIVERS ========== Unable to stop service a8yy2wkd . ========== FILES ========== C:\WINDOWS\system32\CF19655.exe moved successfully. ========== COMMANDS ========== File delete failed. C:\DOCUME~1\Administrateur.ORDI-XPSP2.000\Local Settings\Temp\~DF199C.tmp scheduled to be deleted on reboot. File delete failed. C:\DOCUME~1\Administrateur.ORDI-XPSP2.000\Local Settings\Temp\~DF1CAE.tmp scheduled to be deleted on reboot. File delete failed. C:\DOCUME~1\Administrateur.ORDI-XPSP2.000\Local Settings\Temp\~DF3D9D.tmp scheduled to be deleted on reboot. File delete failed. C:\DOCUME~1\Administrateur.ORDI-XPSP2.000\Local Settings\Temp\~DF3F58.tmp scheduled to be deleted on reboot. File delete failed. C:\DOCUME~1\Administrateur.ORDI-XPSP2.000\Local Settings\Temp\~DF8D3B.tmp scheduled to be deleted on reboot. File delete failed. C:\DOCUME~1\Administrateur.ORDI-XPSP2.000\Local Settings\Temp\~DFCBC0.tmp scheduled to be deleted on reboot. User's Temp folder emptied. User's Temporary Internet Files folder emptied. User's Internet Explorer cache folder emptied. Local Service Temp folder emptied. Local Service Temporary Internet Files folder emptied. Windows Temp folder emptied. FireFox cache emptied. Temp folders emptied. Explorer started successfully OTMoveIt3 by OldTimer - Version 1.0.7.1 log created on 11222008_193005

