problème gestionnaire de taches

Question

Youpla Boum !

Voila j'ai un petit problème avec mon gestionnaire de taches qui ne veut pas s'ouvrir.
Voila donc le messages que ça m'affiche.
[img]http://images4.hiboox.com/images/4708/3080929040d0eec290b2f31b1444103b.png[/img]

Sans compter que quand mon bureau apparait quelque seconde plus tard la barre de taches et tout les icônes disparaissent et je ne peus donc plus rien faire.

S'il vous plait aidez moi à régler ce problème.

J'ai fais un scan avec Avast mais ça ne change rien.

tchaning · Answer

ta des virus 

telecharge COMBOX FIX , SDFIX , CCLEANER ,

http://sdfix.net/SDFix.exe

http://download.bleepingcomputer.com/sUBs/ComboFix.exe

http://ftpclubic22.clubic.com/...

tu les lance dans l'ordre.

Pour SDFIX , après l'installation ,redemarrer le pc en mode sans echec (F8 au demarrage du pc )
ensuite apres l'ouverture de session, vas dans  c:\sdfix\ et lance Run this bat, et valide par "Y" 

laisse le travailler . il va redemarrer et encore travailler 

lance ensuite CCleaner (nettoie application , cookies , registre : faire une premiere sauvegarde , )

Pour finir envoie moi tous les rapports

eternien · Answer

le site SDfix ne fonctionne pas.

tchaning · Answer

https://www.tayo.fr/download/sdfix

Utilisateur anonyme · Answer

Hi,

Avant de lancer des fix comme sa,fait ceci:

télécharge hijackthis
->  enregistre la cible sous .... "le bureau" 

-> Fais un double-clic sur "HJTInstall.exe" afin de lancer l'installation

-> Clique sur Install ensuite sur "I Accept"

-> Clique sur" Do a scan system and save log file"

-> Le bloc-notes s'ouvrira, fais un copier-coller de tout son contenu ici dans ta prochaine réponse 

->Tuto hijackthis(Merci à Balltrap34)

Alut.

eternien · Answer

Voila le copier-coller

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:41 Reloaded, on 18/11/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Unable to get Internet Explorer version!
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
E:\Avast\aswUpdSv.exe
E:\Avast\ashServ.exe
C:\WINDOWS\system32\userinit.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\MSI\Live Update 3\LMonitor.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\system32\hphmon05.exe
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
E:\Avast\ashDisp.exe
C:\Program Files\Electronic Arts\EADM\Core.exe
C:\Program Files\Gadwin Systems\PrintScreen\PrintScreen.exe
C:\Program Files\Fichiers communs\Nero\Lib\NMIndexStoreSvr.exe
C:\Program Files\DNA\btdna.exe
C:\Documents and Settings\Administrateur\Application Data\gadcom\gadcom.exe
J:\eMule\emule.exe
C:\Program Files\Xfire\xfire.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\IoctlSvc.exe
C:\Program Files\Wireless 802.11g Monitor\WLService.exe
C:\Program Files\Wireless 802.11g Monitor\WLanCfgG.exe
C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe
E:\Avast\ashMaiSv.exe
E:\Avast\ashWebSv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32undll32.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = 
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.crystaliz.org
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.fr/?gws_rd=ssl
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.crystaliz.org
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Reloaded
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - Default URLSearchHook is missing
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: Ask Toolbar - {F4D76F09-7896-458a-890F-E1F05C46069F} - C:\Program Files\AskPBar\bar\1.bin\ASKPBAR.DLL
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [WinSys2] C:\WINDOWS\system32\winsys2.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [LiveMonitor] C:\Program Files\MSI\Live Update 3\LMonitor.exe
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\WINDOWS\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [36X Raid Configurer] C:\WINDOWS\system32\xRaidSetup.exe boot
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\Hewlett-Packard\{D946675D-1D6C-4dc8-9E0D-B4B8EAA30EAA}\hphupd05.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HP Software Update] "c:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\system32\hphmon05.exe
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Documents and Settings\Administrateur\Bureau	itay\certificat de non gage\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [RavTimeXP] C:\WINDOWS\Mstray.exe
O4 - HKLM\..\Run: [avast!] E:\Avast\ashDisp.exe
O4 - HKCU\..\Run: [EA Core] C:\Program Files\Electronic Arts\EADM\Core.exe -silent
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Gadwin PrintScreen] C:\Program Files\Gadwin Systems\PrintScreen\PrintScreen.exe /nosplash
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [msdefender] C:\WINDOWS\system32\msdefender.exe
O4 - HKCU\..\Run: [gadcom] "C:\Documents and Settings\Administrateur\Application Data\gadcom\gadcom.exe" 61A847B5BBF72810358B2B27128065E9C084320161C4661227A755E9C2933154389A
O4 - HKCU\..\Run: [RealAV.exe] C:\Program Files\RealAV\RealAV.exe
O4 - HKCU\..\Run: [eMuleAutoStart] J:\eMule\emule.exe -AutoStart
O4 - Startup: Xfire.lnk = C:\Program Files\Xfire\xfire.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O10 - Unknown file in Winsock LSP: c:\docume~1\admini~1\locals~1	emp
tdll64.dll
O10 - Unknown file in Winsock LSP: c:\docume~1\admini~1\locals~1	emp
tdll64.dll
O13 - DefaultPrefix: 
O13 - WWW Prefix: 
O13 - Home Prefix: 
O13 - Mosaic Prefix: 
O13 - FTP Prefix: 
O13 - Gopher Prefix: 
O17 - HKLM\System\CCS\Services\Tcpip\..\{32A86DC7-E6A3-4FD4-A4BB-E819D2B46CA0}: NameServer = 213.36.80.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{32A86DC7-E6A3-4FD4-A4BB-E819D2B46CA0}: NameServer = 213.36.80.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{32A86DC7-E6A3-4FD4-A4BB-E819D2B46CA0}: NameServer = 213.36.80.1
O17 - HKLM\System\CS3\Services\Tcpip\..\{32A86DC7-E6A3-4FD4-A4BB-E819D2B46CA0}: NameServer = 213.36.80.1
O23 - Service: avast! iAVS4 Control Service (aswupdsv) - ALWIL Software - E:\Avast\aswUpdSv.exe
O23 - Service: avast! Antivirus (avast! antivirus) - ALWIL Software - E:\Avast\ashServ.exe
O23 - Service: avast! Mail Scanner (avast! mail scanner) - ALWIL Software - E:\Avast\ashMaiSv.exe
O23 - Service: avast! Web Scanner (avast! web scanner) - ALWIL Software - E:\Avast\ashWebSv.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: R54G Wireless Service - Unknown owner - C:\Program Files\Wireless 802.11g Monitor\WLService.exe

tchaning · Answer

fixe 

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = 
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.crystaliz.org 
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.fr 
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.fr 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.crystaliz.org 
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Reloaded 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 