podox · Answer

voici info.txt de rsit

info.txt logfile of random's system information tool 1.04 2008-11-22 19:41:38

======Uninstall list======

-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Reader 9 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A90000000001}
Adobe Shockwave Player 11-->C:\WINDOWS\system32\adobe\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Adobe\SHOCKW~1\Install.log
Apple Mobile Device Support-->MsiExec.exe /I{44734179-8A79-4DEE-BB08-73037F065543}
Apple Software Update-->MsiExec.exe /I{B74F042E-E1B9-4A5B-8D46-387BB172F0A4}
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
Assistant de connexion Windows Live-->MsiExec.exe /I{AFA4E5FD-ED70-4D92-99D0-162FD56DC986}
ATI - Utilitaire de désinstallation du logiciel-->C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe
ATI Control Panel-->RunDll32 C:\PROGRA~1\FICHIE~1\InstallShield\engine\6\Intel 32\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe" 
ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
ATI HydraVision-->RunDll32 C:\PROGRA~1\FICHIE~1\InstallShield\engine\6\Intel 32\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3EA9D975-BFDC-4E8E-B88B-0446FBC8CA66}\setup.exe" 
AVG Anti-Spyware 7.5-->C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\Uninstall.exe
AVG Free 8.0-->C:\Program Files\AVG\AVG8\setup.exe /UNINSTALL
Barre d'outils MSN-->C:\Program Files\MSN Toolbar\01.01.2607.0\fr\mtbs.exe c
Battlefield Vietnam(TM)-->RunDll32 C:\PROGRA~1\FICHIE~1\InstallShield\engine\6\Intel 32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E35B3C63-E958-4E31-A178-95D22024109A}\setup.exe" -l0x40c 
Casino Inc-->RunDll32 C:\PROGRA~1\FICHIE~1\InstallShield\engine\6\Intel 32\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CE2A2504-46FD-4408-8999-5AF433EA0C66}\setup.exe" 
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
Code de la route-->"C:\Program Files\Anuman Interactive\Code de la route\unins000.exe"
Codeur Windows Media Série 9-->msiexec.exe /I {E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}
Codeur Windows Media Série 9-->MsiExec.exe /I{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}
Correctif pour Windows XP (KB914440)-->"C:\WINDOWS\$NtUninstallKB914440$\spuninst\spuninst.exe"
Counter-Strike: Source-->"C:\Program Files\Steam\steam.exe" steam://uninstall/240
Day of Defeat: Source-->"C:\Program Files\Steam\steam.exe" steam://uninstall/300
DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
Dofus 1.25.0-->C:\Program Files\Dofus\uninstall.exe
Dofus-Arena-->C:\Program Files\Ankama Games\DofusArenaBeta2\uninstall.exe
Google Toolbar for Internet Explorer-->MsiExec.exe /I{DBEA1034-5882-4A88-8033-81C4EF0CFA29}
Google Toolbar for Internet Explorer-->regsvr32 /u /s "c:\program files\google\googletoolbar2.dll"
HijackThis 2.0.2-->"C:\Program Files	rend micro\HijackThis.exe" /uninstall
Hotfix for Windows XP (KB915865)-->"C:\WINDOWS\$NtUninstallKB915865$\spuninst\spuninst.exe"
HP Customer Participation Program 7.0-->C:\Program Files\HP\Digital Imaging\ExtCapUninstall\hpzscr01.exe -datfile hpqhsc01.dat
HP Document Viewer 7.0-->C:\Program Files\HP\Digital Imaging\DocumentViewer\hpzscr01.exe -datfile hpqbud04.dat
HP Imaging Device Functions 7.0-->C:\Program Files\HP\Digital Imaging\DeviceManagement\hpzscr01.exe -datfile hpqbud01.dat
HP Photosmart Premier Software 6.5-->C:\Program Files\HP\Digital Imaging\uninstall\hpzscr01.exe -datfile hpqscr01.dat
HP Photosmart, Officejet and Deskjet 7.0.A-->C:\Program Files\HP\Digital Imaging\{BDBE2F3E-42DB-4d4a-8CB1-19BA765DBC6C}\setup\hpzscr01.exe -datfile hposcr11.dat
HP Software Update-->MsiExec.exe /X{BB85ED9C-AFC9-43BD-B8DC-258C3C7DF72E}
HP Solution Center 7.0-->C:\Program Files\HP\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat
Incoming-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Rage\Incoming\Uninst.isu"
Intel(R) PRO Network Connections Drivers-->C:\Program Files\Intel\DMIX\uninst\DxSetup.exe /x /qr /le C:\DOCUME~1\Administrateur.ORDI-XPSP2.000\Local Settings\Temp\PROSetDX\DMIX\DxUninst.log
iTunes-->MsiExec.exe /I{80FD852F-5AAC-4129-B931-06AAFFA43138}
Kaspersky Online Scanner-->C:\WINDOWS\system32\KASPER~1\KASPER~1\kavuninstall.exe
Kaspersky On-line Scanner-->C:\WINDOWS\system32\KASPER~1\KASPER~1\kavuninstall.exe
Kiwee Toolbar-->MsiExec.exe /X{12403F20-DE27-4067-B083-A42E8A6432BA}
Larousse Chambers Advanced Dictionary-->C:\WINDOWS\ISUN040C.EXE -f"C:\Program Files\Larousse Multimédia\LCAD\UNINSTgbil.isu" -c"C:\Program Files\Larousse Multimédia\LCAD\_UnInstall.dll"
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Mise à jour pour Windows XP (KB898461)-->"C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB904942)-->"C:\WINDOWS\$NtUninstallKB904942$\spuninst\spuninst.exe"
Mozilla Firefox (3.0.4)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MP3 Player Utilities 4.13-->MsiExec.exe /I{8B9852AF-B0B0-47B7-9BC5-89A95D77B6C9}
Norton Security Scan-->MsiExec.exe /I{1A8A214F-6BAC-4E01-A27D-25C19A484908}
Nostale Online FR (Remove)-->"C:\Nostale(FR)\unins000.exe"
OCR Software by I.R.I.S 7.0-->C:\Program Files\HP\Digital Imaging\OCR\hpzscr01.exe -datfile hpqbud11.dat
Pets Fun House-->"C:\Program Files\Gamenext\Pets Fun House\Uninstall.exe" "C:\Program Files\Gamenext\Pets Fun House\install.log"
Pro Evolution Soccer 2009-->MsiExec.exe /X{A8DB611A-D80E-450D-85F6-3ACDD164BE31}
PunkBuster pour Battlefield Vietnam-->RunDll32 C:\PROGRA~1\FICHIE~1\InstallShield\engine\6\Intel 32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D07643A3-CE41-4286-8C78-EB9C83E76DDB}\setup.exe" -l0x40c 
QuickTime-->MsiExec.exe /I{BFD96B89-B769-4CD6-B11E-E79FFD46F067}
Regressi-->MsiExec.exe /I{E2E164AB-1367-488F-8F1F-BA312DB2FF18}
SafeCast Shared Components-->C:\Program Files\Fichiers communs\Macrovision Shared\SafeCast\Install\CDAC13BA.EXE /uninstall
Shadow Of Memories (TM)-->C:\PROGRA~1\Konami\Shadow Of Memories\UNWISE.EXE C:\PROGRA~1\Konami\Shadow Of Memories\INSTALL.LOG
Skype™ 3.8-->MsiExec.exe /X{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}
SoundMAX-->RunDll32 C:\PROGRA~1\FICHIE~1\InstallShield\Professional\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F0A37341-D692-11D4-A984-009027EC0A9C}\setup.exe" -l0x40c  -removeonly
Steam-->MsiExec.exe /X{048298C9-A4D3-490B-9FF9-AB023A9238F3}
TD7 USB2.0 PC Camera (VC0323)-->RunDll32 C:\PROGRA~1\FICHIE~1\InstallShield\Professional\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{36820BCA-FC55-452E-9085-6E6F1F55508D}\Setup.exe" -l0x9 
Téléchargeur de Prince of Persia 1 - Sands of Time fr-->"C:\Program Files\Téléchargeur de Prince of Persia 1 - Sands of Time\unins000.exe"
Téléchargeur de Worms 4 Mayhem fr-->"C:\Program Files\Téléchargeur de Worms 4 Mayhem\unins000.exe"
UltraISO Premium V9.3-->"C:\Program Files\UltraISO\unins000.exe"
Wakfu-->C:\Program Files\Wakfu\uninstall.exe
WarRock-->C:\Program Files\InstallShield Installation Information\{00D15456-F679-4AD4-8BD2-56450D4C3F72}\setup.exe -runfromtemp -l0x0009 -removeonly
Westward-->"C:\Program Files\Gamenext\Westward\Uninstall.exe" "C:\Program Files\Gamenext\Westward\install.log"
Windows Live installer-->MsiExec.exe /X{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390}
Windows Live Messenger-->MsiExec.exe /X{BADF6744-3787-48F6-B8C9-4C4995401D65}
Wolfenstein - Enemy Territory-->C:\PROGRA~1\Wolfenstein - Enemy Territory\Uninstall\Unwise.exe /u C:\PROGRA~1\Wolfenstein - Enemy Territory\Uninstall\Install.log
Yahoo! Install Manager-->C:\WINDOWS\system32egsvr32 /u C:\PROGRA~1\Yahoo!\Common\yinsthelper.dll
Yahoo! Toolbar avec bloqueur de fenêtres pop-up-->C:\PROGRA~1\Yahoo!\Common\unyt.exe

======Security center information======

AV: AVG Anti-Virus Free

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%systemroot%\system32;%systemroot%;%systemroot%\system32\wbem;C:\Program Files\Intel\DMIX;C:\Program Files\QuickTime\QTSystem;C:\Program Files\ATI Technologies\ATI Control Panel
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 4 Stepping 3, GenuineIntel
"PROCESSOR_REVISION"=0403
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"CLASSPATH"=.;C:\Program Files\QuickTime\QTSystem\QTJava.zip
"QTJAVA"=C:\Program Files\QuickTime\QTSystem\QTJava.zip

-----------------EOF-----------------

podox · Answer

voici log.txt de rsit,

Logfile of random's system information tool 1.04 (written by random/random)
Run by Administrateur at 2008-11-22 19:41:13
Microsoft Windows XP Professionnel Service Pack 2
System drive C: has 16 GB (21%) free of 76 GB
Total RAM: 511 MB (20% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:41, on 2008-11-22
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Kiwee Toolbar2\1.5.131\kwtbaim.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\WINDOWS\ZSSnp211.exe
C:\WINDOWS\Domino.exe
C:\WINDOWS\VMSnap23.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\Larousse Multimédia\LCAD\bin\hiAksMultiling.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\PROGRA~1\Larousse Multimédia\Shared\bin\hisrv.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\Program Files\internet explorer\iexplore.exe
C:\PROGRA~1\AVG\AVG8\aAvgApi.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\Administrateur.ORDI-XPSP2.000\Bureau\RSIT.exe
C:\Program Files	rend micro\Administrateur.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Kiwee Toolbar - {6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - C:\Program Files\Kiwee Toolbar2\1.5.131\KiweeIEToolbar.dll
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Kiwee Toolbar - {6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - C:\Program Files\Kiwee Toolbar2\1.5.131\KiweeIEToolbar.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\avgtoolbar.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Barre d'outils MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar\01.01.2607.0\fr\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Kiwee Toolbar - {6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - C:\Program Files\Kiwee Toolbar2\1.5.131\KiweeIEToolbar.dll
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\avgtoolbar.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [KiweeHook] "C:\Program Files\Kiwee Toolbar2\1.5.131\kwtbaim.exe"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [ZSSnp211] C:\WINDOWS\ZSSnp211.exe
O4 - HKLM\..\Run: [Domino] C:\WINDOWS\Domino.exe
O4 - HKLM\..\Run: [BigDogPath323VMSnap] C:\WINDOWS\VMSnap23.exe
O4 - HKLM\..\Run: [BigDogPath323Domino] C:\WINDOWS\Domino.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\Steam.exe" -silent
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - Global Startup: Ask Larousse Chambers.lnk = ?
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\Microsoft Office\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\Skype4COM.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

Destrio5 · Answer

Une question, ton PC va comment ?

podox · Answer

j'ai plus  la page av2009 et sa lag moins donc oui il va bien mais sa allé deja bien depuis quelques jours^^

Destrio5 · Answer

Je relis tout le topic et je te compose une dernière procédure.

(Je vais me manger une glace avant, j'ai faim ^^)

podox · Answer

oki bonne app;

sinon j'ai detecté un uatre probleme lorsque j'allume pc il ya du son mais apres un lag ou lorsque je ferme un certain site qui commence par un d,j'ai plus de son est ce du a  l'antivrus 2009,pour ma part je pense pas trop.

Destrio5 · Answer

C'est quoi le site ?

Destrio5 · Answer

---> Télécharge et installe Everest Ultimate :
http://www.clubic.com/lancer-le-telechargement-25730-0-everest-ultimate.html

---> Lance-le, va dans "Ordinateur" puis "Résumé" et donne-nous le résumé. Pour prendre le résumé, utilise la fonction Rapport en haut de ton écran.

PS : Supprime ton adresse mail si elle apparaît dans le rapport.

podox · Answer

oki j'ai téléchargé everest puis lorsque je vais dans rapport on me porpose plusieurs choix "pages relatives au materiel";"pages relatives au logicels laquel je dois choisir.?

Destrio5 · Answer

Rapport Rapide Résumé

podox · Answer

voila je crois c'est ce que tu ma demandais sinon pour la procedure de antivrus 2009^^'?


 Ordinateur:  
   Type de système   PC multiprocesseur ACPI  
   Système d'exploitation   Microsoft Windows XP Professional  
   Service Pack du système   [ TRIAL VERSION ]  
   Internet Explorer   6.0.2900.2180 (IE 6.0 SP2)  
   DirectX   4.09.00.0904 (DirectX 9.0c)  
   Nom du système   ORDI-XPSP2  
   Nom de l'utilisateur   Administrateur  
   Domaine de connexion   [ TRIAL VERSION ]  
   Date / Heure   2008-11-23 / 13:14  
   
  Carte mère:  
   Type de processeur   Intel Pentium 4 630, 3000 MHz (15 x 200)  
   Nom de la carte mère   Asus P5P800 SE (4 PCI, 1 AGP, 4 DDR DIMM, Audio, Gigabit LAN)  
   Chipset de la carte mère   Intel Springdale i865PE  
   Mémoire système   [ TRIAL VERSION ]  
   DIMM1: ProMos/Mosel Vitelic   512 Mo PC3200 DDR SDRAM (2.5-3-3-8 @ 200 MHz) (2.0-2-2-6 @ 133 MHz)  
   Type de BIOS   AMI (08/03/05)  
   Port de communication   Port de communication (COM1)  
   Port de communication   Port imprimante ECP (LPT1)  
   