O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll 
O3 - Toolbar: Ask Toolbar - {F4D76F09-7896-458a-890F-E1F05C46069F} - C:\Program Files\AskPBar\bar\1.bin\ASKPBAR.DLL




as tu lancer CCLEANER  ???

Utilisateur anonyme · Answer

Hi,

Combofix. Attention, ce logiciel est très puissant, une mauvaise utilisation peut faire des dégâts...

Fais exactement ce qui suit :



Télécharge ComboFix (de sUBs) sur ton Bureau (et pas ailleurs !) :
Fais un clic droit sur ce lien et choisis "enregistrer la cible sous ... " : dans la fenêtre qui s'ouvre tape C-Fix, choisis le bureau comme destination et valide : 

--------------------------------------------- [ ! ATTENTION ! ] ----------------------------------------------------------
!! déconnecte toi, ferme toutes tes applications en cours et DESACTIVE TOUTES TES DEFENCES (anti-virus, antispyware, pare-feu) le temps de la manipulation (si jamais tu en as et que je ne les ai pas vu sur le rapport hijackthis....)

---> Surtout, si tu rencontres des difficultés à ce niveau là, dis le moi avant de poursuivre...

Tuto ici : TUTO
---------------------------------------------------------------------------------------------------------------------------------

Ensuite :

Double-clique sur C-Fix.exe (= combofix.exe ) .

Appuie sur une touche pour démarrer le scan .

Attention : n'utilise pas ta souris ni ton clavier pendant que le programme tourne. Cela pourrait figer l'ordi ---> si un message d'erreur windows apparait à un moment : clique sur la croix rouge en haut à droite de la fenêtre pour la fermer

Le rapport sera crée dans: C:\Combofix.txt , poste le ici stp 

Alut.

Utilisateur anonyme · Answer

Hi,

ne fixe aucune ligne .

NE L'ECOUTE PAS .

merci.

Alut.

eternien · Answer

Alors l'analyse avec CCcleaner donne ça

ANALYSE COMPLETE - (22.803 secs)
------------------------------------------------------------------------------------------
265,1MB ont été supprimés. (Taille approximative)
------------------------------------------------------------------------------------------

Détails des fichiers à supprimer (Note: AUCUN fichier n'a pour l'instant été supprimé)
------------------------------------------------------------------------------------------
Fichiers Temporaires d'Internet Explorer (fichiers 295) 1,69MB
C:\Documents and Settings\Administrateur\Cookies\administrateur@85.17.166[1].txt 99 bytes
C:\Documents and Settings\Administrateur\Cookies\administrateur@doubleclick[1].txt 83 bytes
C:\Documents and Settings\Administrateur\Cookies\administrateur@game-advertising-online[1].txt 111 bytes
C:\Documents and Settings\Administrateur\Cookies\administrateur@quantserve[2].txt 191 bytes
C:\Documents and Settings\Administrateur\Cookies\administrateur@xf[2].txt 502 bytes
C:\Documents and Settings\Administrateur\Cookies\administrateur@xf[3].txt 502 bytes
Marqué pour l'effacement: C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5\index.dat
Marqué pour l'effacement: C:\Documents and Settings\Administrateur\Cookies\index.dat
Marqué pour l'effacement: C:\Documents and Settings\Administrateur\Local Settings\Historique\History.IE5\desktop.ini
Marqué pour l'effacement: C:\Documents and Settings\Administrateur\Local Settings\Historique\History.IE5\index.dat
Marqué pour l'effacement: C:\Documents and Settings\Administrateur\Local Settings\Historique\History.IE5\MSHist012008031620080317\index.dat
Marqué pour l'effacement: C:\Documents and Settings\Administrateur\Local Settings\Historique\History.IE5\MSHist012008091420080915\index.dat
Marqué pour l'effacement: C:\Documents and Settings\Administrateur\Local Settings\Historique\History.IE5\MSHist012008102720081103\index.dat
Marqué pour l'effacement: C:\Documents and Settings\Administrateur\Local Settings\Historique\History.IE5\MSHist012008110320081110\index.dat
Marqué pour l'effacement: C:\Documents and Settings\Administrateur\Local Settings\Historique\History.IE5\MSHist012008111020081117\index.dat
Marqué pour l'effacement: C:\Documents and Settings\Administrateur\Local Settings\Historique\History.IE5\MSHist012008111820081119\index.dat
C:\WINDOWS\TEMP\setup.iss 639 bytes
C:\WINDOWS\TEMP\uninstall.iss 647 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\   mon000.log 102 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\   mon001.log 102 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\   mon002.log 102 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\   mon003.log 102 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\   mon004.log 102 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\   mon005.log 102 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\   mon006.log 102 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\   mon007.log 102 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\   mon008.log 102 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\   mon009.log 102 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\   mon010.log 102 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\   mon011.log 102 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\   mon012.log 102 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\   mon013.log 102 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\   mon014.log 102 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\   mon015.log 102 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\   mon016.log 102 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\   mon017.log 102 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\   mon018.log 102 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\   mon019.log 101 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\2dd2c7.mst 42,50KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\APR2007_d3dx10_33_x86.cab 0,67MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\APR2007_d3dx9_33_x86.cab 1,54MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\APR2007_xinput_x86.cab 55,57KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Arabic.bin 20,48KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\browserview-16a6f60.htm 145 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\browserview-17b2ca0.htm 28,61KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\browserview-17b4bd8.htm 4,47KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\browserview-17b5cb0.htm 4,47KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\browserview-17b5f20.htm 4,47KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\browserview-17bb208.htm 28,55KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\browserview-17be150.htm 4,47KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\browserview-17becd8.htm 4,47KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\browserview-17c8f88.htm 4,47KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\browserview-17cf4c8.htm 4,47KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\browserview-17cf9f0.htm 4,47KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\browserview-1845450.htm 4,47KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\browserview-184c060.htm 4,47KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\browserview-1853840.htm 28,37KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\browserview-186fa40.htm 4,47KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\browserview-1879450.htm 28,61KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\browserview-1897960.htm 4,47KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\browserview-18acc88.htm 4,47KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\browserview-18b61b8.htm 4,47KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\browserview-18b74b0.htm 28,44KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\browserview-18b7db8.htm 4,47KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\browserview-dd3b90.htm 145 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\browserview-dd41c8.htm 145 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\browserview-dd4440.htm 145 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\browserview-dd4958.htm 145 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\browserview-dd5128.htm 145 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\browserview-dd5158.htm 145 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\browserview-dd5d08.htm 145 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\browserview-dd6020.htm 145 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\browserview-dd6380.htm 145 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\browserview-dd6708.htm 145 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\browserview-dd7a68.htm 145 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\browserview-dd7ad0.htm 145 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\browserview-dd7b88.htm 145 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\browserview-dd7cc0.htm 145 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\browserview-dd7e50.htm 145 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\browserview-dd81a8.htm 145 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\browserview-dd8478.htm 145 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\browserview-dd8598.htm 145 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\browserview-dd8838.htm 145 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\CM-PMHEH.EXF 20,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\CmdLineExt02.dll 36,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Cookies\administrateur@adserver.aol[1].txt 102 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\Cookies\administrateur@aol[1].txt 105 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\Cookies\administrateur@client.winamp[1].txt 620 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\Cookies\administrateur@services.winamp[1].txt 630 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\Cookies\administrateur@store.steampowered[1].txt 93 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\Czech.bin 23,74KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Danish.bin 