  Moniteur:  
   Carte vidéo   RADEON 9600 SERIES - Secondary (256 Mo)  
   Carte vidéo   RADEON 9600 SERIES (256 Mo)  
   Accélérateur 3D   ATI Radeon 9600 (RV350)  
   Moniteur   Emprex LM-1702 [17" LCD] (54580388)  
   
  Multimédia:  
   Carte audio   Analog Devices AD1888 @ Intel 82801EB ICH5 - AC'97 Audio Controller [A-2/A-3]  
   
  Stockage:  
   Contrôleur IDE   Contrôleur de stockage Ultra ATA Intel(R) 82801EB - 24DB  
   Contrôleur de stockage   AYMMWLV0 IDE Controller  
   Lecteur de disquettes   Lecteur de disquettes  
   Disque dur   MAXTOR STM380215A (80 Go, 7200 RPM, Ultra-ATA/100)  
   Lecteur optique   HL-DT-ST DVDRAM GSA-4165B (DVD+R9:4x, DVD-R9:4x, DVD+RW:16x/8x, DVD-RW:16x/6x, DVD-RAM:5x, DVD-ROM:16x, CD:40x/32x/48x DVD+RW/DVD-RW/DVD-RAM)  
   Lecteur optique   TWPQL 1YVST2JC1MN SCSI CdRom Device  
   Lecteur optique   TWPQL 1YVST2JC1MN SCSI CdRom Device  
   État des disques durs SMART   OK  
   
  Partitions:  
   C: (NTFS)   [ TRIAL VERSION ]  
   Taille totale   [ TRIAL VERSION ]  
   
  Entrée:  
   Clavier   Périphérique clavier PIH  
   Souris   Souris Microsoft PS/2  
   
  Réseau:  
   Adresse IP principale   [ TRIAL VERSION ]  
   Adresse MAC principale   00-13-D4-E9-8A-F4  
   Carte réseau   Intel(R) PRO/1000 MT Network Connection (82.2 [ TRIAL VERSION ])  
   
  Périphériques:  
   Imprimante   HP Photosmart C4100 series  
   Contrôleur USB1   Intel 82801EB ICH5 - USB Controller [A-2/A-3]  
   Contrôleur USB1   Intel 82801EB ICH5 - USB Controller [A-2/A-3]  
   Contrôleur USB1   Intel 82801EB ICH5 - USB Controller [A-2/A-3]  
   Contrôleur USB1   Intel 82801EB ICH5 - USB Controller [A-2/A-3]  
   Contrôleur USB2   Intel 82801EB ICH5 - Enhanced USB2 Controller [A-2/A-3]  
   Périphérique USB   Périphérique d'interface utilisateur USB  
   Périphérique USB   Périphérique d'interface utilisateur USB  
   Périphérique USB   Périphérique USB composite  
   Périphérique USB   USB2.0 Web Camera  
   
  DMI:  
   Distributeur du BIOS   American Megatrends Inc.  
   Version du BIOS   1001.010  
   Fabricant du système   System manufacturer  
   Nom du système   System Product Name  
   Version du système   System Version  
   Numéro de série du système   [ TRIAL VERSION ]  
   UUID du système   [ TRIAL VERSION ]  
   Fabricant de la carte mère   ASUSTeK Computer Inc.  
   Nom de la carte mère   P5P800-SE  
   Version de la carte mère   Rev 1.xx  
   Numéro de série de la carte mère   [ TRIAL VERSION ]  
   Fabricant du châssis   Chassis Manufacture  
   Version du châssis   Chassis Version  
   Numéro de série du châssis   [ TRIAL VERSION ]  
   Identifiant du châssis   [ TRIAL VERSION ]  
   Type du châssis   Desktop Case  
   Sockets mémoire (Total/Libres)   4 / 3  


Debug - PCI 

--------------------------------------------------------------------------------
 
     
  B00 D00 F00:   Intel 82865PE Memory Controller Hub [A-2]  
      
  Offset 000:   86 80 70 25 06 01 90 20 02 00 00 06 00 00 00 00  
  Offset 010:   08 00 00 CE 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 020:   00 00 00 00 00 00 00 00 00 00 00 00 43 10 F2 80  
  Offset 030:   00 00 00 00 E4 00 00 00 00 00 00 00 00 00 00 00  
  Offset 040:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 050:   00 02 08 00 40 80 1C 00 00 00 00 00 00 00 00 00  
  Offset 060:   00 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 070:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 080:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 090:   10 11 11 00 00 33 33 00 00 00 00 00 00 0A 38 00  
  Offset 0A0:   02 00 30 00 1B 4A 00 1F 12 03 00 00 00 00 00 00  
  Offset 0B0:   80 00 00 00 38 00 00 00 00 00 01 00 20 10 00 00  
  Offset 0C0:   00 00 00 00 00 20 0E 28 00 00 00 00 00 00 00 00  
  Offset 0D0:   02 28 04 0E 0B 0D 00 00 00 00 00 00 00 00 30 01  
  Offset 0E0:   00 00 00 00 09 A0 06 21 00 02 00 00 00 00 00 00  
  Offset 0F0:   00 00 00 00 02 00 00 00 68 0F 03 00 00 00 00 00  
   
  B00 D01 F00:   Intel 82865PE AGP Controller [A-2]  
      
  Offset 000:   86 80 71 25 07 01 A0 00 02 00 04 06 00 40 01 00  
  Offset 010:   00 00 00 00 00 00 00 00 00 01 01 40 D0 D0 A0 22  
  Offset 020:   E0 FB E0 FB 00 D0 F0 FA 00 00 00 00 00 00 00 00  
  Offset 030:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 00  
  Offset 040:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 050:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 060:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 070:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 080:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 090:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0B0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0C0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0E0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0F0:   00 00 00 00 00 00 00 00 68 0F 03 00 00 00 00 00  
   