22,25KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\dd_depcheckdotnetfx30.txt 0,18MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\dd_dotnetfx3install.txt 72,53KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\dd_wcf_retCA27B9.txt 4,92KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\dd_wcf_retMSI28B2.txt 0,74MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\dd_WF_3.0_x86retMSI2A54.txt 0,23MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\dd_wpf_retMSI28DF.txt 0,70MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\drm_dialogs.dll 64,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\drm_dyndata_7380006.dll 0,20MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DSETUP.dll 75,35KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\dsetup32.dll 1,60MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Dutch.bin 25,14KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW215.tmp 48,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW217.tmp 28,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW218.tmp 48,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW21A.tmp 28,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW21C.tmp 48,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW21E.tmp 28,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW220.tmp 48,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW222.tmp 28,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW223.tmp 48,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW225.tmp 28,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW226.tmp 48,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW228.tmp 28,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW22A.tmp 48,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW22C.tmp 28,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW231.tmp 48,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW233.tmp 28,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW238.tmp 48,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW23A.tmp 48,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW23B.tmp 28,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW23C.tmp 28,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW240.tmp 48,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW241.tmp 48,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW243.tmp 28,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW244.tmp 28,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW248.tmp 48,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW24A.tmp 28,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW24B.tmp 48,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW24D.tmp 28,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW24F.tmp 48,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW251.tmp 28,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW254.tmp 48,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW256.tmp 48,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW257.tmp 28,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW258.tmp 28,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW25A.tmp 48,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW25C.tmp 48,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW25D.tmp 28,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW25E.tmp 28,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW263.tmp 48,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW265.tmp 28,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW266.tmp 48,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW268.tmp 28,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW26B.tmp 48,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW26D.tmp 28,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW27.tmp 48,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW272.tmp 48,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW274.tmp 28,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW279.tmp 48,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW27B.tmp 28,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW28.tmp 48,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW280.tmp 48,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW282.tmp 28,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW287.tmp 48,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW289.tmp 28,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW28E.tmp 48,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW29.tmp 28,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW290.tmp 28,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW295.tmp 48,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW297.tmp 28,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW29C.tmp 48,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW29E.tmp 28,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW2A1.tmp 48,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW2A3.tmp 28,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW2A5.tmp 48,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW2A7.tmp 28,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW2AC.tmp 48,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW2AE.tmp 28,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW2B.tmp 28,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW2B3.tmp 48,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW2B5.tmp 28,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW2BA.tmp 48,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW2BC.tmp 28,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW2C1.tmp 48,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW2C3.tmp 28,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW2C8.tmp 48,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW2CA.tmp 28,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW2CF.tmp 48,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW2D.tmp 48,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW2D1.tmp 28,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW2D6.tmp 48,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW2D8.tmp 28,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW2DD.tmp 48,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW2DF.tmp 28,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW2E4.tmp 48,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW2E6.tmp 28,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW2EB.tmp 48,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW2ED.tmp 28,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW2F.tmp 28,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW2F2.tmp 48,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW2F4.tmp 28,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW2F9.tmp 48,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DW2FB.tmp 28,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\dxdllreg_x86.cab 44,24KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\Apr2005_d3dx9_25_x64.cab 1,29MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\Apr2005_d3dx9_25_x86.cab 1,03MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\Apr2006_d3dx9_30_x64.cab 1,34MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\Apr2006_d3dx9_30_x86.cab 1,07MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\Apr2006_MDX1_x86.cab 0,88MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\Apr2006_MDX1_x86_Archive.cab 3,97MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\Apr2006_XACT_x64.cab 0,17MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\Apr2006_XACT_x86.cab 0,13MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\Apr2006_xinput_x64.cab 88,23KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\Apr2006_xinput_x86.cab 48,10KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\APR2007_d3dx10_33_x64.cab 0,67MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\APR2007_d3dx10_33_x86.cab 0,67MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\APR2007_d3dx9_33_x64.cab 1,54MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\APR2007_d3dx9_33_x86.cab 