  B00 D06 F00:   Intel 82865PE I/O Memory Interface [A-2]  
      
  Offset 000:   86 80 76 25 02 00 80 00 02 00 80 08 00 00 00 00  
  Offset 010:   00 00 CF FE 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 020:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 030:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 040:   43 65 10 04 00 00 00 00 04 00 00 00 00 00 00 00  
  Offset 050:   01 00 8F 00 02 01 80 00 00 00 00 00 00 00 00 00  
  Offset 060:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 070:   04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 080:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 090:   00 00 55 05 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 20 08 00  
  Offset 0B0:   00 00 00 00 F0 43 FC 7D 01 00 00 00 09 00 00 00  
  Offset 0C0:   00 08 00 00 20 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0D0:   00 00 00 00 00 00 00 00 FF FF FF FF FF FF FF 3F  
  Offset 0E0:   01 00 00 00 00 00 01 02 FF 0E 00 00 00 00 04 00  
  Offset 0F0:   00 0C 02 00 00 00 00 00 68 0F 03 00 74 FC 00 00  
   
  B00 D1D F00:   Intel 82801EB ICH5 - USB Controller [A-2/A-3]  
      
  Offset 000:   86 80 D2 24 05 00 80 02 02 00 03 0C 00 00 80 00  
  Offset 010:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 020:   01 B8 00 00 00 00 00 00 00 00 00 00 43 10 A6 80  
  Offset 030:   00 00 00 00 00 00 00 00 00 00 00 00 10 01 00 00  
  Offset 040:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 050:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 060:   10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 070:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 080:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 090:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0B0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0C0:   00 2F 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0E0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0F0:   00 00 00 00 00 00 00 00 66 0F 05 00 00 00 00 00  
   
  B00 D1D F01:   Intel 82801EB ICH5 - USB Controller [A-2/A-3]  
      
  Offset 000:   86 80 D4 24 05 00 80 02 02 00 03 0C 00 00 00 00  
  Offset 010:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 020:   01 C0 00 00 00 00 00 00 00 00 00 00 43 10 A6 80  
  Offset 030:   00 00 00 00 00 00 00 00 00 00 00 00 13 02 00 00  
  Offset 040:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 050:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 060:   10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 070:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 080:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 090:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0B0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0C0:   00 2F 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0E0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0F0:   00 00 00 00 00 00 00 00 66 0F 05 00 00 00 00 00  
   
  B00 D1D F02:   Intel 82801EB ICH5 - USB Controller [A-2/A-3]  
      
  Offset 000:   86 80 D7 24 05 00 80 02 02 00 03 0C 00 00 00 00  
  Offset 010:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 020:   01 C4 00 00 00 00 00 00 00 00 00 00 43 10 A6 80  
  Offset 030:   00 00 00 00 00 00 00 00 00 00 00 00 12 03 00 00  
  Offset 040:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 050:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 060:   10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 070:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 080:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 090:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0B0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0C0:   00 2F 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0E0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0F0:   00 00 00 00 00 00 00 00 66 0F 05 00 00 00 00 00  
   
  B00 D1D F03:   Intel 82801EB ICH5 - USB Controller [A-2/A-3]  
      
  Offset 000:   86 80 DE 24 05 00 80 02 02 00 03 0C 00 00 00 00  
  Offset 010:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 020:   01 C8 00 00 00 00 00 00 00 00 00 00 43 10 A6 80  
  Offset 030:   00 00 00 00 00 00 00 00 00 00 00 00 10 01 00 00  
  Offset 040:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 050:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 060:   10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 070:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 080:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 090:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0B0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0C0:   00 2F 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0E0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0F0:   00 00 00 00 00 00 00 00 66 0F 05 00 00 00 00 00  
   
  B00 D1D F07:   Intel 82801EB ICH5 - Enhanced USB2 Controller [A-2/A-3]  
      
  Offset 000:   86 80 DD 24 06 01 90 02 02 20 03 0C 00 00 00 00  
  Offset 010:   00 FC DF FB 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 020:   00 00 00 00 00 00 00 00 00 00 00 00 43 10 A6 80  
  Offset 030:   00 00 00 00 50 00 00 00 00 00 00 00 17 04 00 00  
  Offset 040:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 050:   01 58 C2 C9 00 00 00 00 0A 00 A0 20 00 00 00 00  
  Offset 060:   20 20 FF 01 00 00 00 00 01 00 00 00 00 00 00 C0  
  Offset 070:   00 00 DF 3F 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 080:   00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00  
  Offset 090:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0B0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0C0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0D0:   00 00 00 00 00 00 00 00 55 55 00 00 00 00 00 00  
  Offset 0E0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0F0:   00 80 00 00 88 83 40 00 66 0F 05 00 06 14 00 00  
   
  B00 D1E F00:   Intel 82801EB I/O Controller Hub 5 (ICH5) [A-2/A-3]  
      
  Offset 000:   86 80 4E 24 07 01 80 00 C2 00 04 06 00 00 01 00  
  Offset 010:   00 00 00 00 00 00 00 00 00 02 02 40 E0 E0 80 22  
  Offset 020:   F0 FB F0 FB F0 FF 00 00 00 00 00 00 00 00 00 00  
  Offset 030:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 00  
  Offset 040:   02 28 30 76 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 050:   02 64 73 00 00 00 00 00 50 01 34 00 00 00 00 00  
  Offset 060:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 070:   10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 080:   00 00 A0 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 090:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0B0:   01 00 02 00 00 00 C0 00 00 00 00 00 00 00 00 00  
  Offset 0C0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0E0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0F0:   00 00 00 00 00 00 00 00 66 0F 05 00 00 00 55 31  
   