1,53MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\APR2007_XACT_x64.cab 0,19MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\APR2007_XACT_x86.cab 0,15MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\APR2007_xinput_x64.cab 97,72KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\APR2007_xinput_x86.cab 55,22KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\Aug2005_d3dx9_27_x64.cab 1,29MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\Aug2005_d3dx9_27_x86.cab 1,03MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\AUG2006_XACT_x64.cab 0,18MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\AUG2006_XACT_x86.cab 0,13MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\AUG2006_xinput_x64.cab 88,27KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\AUG2006_xinput_x86.cab 48,15KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\AUG2007_d3dx10_35_x64.cab 0,82MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\AUG2007_d3dx10_35_x86.cab 0,76MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\AUG2007_d3dx9_35_x64.cab 1,72MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\AUG2007_d3dx9_35_x86.cab 1,63MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\AUG2007_XACT_x64.cab 0,19MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\AUG2007_XACT_x86.cab 0,15MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\BDANT.cab 1,11MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\BDAXP.cab 0,93MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\Coupon.xps 0,17MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\Dec2005_d3dx9_28_x64.cab 1,30MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\Dec2005_d3dx9_28_x86.cab 1,03MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\DEC2006_d3dx10_00_x64.cab 0,21MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\DEC2006_d3dx10_00_x86.cab 0,19MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\DEC2006_d3dx9_32_x64.cab 1,50MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\DEC2006_d3dx9_32_x86.cab 1,50MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\DEC2006_XACT_x64.cab 0,19MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\DEC2006_XACT_x86.cab 0,14MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\DSETUP.dll 95,01KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\dsetup32.dll 1,62MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\dxdllreg_x86.cab 46,58KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\dxnt.cab 12,7MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\DXSETUP.exe 0,50MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\dxupdate.cab 95,62KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\Feb2005_d3dx9_24_x64.cab 1,19MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\Feb2005_d3dx9_24_x86.cab 0,97MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\Feb2006_d3dx9_29_x64.cab 1,30MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\Feb2006_d3dx9_29_x86.cab 1,04MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\Feb2006_XACT_x64.cab 0,17MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\Feb2006_XACT_x86.cab 0,13MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\FEB2007_XACT_x64.cab 0,19MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\FEB2007_XACT_x86.cab 0,14MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\Jun2005_d3dx9_26_x64.cab 1,28MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\Jun2005_d3dx9_26_x86.cab 1,02MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\JUN2006_XACT_x64.cab 0,18MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\JUN2006_XACT_x86.cab 0,13MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\JUN2007_d3dx10_34_x64.cab 0,67MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\JUN2007_d3dx10_34_x86.cab 0,67MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\JUN2007_d3dx9_34_x64.cab 1,54MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\JUN2007_d3dx9_34_x86.cab 1,54MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\JUN2007_XACT_x64.cab 0,19MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\JUN2007_XACT_x86.cab 0,15MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\Jun2008_d3dx10_38_x64.cab 0,83MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\Jun2008_d3dx10_38_x86.cab 0,81MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\Jun2008_d3dx9_38_x64.cab 1,71MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\Jun2008_d3dx9_38_x86.cab 1,40MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\Jun2008_X3DAudio_x64.cab 57,03KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\Jun2008_X3DAudio_x86.cab 24,56KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\Jun2008_XACT_x64.cab 0,12MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\Jun2008_XACT_x86.cab 94,12KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\Jun2008_XAudio_x64.cab 0,26MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\Jun2008_XAudio_x86.cab 0,26MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\Mar2008_d3dx10_37_x64.cab 0,81MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\Mar2008_d3dx10_37_x86.cab 0,78MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\Mar2008_d3dx9_37_x64.cab 1,69MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\Mar2008_d3dx9_37_x86.cab 1,38MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\Mar2008_X3DAudio_x64.cab 56,94KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\Mar2008_X3DAudio_x86.cab 24,53KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\Mar2008_XACT_x64.cab 0,12MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\Mar2008_XACT_x86.cab 94,71KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\Mar2008_XAudio_x64.cab 0,24MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\Mar2008_XAudio_x86.cab 0,22MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\NOV2007_d3dx10_36_x64.cab 0,83MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\NOV2007_d3dx10_36_x86.cab 0,77MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\NOV2007_d3dx9_36_x64.cab 1,72MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\NOV2007_d3dx9_36_x86.cab 1,63MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\NOV2007_X3DAudio_x64.cab 48,23KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\NOV2007_X3DAudio_x86.cab 21,23KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\NOV2007_XACT_x64.cab 0,19MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\NOV2007_XACT_x86.cab 0,14MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\Oct2005_xinput_x64.cab 87,19KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\Oct2005_xinput_x86.cab 47,47KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\OCT2006_d3dx9_31_x64.cab 1,35MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\OCT2006_d3dx9_31_x86.cab 1,08MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\OCT2006_XACT_x64.cab 0,18MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXREDIST\OCT2006_XACT_x86.cab 0,13MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\DXSETUP.exe 0,48MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\dxupdate.cab 83,87KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\English.bin 21,40KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Finnish.bin 22,32KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\French.bin 26,60KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\G4WL\dotnetfx3.exe 50,3MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\G4WL\dotnetfx3_x64.exe 90,1MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\G4WL\msiexec.exe 77,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\G4WL\vcredist_x86.exe 2,60MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\G4WL\XLiveRedist01.02.0241.00.msi 19,1MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\German.bin 25,15KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Greek.bin 24,49KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Hebrew.bin 19,09KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Historique\History.IE5\desktop.ini 113 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\Hungarian.bin 25,47KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\ins52.tmp 0,45MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\ispA4.tmp\_Setup.dll 0,35MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Italian.bin 26,77KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Japanese.bin 23,73KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\java_install_reg.log 208 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\jusched.log 2,80KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Korean.bin 19,66KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Norwegian.bin 21,45KB
C:\Documents and Settings\Administrateur\Local Settings\Temp
ro.log\log\ShellManager_Log.txt 0,37MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Perflib_Perfdata_5f8.dat 16,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Perflib_Perfdata_628.dat 16,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Perflib_Perfdata_654.dat 16,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Perflib_Perfdata_65c.dat 16,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Perflib_Perfdata_68c.dat 16,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Perflib_Perfdata_770.dat 16,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\plugtmp\plugin-1 0 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\Polish.bin 23,65KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Portuguese(Brazil).bin 24,48KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Portuguese.bin 25,64KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\qmgr.cab 77,52KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\qmgr.inf 2,02KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Russian.bin 25,51KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\setA0.tmp 0,12MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\SimChin.bin 16,02KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\SIntf16.dll 11,78KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\SIntf32.dll 19,46KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Spanish.bin 27,10KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\SWEDISH.bin 23,52KB
C:\Documents and Settings\Administrateur\Local Settings\Temp	emp.ani 13,27KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\0HUJWDY7\CAC9MZMJ.swf 25,16KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\0HUJWDY7\capsule_231x87[1].jpg 10,34KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\0HUJWDY7\capsule_sm_120[10].jpg 2,24KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\0HUJWDY7\capsule_sm_120[1].jpg 2,58KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\0HUJWDY7\capsule_sm_120[2].jpg 2,24KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\0HUJWDY7\capsule_sm_120[3].jpg 2,53KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\0HUJWDY7\capsule_sm_120[4].jpg 2,09KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\0HUJWDY7\capsule_sm_120[5].jpg 2,34KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\0HUJWDY7\capsule_sm_120[6].jpg 2,66KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\0HUJWDY7\capsule_sm_120[7].jpg 2,39KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\0HUJWDY7\capsule_sm_120[8].jpg 2,16KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\0HUJWDY7\capsule_sm_120[9].jpg 3,05KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\0HUJWDY7\desktop.ini 67 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\0HUJWDY7\header[1].css 2,79KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\0HUJWDY7\home_area_extras_gifts[1].jpg 3,46KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\0HUJWDY7\iconExternalLink[1].gif 56 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\0HUJWDY7\jserrorreport[1].js 859 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\0HUJWDY7\listArea_tab_focus_l[1].gif 179 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\0HUJWDY7\listArea_tab_l[1].gif 179 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\0HUJWDY7\more[1].jpg 1,38KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\0HUJWDY7\print_ongreen[1].gif 1,53KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\0HUJWDY7\shoutcast[1].js 19,55KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\0HUJWDY7	vConfigImage[1].gif 304 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\0HUJWDY7	vsearchbg[1].gif 146 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\0HUJWDY7\upgrade_box[1].jpg 16,14KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\41SDGVU1\adsonar[1].js 5,67KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\41SDGVU1\capsule_467x181[1].jpg 25,26KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\41SDGVU1\capsule_467x181[2].jpg 19,31KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\41SDGVU1\capsule_lg[1].swf 3,16KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\41SDGVU1\capsule_sm_120[1].jpg 2,52KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\41SDGVU1\capsule_sm_120[2].jpg 2,46KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\41SDGVU1\capsule_sm_120[3].jpg 2,55KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\41SDGVU1\capsule_sm_120[4].jpg 2,17KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\41SDGVU1\capsule_sm_120[5].jpg 1,99KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\41SDGVU1\capsule_sm_120[6].jpg 2,31KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\41SDGVU1\capsule_sm_120[7].jpg 2,23KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\41SDGVU1\capsule_sm_120[8].jpg 2,80KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\41SDGVU1\capsule_sm_120[9].jpg 2,51KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\41SDGVU1\desktop.ini 67 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\41SDGVU1\greyGradDirectory[1].gif 149 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\41SDGVU1\h2_under[1].gif 45 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\41SDGVU1\headerRightCurve[1].gif 479 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\41SDGVU1\home_area_extras_merch[1].jpg 1,77KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\41SDGVU1\home_area_extras_penny[1].jpg 4,62KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\41SDGVU1\ico_arrow_blue[1].gif 113 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\41SDGVU1\search[1].gif 97 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\41SDGVU1\shoutCastLogoS3B24V1[1].jpg 6,54KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\41SDGVU1\shoutcast_radio_ajaxcalls[1].js 2,32KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\41SDGVU1\styles_global[1].css 8,12KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\41SDGVU1\swfobject[1].js 8,66KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\4TCFCTCT\addyn_3[1] 18,43KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\4TCFCTCT\banner_demo[1].gif 1,53KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\4TCFCTCT\bookmark[1].gif 176 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\4TCFCTCT\btn_search[1].gif 409 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\4TCFCTCT\capsule_467x181[1].jpg 18,41KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\4TCFCTCT\capsule_467x181[2].jpg 17,20KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\4TCFCTCT\capsule_sm_120[1].jpg 2,50KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\4TCFCTCT\capsule_sm_120[2].jpg 2,27KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\4TCFCTCT\capsule_sm_120[3].jpg 2,30KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\4TCFCTCT\capsule_sm_120[4].jpg 2,18KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\4TCFCTCT\capsule_sm_120[5].jpg 2,27KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\4TCFCTCT\capsule_sm_120[6].jpg 1,57KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\4TCFCTCT\capsule_sm_120[7].jpg 2,23KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\4TCFCTCT\capsule_sm_120[8].jpg 2,57KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\4TCFCTCT\col_center_bg[1].jpg 