  B00 D1F F00:   Intel 82801EB ICH5 - LPC Bridge [A-2/A-3]  
      
  Offset 000:   86 80 D0 24 0F 00 80 02 02 00 01 06 00 00 80 00  
  Offset 010:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 020:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 030:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 040:   01 08 00 00 10 00 00 00 00 00 00 00 00 00 00 00  
  Offset 050:   00 00 00 00 00 00 00 00 81 04 00 00 10 00 00 00  
  Offset 060:   8A 85 85 83 D0 00 00 00 80 80 85 8B 00 00 00 00  
  Offset 070:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 080:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 090:   FF FC 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0A0:   28 02 00 00 00 00 00 00 0D 00 00 00 00 03 00 00  
  Offset 0B0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0C0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0D0:   86 21 20 00 02 0F 00 00 04 00 00 00 00 00 00 00  
  Offset 0E0:   00 00 00 80 00 00 08 14 33 22 11 00 00 00 67 45  
  Offset 0F0:   00 00 44 00 04 00 00 00 66 0F 05 3E 00 00 00 00  
   
  B00 D1F F01:   Intel 82801EB ICH5 - ATA-100 IDE Controller [A-2/A-3]  
      
  Offset 000:   86 80 DB 24 07 00 80 02 02 8A 01 01 00 00 00 00  
  Offset 010:   01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00  
  Offset 020:   01 FC 00 00 00 FC EF FF 00 00 00 00 43 10 A6 80  
  Offset 030:   00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00  
  Offset 040:   07 A3 03 A3 00 00 00 00 05 00 01 02 00 00 00 00  
  Offset 050:   00 00 00 00 30 10 00 00 00 00 00 00 00 00 00 00  
  Offset 060:   08 00 00 00 00 00 00 00 08 00 00 00 00 00 00 00  
  Offset 070:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 080:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 090:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0B0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0C0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0E0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0F0:   00 00 00 00 00 00 00 00 66 0F 05 00 00 00 00 00  
   
  B00 D1F F03:   Intel 82801EB ICH5 - SMBus Controller [A-2/A-3]  
      
  Offset 000:   86 80 D3 24 01 00 80 02 02 00 05 0C 00 00 00 00  
  Offset 010:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 020:   01 04 00 00 00 00 00 00 00 00 00 00 43 10 A6 80  
  Offset 030:   00 00 00 00 00 00 00 00 00 00 00 00 05 02 00 00  
  Offset 040:   01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 050:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 060:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 070:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 080:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 090:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0B0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0C0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0E0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0F0:   00 00 00 00 00 00 00 00 66 0F 05 00 00 00 00 00  
   
  B00 D1F F05:   Intel 82801EB ICH5 - AC'97 Audio Controller [A-2/A-3]  
      
  Offset 000:   86 80 D5 24 07 00 90 02 02 00 01 04 00 00 00 00  
  Offset 010:   01 B4 00 00 01 B0 00 00 00 F8 DF FB 00 F4 DF FB  
  Offset 020:   00 00 00 00 00 00 00 00 00 00 00 00 43 10 0D 81  
  Offset 030:   00 00 00 00 50 00 00 00 00 00 00 00 11 02 00 00  
  Offset 040:   09 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 050:   01 00 C2 C9 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 060:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 070:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 080:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 090:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0B0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0C0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0E0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0F0:   00 00 00 00 00 00 00 00 66 0F 05 00 00 00 00 00  
   
  B01 D00 F00:   Tul Radeon 9600 Pro Video Adapter  
      
  Offset 000:   02 10 50 41 07 01 B0 02 00 00 00 03 04 FF 80 00  
  Offset 010:   08 00 00 D0 01 D0 00 00 00 00 EE FB 00 00 00 00  
  Offset 020:   00 00 00 00 00 00 00 00 00 00 00 00 8C 14 64 20  
  Offset 030:   00 00 EC FB 58 00 00 00 00 00 00 00 10 01 08 00  
  Offset 040:   00 00 00 00 00 00 00 00 00 00 00 00 8C 14 64 20  
  Offset 050:   01 00 02 06 00 00 00 00 02 50 30 00 1B 02 00 FF  
  Offset 060:   12 43 00 1F 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 070:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 080:   05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 090:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0B0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0C0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0E0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0F0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
   
  B01 D00 F01:   Tul Radeon 9600 Pro - Secondary Video Adapter  
      
  Offset 000:   02 10 70 41 07 00 B0 02 00 00 80 03 04 40 00 00  
  Offset 010:   08 00 00 E0 00 00 EF FB 00 00 00 00 00 00 00 00  
  Offset 020:   00 00 00 00 00 00 00 00 00 00 00 00 8C 14 65 20  
  Offset 030:   00 00 00 00 50 00 00 00 00 00 00 00 FF 00 08 00  
  Offset 040:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 050:   01 00 02 06 00 00 00 00 02 50 30 00 1B 02 00 FF  
  Offset 060:   00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 070:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 080:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 090:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0B0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0C0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0E0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0F0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
   
  B02 D05 F00:   Intel 82540EM Based Gigabit Network Adapter  
      
  Offset 000:   86 80 0E 10 07 01 30 02 02 00 00 02 04 40 00 00  
  Offset 010:   00 00 FE FB 00 00 00 00 01 E8 00 00 00 00 00 00  
  Offset 020:   00 00 00 00 00 00 00 00 00 00 00 00 43 10 EE 80  
  Offset 030:   00 00 00 00 DC 00 00 00 00 00 00 00 16 01 FF 00  
  Offset 040:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 050:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 060:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 070:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 080:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 090:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0B0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0C0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 0D0:   00 00 00 00 00 00 00 00 00 00 00 00 01 E4 22 C8  
  Offset 0E0:   00 20 00 FF 07 F0 02 00 00 00 40 04 00 00 00 00  
  Offset 0F0:   05 00 80 00 00 00 00 00 00 00 00 00 00 00 00 00  
   
  PCI-8086-2570:   Intel i848/865/875/E7210 MMR  
      
  Offset 00:   04 08 08 08 08 08 08 08 00 00 00 00 00 00 00 00  
  Offset 10:   11 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 20:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 30:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 40:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 50:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 60:   05 05 A0 D2 C6 42 14 00 71 02 10 20 05 D0 00 00  


Debug - Video BIOS 

--------------------------------------------------------------------------------
 
     
  C000:0000   U.h...........................IBM............... 761295520......  
  C000:0040   ??......&.......2005/10/12 14:35.........N......DR(7....d ......  
  C000:0080   ..Radeon 9600 256MB 148C PAA12EAA.SEA 817D33...(C) 1988-2003, AT  
  C000:00C0   I Technologies Inc. BK-ATI VER008.017D.033.000. paa12eaa.sea v61  
  C000:0100   1 .V350AGP DGD1UN..OEM VER.000.000..l.......l...>[..............  
  C000:0140   ....d PA........7x.n......f.T...$TVS........F.$.G....^.........  
  C000:0180   ....................PCIR..PA........h.......ATI RADEON 9600 PRO.  
  C000:01C0   .y......UN.......................y......UN......................  
  C000:0200   .....#..........q.......Yuu.....................................  
  C000:0240   ................................................................  
  C000:0280   ....................................................0 ..3Q0`....  
  C000:02C0   ......OD..P ....P`........X ..........| ..........X`........hA..  
  C000:0300   ......J.........J........0....@.A.....=..x.....|...............  
  C000:0340   ............................ ...........+.......f..B............  
  C000:0380   .....`..........fK..........fK....!.....I............U..........  
  C000:03C0   .U....&.........../.....m.....%......."".......M.......[..u..`..

Destrio5 · Answer

Installe ceci :
http://dlsvr.asus.com/pub/ASUS/misc/audio/ad1888/AD1888_5410_WHQL.zip

podox · Answer

c'est bon.

Destrio5 · Answer

Toujours des problèmes de son ?

podox · Answer

oui,jdois redemarré le pc?

Destrio5 · Answer

Oui.

Je relirai tout ce qu'on a fait plus tard.

podox · Answer

oki,bon je le rdemarre est je te repond plus trad^^.

Destrio5 · Answer

---> Télécharge SDFix (créé par AndyManchesta) sur ton Bureau :
http://downloads.andymanchesta.com/RemovalTools/SDFix.exe
- Double-clique sur SDFix.exe et choisis Install pour l'extraire dans un dossier dédié sur le Bureau. 
- Redémarre ton ordinateur en mode sans échec.

---> Pour redémarrer en mode sans échec :
- Redémarre ton PC.
- Au démarrage, tapote sur F8 (F5 sur certains PC) juste après l'affichage du BIOS et juste avant le chargement de Windows.
- Dans le menu d'options avancées, choisis Mode sans échec.
- Choisis ton compte.

---> Déroule la liste des instructions ci-dessous :
- Ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double-clique sur RunThis.bat pour lancer le script.
- Appuie sur Y pour commencer le processus de nettoyage.
- Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer.
- Appuie sur une touche pour redémarrer le PC.
- Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers.
- Après le chargement du Bureau, l'outil terminera son travail et affichera Finished.
- Appuie sur une touche pour finir l'exécution du script et charger les icônes de ton Bureau.
- Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt.
- Enfin, copie/colle le contenu du fichier Report.txt dans ta prochaine réponse.

podox · Answer

oki je vais fiare sa sinon toujours probleme de son u_u.

podox · Answer

j'ai un probleme lorsque je lance en mode sans echec,des "formules apparaissent puis un ecran noir avec un trait d'union et sa bloque a ce moment la.

Destrio5 · Answer

Tu n'arrives pas au Bureau ?

podox · Answer

oui je peut pas y accedé

Destrio5 · Answer

Passe un coup de ceci :
https://download.bleepingcomputer.com/sUBs/SafeBootKeyRepair.exe

podox · Answer

une fenetre s'ouvre en me disant que c'est pas possible de telecharger car site pas dispo,ressayé ulterieurement.

sinon sur dailymotion,j'arrive pas a visionné les vidéos,est ce du a adore reader 9?

Destrio5 · Answer

"une fenetre s'ouvre en me disant que c'est pas possible de telecharger car site pas dispo,ressayé ulterieurement. "
---> Le site fonctionne très bien.

podox · Answer

j'ai ressayé sa fait la meme chose

internet explorer ne peut télécharger safebootkeyrepair.exe de download.bleepingcomputeut.com.
internet expolrer n'a pas pu ouvrir ce site internet.le site requis n'est pas disponible ou n'a pas pu etre toruvé.Réessayez ulterieurement.

Destrio5 · Answer

Essaie avec Mozilla Firefox.

podox · Answer

marche pas cette fois si c'est un 404,not found ='(

Destrio5 · Answer

C'est bizarre, refais ComboFix :
http://www.commentcamarche.net/forum/affich 9437978 antivirus 2009#3

podox · Answer

oki,je refais,tu aura la reponse dans environ 20 minutes^^

podox · Answer

rrrr,j'arrive pas a ouvrir combofix,je sais pas pourquoi, un triangle jaune apparait avec comme message combofix endommagé...