3,90KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\4TCFCTCT\desktop.ini 67 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\4TCFCTCT\headerMidPxl[1].gif 158 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\4TCFCTCT\header[1].js 2 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\4TCFCTCT\listArea_tab_focus_r[1].gif 70 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\4TCFCTCT\main[1].js 1,97KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\4TCFCTCT\omniunih[1].js 36,45KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\4TCFCTCT\shoutcastradio[1].js 10,60KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\4TCFCTCT\spotlight_l4d_intro[1].jpg 3,55KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\4TCFCTCT\store.steampowered[1].htm 40,58KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\4TCFCTCT\styles_home[1].css 4,72KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\4TCFCTCT\update[1].inf 312 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\desktop.ini 67 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\GFMZGNCB\aolMusicLogo[1].jpg 24,46KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\GFMZGNCB\background[1].gif 1,19KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\GFMZGNCB\banner_video[1].gif 1,54KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\GFMZGNCB\capsule_231x87[1].jpg 6,19KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\GFMZGNCB\capsule_467x181[1].jpg 30,38KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\GFMZGNCB\capsule_sm_120[1].jpg 2,25KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\GFMZGNCB\capsule_sm_120[2].jpg 2,83KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\GFMZGNCB\capsule_sm_120[3].jpg 2,69KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\GFMZGNCB\capsule_sm_120[4].jpg 2,78KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\GFMZGNCB\capsule_sm_120[5].jpg 2,23KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\GFMZGNCB\capsule_sm_120[6].jpg 2,51KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\GFMZGNCB\capsule_sm_120[7].jpg 2,82KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\GFMZGNCB\capsule_sm_120[8].jpg 2,26KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\GFMZGNCB\capsule_sm_120[9].jpg 2,69KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\GFMZGNCB\desktop.ini 67 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\GFMZGNCB\listArea_bottom[1].gif 964 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\GFMZGNCB\listArea_tab_r[1].gif 70 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\GFMZGNCB\logo_valve_footer[1].jpg 1,33KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\GFMZGNCB\prototype-1.6.0.2[1].js 0,12MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\GFMZGNCB\search[1].gif 97 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\GFMZGNCB\shoutcast_radio_events[1].js 3,59KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\GFMZGNCB\shrink[1].jpg 1,36KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\GFMZGNCB\steam_logo_whiteongreen[1].gif 561 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\GFMZGNCB\styles_tabs[1].css 5,54KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\GFMZGNCB	uneInBtn[1].gif 518 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\GFMZGNCB\winamp_js_lib[1].js 16,01KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Thai.bin 21,46KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\TradChin.bin 16,55KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\Turkish.bin 21,73KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\utt192.tmp 0 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\utt193.tmp 0 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\utt193.tmp.bat 72 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\uxeventlog.txt 4,93KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\WT123.tmp 0,35MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\WT124.tmp 0,37MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\WT13.tmp 0,35MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\WT14.tmp 0,37MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\WT28.tmp 0,35MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\WT29.tmp 0,37MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\WT3.tmp 0,35MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\WT4.tmp 0,37MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\_is11D.tmp 0,21MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\_is137.tmp 0,21MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\_is17.tmp 0,24MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\_is3.tmp 0,24MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\_is8.exe 0,44MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\_isdelet.ini 236 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\{11BDA8EC-67AA-4ACD-80F8-0D43895D6100}\{F78AC3C0-578C-49AB-BD4E-3107A6036A13}\Aller sur GhostRecon.com.url 20 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\{11BDA8EC-67AA-4ACD-80F8-0D43895D6100}\{F78AC3C0-578C-49AB-BD4E-3107A6036A13}\Aller sur Ubi.com.url 20 bytes
C:\Documents and Settings\Administrateur\Local Settings\Temp\{A530D184-C73F-476A-A9CA-472EBDB60932}\ISSetup.dll 0,47MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\{A530D184-C73F-476A-A9CA-472EBDB60932}\_Setup.dll 0,37MB
C:\Documents and Settings\Administrateur\Local Settings\Temp\~DF9397.tmp 16,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\~DFA756.tmp 80,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\~DFADF.tmp 16,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\~DFC7B8.tmp 16,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\~DFC884.tmp 16,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\~DFCA4C.tmp 16,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\~DFD1A2.tmp 16,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\~DFDF30.tmp 16,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\~DFF1E6.tmp 16,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\~DFFF77.tmp 80,00KB
C:\Documents and Settings\Administrateur\Local Settings\Temp\~e5.0001 58,56KB
C:\WINDOWS\MiniDump\Mini090508-01.dmp 93,99KB
C:\WINDOWS\MiniDump\Mini110208-01.dmp 94,14KB
C:\WINDOWS\MiniDump\Mini110208-02.dmp 94,14KB
C:\WINDOWS\MiniDump\Mini110708-01.dmp 94,14KB
C:\WINDOWS\MiniDump\Mini111308-01.dmp 68,92KB
C:\WINDOWS\system32\wbem\Logs\FrameWork.log 519 bytes
C:\WINDOWS\system32\wbem\Logs\mofcomp.log 13,24KB
C:\WINDOWS\system32\wbem\Logseplog.log 400 bytes
C:\WINDOWS\system32\wbem\Logs\setup.log 4,88KB
C:\WINDOWS\system32\wbem\Logs\wbemcore.log 142 bytes
C:\WINDOWS\system32\wbem\Logs\wbemess.log 25,29KB
C:\WINDOWS\system32\wbem\Logs\wbemprox.log 1,93KB
C:\WINDOWS\system32\wbem\Logs\WinMgmt.log 94 bytes
C:\WINDOWS\system32\wbem\Logs\wmiadap.log 5,88KB
C:\WINDOWS\system32\wbem\Logs\wmiprov.log 6,56KB
C:\WINDOWS\system32\wbem\Logs\wbemess.lo_ 64,16KB
C:\WINDOWS\0.log 0 bytes
C:\WINDOWS\atcl01setup.log 180 bytes
C:\WINDOWS\audio.log 206 bytes
C:\WINDOWS\cmsetacl.log 200 bytes
C:\WINDOWS\COM+.log 3,02KB
C:\WINDOWS\comsetup.log 30,55KB
C:\WINDOWS\DIFx.log 1,54KB
C:\WINDOWS\DirectX.log 0,33MB
C:\WINDOWS\DtcInstall.log 133 bytes
C:\WINDOWS\FaxSetup.log 47,39KB
C:\WINDOWS\ie7_main.log 46,57KB
C:\WINDOWS\iis6.log 0,11MB
C:\WINDOWS\imsins.log 4,65KB
C:\WINDOWS\jraid.log 194 bytes
C:\WINDOWS\KB888111.log 4,41KB
C:\WINDOWS\KB918899.log 584 bytes
C:\WINDOWS\LAN.log 174 bytes
C:\WINDOWS\msmqinst.log 26,99KB
C:\WINDOWS
etfxocm.log 9,45KB
C:\WINDOWS
tdtcsetup.log 19,38KB
C:\WINDOWS\ocgen.log 22,13KB
C:\WINDOWS\oobeact.log 52 bytes
C:\WINDOWS\Q818966.log 410 bytes
C:\WINDOWSegopt.log 2,24KB
C:\WINDOWS\sessmgr.setup.log 1 022 bytes
C:\WINDOWS\setupact.log 60 bytes
C:\WINDOWS\setupapi.log 15,17KB
C:\WINDOWS\setuperr.log 0 bytes
C:\WINDOWS\Sti_Trace.log 0 bytes
C:\WINDOWS	soc.log 32,93KB
C:\WINDOWS\wiadebug.log 215 bytes
C:\WINDOWS\wiaservc.log 50 bytes
C:\WINDOWS\WindowsUpdate.log 73 bytes
C:\WINDOWS\wmsetup.log 29,79KB
C:\WINDOWS\wmsetup10.log 1,06KB
C:\WINDOWS\imsins.BAK 2,34KB