Destrio5 · Answer

Et si tu le renommes en Combo-Fix ?

podox · Answer

c'est deja fait ,(cf,probleme avec adware),
je met combo-fix1?

Destrio5 · Answer

(cf,probleme avec adware) ---> Où ?

podox · Answer

regarde page 1 c'est les premiér messages.

Destrio5 · Answer

Tu peux retélécharger ComboFix ?

podox · Answer

rhoo,j'ai le meme problème que pour le logicel que tu ma passé sauf que message d'erreur s'affiche pas.La barre de téléchargement reste blanche et aucune information sur le temps de téléchargement etc..

Destrio5 · Answer

---> Télécharge Toolbar S&D (Team IDN) sur ton Bureau.
* Lance l'installation du programme en exécutant le fichier téléchargé.
* Double-clique maintenant sur le raccourci de Toolbar S&D.
* Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.
* Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.
* Poste le rapport généré. (C:\TB.txt)

podox · Answer

desolé de t'annoncé que j'ai encore ce problèeme...='(

Destrio5 · Answer

Essaie ce lien :
https://www.mediafire.com/?sharekey=424caed9c295f93dab1eab3e9fa335caad2ee8e82b5cdc85

podox · Answer

marche toujours pas,tu veut un screen pour voir ça fait quoi?
si oui,tu peut me dire comment faire pour t'en mettre un.

podox · Answer

-----------\  ToolBar S&D 1.2.5   XP/Vista

   Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
   X86-based PC ( Multiprocessor Free :               Intel(R) Pentium(R) 4 CPU 3.00GHz )
   BIOS : BIOS Date: 08/03/05 12:13:08 Ver: 08.00.10
   USER : Administrateur ( Administrator )
   BOOT : Normal boot
   Antivirus : AVG Anti-Virus Free 8.0 (Activated)
   A:\ (USB)
   C:\ (Local Disk) - NTFS - Total:74 Go (Free:14 Go)
   D:\ (CD or DVD)
   E:\ (CD or DVD)
   G:\ (CD or DVD)

   "C:\ToolBar SD" ( MAJ : 20-11-2008|20:25 )
   Option : [1] ( 2008-11-24|21:50 )

   -----------\  Recherche de Fichiers / Dossiers ...

   C:\DOCUME~1\ALLUSE~1.WIN\MENUDM~1\PROGRA~1\GamesBar

   -----------\  [..\Internet Explorer\Main]

   [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
   "Start Page"="https://www.google.fr/?gws_rd=ssl"
   "Search Page"="https://www.google.com/?gws_rd=ssl"
   "Local Page"="C:\WINDOWS\system32\blank.htm"
   "Search Bar"="http://www.google.com/toolbar/ie8/sidebar.html"

   [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
   "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
   "Default_Search_URL"="http://www.google.com/toolbar/ie8/sidebar.html"
   "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Start Page"="https://fr.yahoo.com/"


   --------------------\  Recherche d'autres infections

   --------------------\  Cracks & Keygens ..

   C:\DOCUME~1\Administrateur.ORDI-XPSP2.000\Bureau\UltraISO.Premium.Edition.v9.3.0.2600\keygen.exe



   1 - "C:\ToolBar SD\TB_1.txt" - 2008-11-24|21:50 - Option : [1]

   -----------\  Fin du rapport a 21:50:57.28

Destrio5 · Answer

---> Relance ToolBar S&D, fais l'option 2 et poste le rapport.

podox · Answer

-----------\  ToolBar S&D 1.2.5   XP/Vista

   Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
   X86-based PC ( Multiprocessor Free :               Intel(R) Pentium(R) 4 CPU 3.00GHz )
   BIOS : BIOS Date: 08/03/05 12:13:08 Ver: 08.00.10
   USER : Administrateur ( Administrator )
   BOOT : Normal boot
   Antivirus : AVG Anti-Virus Free 8.0 (Activated)
   A:\ (USB)
   C:\ (Local Disk) - NTFS - Total:74 Go (Free:14 Go)
   D:\ (CD or DVD)
   E:\ (CD or DVD)
   G:\ (CD or DVD)

   "C:\ToolBar SD" ( MAJ : 20-11-2008|20:25 )
   Option : [2] ( 2008-11-25|12:07 )

   -----------\ SUPPRESSION

   Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\MENUDM~1\PROGRA~1\GamesBar

   -----------\  Recherche de Fichiers / Dossiers ...


   -----------\  [..\Internet Explorer\Main]

   [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
   "Start Page"="https://www.google.fr/?gws_rd=ssl"
   "Search Page"="https://www.google.com/?gws_rd=ssl"
   "Local Page"="C:\WINDOWS\system32\blank.htm"
   "Search Bar"="http://www.google.com/toolbar/ie8/sidebar.html"

   [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
   "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
   "Default_Search_URL"="http://www.google.com/toolbar/ie8/sidebar.html"
   "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Start Page"="https://www.msn.com/fr-fr/"


   --------------------\  Recherche d'autres infections

   --------------------\  Cracks & Keygens ..

   C:\DOCUME~1\Administrateur.ORDI-XPSP2.000\Bureau\UltraISO.Premium.Edition.v9.3.0.2600\keygen.exe



   1 - "C:\ToolBar SD\TB_1.txt" - 2008-11-24|21:50 - Option : [1]
   2 - "C:\ToolBar SD\TB_2.txt" - 2008-11-25|12:09 - Option : [2]

   -----------\  Fin du rapport a 12:09:52.87

Destrio5 · Answer

Et pour le mode sans échec ?

podox · Answer

euh,jvais essayé ce souar pour le mode sans échec

Destrio5 · Answer

Ok ;)

Antivirus 2009

96 réponses

Discussions similaires