C:\WINDOWS\Active Setup Log.txt 698 bytes
C:\WINDOWS
tbtlog.txt 0,21MB
C:\WINDOWS\Debug\blastcln.log 286 bytes
C:\WINDOWS\Debug\NetSetup.LOG 4,78KB
C:\WINDOWS\Debug\UserMode\userenv.log 0,19MB
C:\WINDOWS\Debug\UserMode\userenv.bak 0,33MB
C:\WINDOWS\security\logs\backup.log 3,54KB
C:\WINDOWS\security\logs\SceRoot.log 622 bytes
C:\WINDOWS\security\logs\scesetup.log 0,60MB
C:\WINDOWS\security\logs\scecomp.old 326 bytes
Cache Internet de Firefox/Mozilla (8 fichiers) 0,43MB
Cookie supprimé: commentcamarche.net
Cookie supprimé: xiti.com
Cookie supprimé: google.fr
Cookie supprimé: google.com
Cookie supprimé: www.tayo.fr
Cookie supprimé: clickintext.net
Cookie supprimé: advertising.com
Cookie supprimé: simpleomobile.fr
Cookie supprimé: www.simpleomobile.fr
Cookie supprimé: ad.zanox.com
Cookie supprimé: www.debitel.fr
Cookie supprimé: doubleclick.net
Cookie supprimé: aimfar.solution.weborama.fr
Cookie supprimé: weborama.fr
Cookie supprimé: tracking.publicidees.com
Cookie supprimé: fastclick.net
Cookie supprimé: apmebf.com
Cookie supprimé: 01net.com
Cookie supprimé: www.01net.com
Cookie supprimé: cybermonitor.com
Cookie supprimé: yahoo.com
Cookie supprimé: track.webtrekk.de
Cookie supprimé: tradedoubler.com
Cookie supprimé: www.clubic.com
Cookie supprimé: clubic.com
Cookie supprimé: gameduell.fr
Cookie supprimé: smartadserver.com
Cookie supprimé: ad.yieldmanager.com
Cookie supprimé: mediaplex.com
Cookie supprimé: serving-sys.com
Cookie supprimé: bs.serving-sys.com
Cookie supprimé: aus2.mozilla.org
Cookie supprimé: www.malekal.com
Cookie supprimé: forum.telecharger.01net.com
C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\jxi3034h.default\downloads.rdf 7,88KB
C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\jxi3034h.default\downloads.sqlite 12,00KB
C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\jxi3034h.default\history.dat 0,77MB
C:\Documents and Settings\Administrateur\Application Data\Sun\Java\Deployment\cache\6.0\13\70d0290d-48a52b00-5.5.8.0- 0,80MB
C:\Documents and Settings\Administrateur\Application Data\Sun\Java\Deployment\cache\6.0\13\70d0290d-48a52b00-5.5.8.0-.idx 89,72KB
C:\Documents and Settings\Administrateur\Application Data\Sun\Java\Deployment\cache\6.0\16\79130b10-6aeb1be3 6,74KB
C:\Documents and Settings\Administrateur\Application Data\Sun\Java\Deployment\cache\6.0\16\79130b10-6aeb1be3.idx 391 bytes
C:\Documents and Settings\Administrateur\Application Data\Sun\Java\Deployment\cache\6.0\host\1a1b9da2-5ec6a094.hst 12 bytes
C:\Documents and Settings\Administrateur\Application Data\Sun\Java\Deployment\cache\6.0\host\1ea2474-12c8614e.hst 15 bytes
C:\Documents and Settings\Administrateur\Application Data\Sun\Java\Deployment\cache\6.0\host\6a3f784b-18ba7944.hst 10 bytes
C:\Documents and Settings\Administrateur\Application Data\Sun\Java\Deployment\cache\6.0\lastAccessed 1 bytes
C:\Documents and Settings\Administrateur\Application Data\Macromedia\Flash Player\#SharedObjects\KM7N9LBH\a69.g.akamai.net\AlloCine_wall.sol 48 bytes
C:\Documents and Settings\Administrateur\Application Data\Macromedia\Flash Player\#SharedObjects\KM7N9LBH\a69.g.akamai.net\Preferences.sol 109 bytes
C:\Documents and Settings\Administrateur\Application Data\Macromedia\Flash Player\#SharedObjects\KM7N9LBH\adaptv.vo.llnwd.net\o15\client\AdPlayer8-3.1_009551.swf\adap.tv.sol 53 bytes
C:\Documents and Settings\Administrateur\Application Data\Macromedia\Flash Player\#SharedObjects\KM7N9LBH\affiliatevista.com\settings.sol 123 bytes
C:\Documents and Settings\Administrateur\Application Data\Macromedia\Flash Player\#SharedObjects\KM7N9LBH\bannerfarm.ace.advertising.com\ft2693-13.sol 74 bytes
C:\Documents and Settings\Administrateur\Application Data\Macromedia\Flash Player\#SharedObjects\KM7N9LBH\bannerfarm.ace.advertising.com\ft2699-4.sol 73 bytes
C:\Documents and Settings\Administrateur\Application Data\Macromedia\Flash Player\#SharedObjects\KM7N9LBH\bin.clearspring.com\clearspring.sol 61 bytes
C:\Documents and Settings\Administrateur\Application Data\Macromedia\Flash Player\#SharedObjects\KM7N9LBH\core.videoegg.com\#ve\admanager.sol 73 bytes
C:\Documents and Settings\Administrateur\Application Data\Macromedia\Flash Player\#SharedObjects\KM7N9LBH\d.yimg.com\static.video.yahoo.com\yep\vyc_player.swf\yep_player.sol 67 bytes
C:\Documents and Settings\Administrateur\Application Data\Macromedia\Flash Player\#SharedObjects\KM7N9LBH\d.yimg.com\VolumePrefs.sol 55 bytes
C:\Documents and Settings\Administrateur\Application Data\Macromedia\Flash Player\#SharedObjects\KM7N9LBH\d.yimg.com\YEPBWPrefs.sol 71 bytes
C:\Documents and Settings\Administrateur\Application Data\Macromedia\Flash Player\#SharedObjects\KM7N9LBH\ds.serving-sys.com\0807autoExpandBouygues993307.sol 127 bytes
C:\Documents and Settings\Administrateur\Application Data\Macromedia\Flash Player\#SharedObjects\KM7N9LBH\earth.google.com\datastore.swf\googleEarthSettings.sol 41 bytes
C:\Documents and Settings\Administrateur\Application Data\Macromedia\Flash Player\#SharedObjects\KM7N9LBH\embed.redtube.com\player\xmoov.sol 36 bytes
C:\Documents and Settings\Administrateur\Application Data\Macromedia\Flash Player\#SharedObjects\KM7N9LBH\embed.redtube.com\player\xmoov_redtube_original.sol 78 bytes
C:\Documents and Settings\Administrateur\Application Data\Macromedia\Flash Player\#SharedObjects\KM7N9LBH\fr.esperanto.mtvi.com\cookie.sol 98 bytes
C:\Documents and Settings\Administrateur\Application Data\Macromedia\Flash Player\#SharedObjects\KM7N9LBH\fr.esperanto.mtvi.com\UserPrefs.sol 85 bytes
C:\Documents and Settings\Administrateur\Application Data\Macromedia\Flash Player\#SharedObjects\KM7N9LBH\fr.youtube.com\soundData.sol 58 bytes
C:\Documents and Settings\Administrateur\Application Data\Macromedia\Flash Player\#SharedObjects\KM7N9LBH\g1.esperanto.mtvi.com\cookie.sol 98 bytes
C:\Documents and Settings\Administrateur\Application Data\Macromedia\Flash Player\#SharedObjects\KM7N9LBH\g1.esperanto.mtvi.com\UserPrefs.sol 85 bytes
C:\Documents and Settings\Administrateur\Application Data\Macromedia\Flash Player\#SharedObjects\KM7N9LBH\gdata.youtube.com\soundData.sol 58 bytes
C:\Documents and Settings\Administrateur\Application Data\Macromedia\Flash Player\#SharedObjects\KM7N9LBH\images.video.msn.com\flash\soapbox1_1.swf\CountryCode.sol 58 bytes
C:\Documents and Settings\Administrateur\Application Data\Macromedia\Flash Player\#SharedObjects\KM7N9LBH\include.classistatic.com\include\c3js\classifiedsel1\FLASH\getMachId.swf\mach_data.sol 177 bytes
C:\Documents and Settings\Administrateur\Application Data\Macromedia\Flash Player\#SharedObjects\KM7N9LBH\include.ebaystatic.com\aw\pics\c3js\classifiedsel1\FLASH\getMachId.swf\mach_data.sol 153 bytes
C:\Documents and Settings\Administrateur\Application Data\Macromedia\Flash Player\#SharedObjects\KM7N9LBH\lads.myspace.com\videos\Main.swf\preferences.sol 136 bytes
C:\Documents and Settings\Administrateur\Application Data\Macromedia\Flash Player\#SharedObjects\KM7N9LBH\ma-tvideo.france2.fr\swf\p3\epix.swf\KewegoEPIX_userData.sol 277 bytes
C:\Documents and Settings\Administrateur\Application Data\Macromedia\Flash Player\#SharedObjects\KM7N9LBH\media.jambocast.com\jcp\JamboPlayer.swf\Lightningcast.sol 54 bytes
C:\Documents and Settings\Administrateur\Application Data\Macromedia\Flash Player\#SharedObjects\KM7N9LBH\media.mtvnservices.com\playerelease\DownShiftHistory.sol 59 bytes
C:\Documents and Settings\Administrateur\Application Data\Macromedia\Flash Player\#SharedObjects\KM7N9LBH\media.mtvnservices.com\playerelease\MetadataHistoryProxy.sol 1,22KB
C:\Documents and Settings\Administrateur\Application Data\Macromedia\Flash Player\#SharedObjects\KM7N9LBH\media.mtvnservices.com\playerelease\playerCounter.sol 223 bytes
C:\Documents and Settings\Administrateur\Application Data\Macromedia\Flash Player\#SharedObjects\KM7N9LBH\media.mtvnservices.com\playerelease\userPrefs.sol 434 bytes
C:\Documents and Settings\Administrateur\Application Data\Macromedia\Flash Player\#SharedObjects\KM7N9LBH\msn.serving-sys.com\EB_FR_1152588.sol 104 bytes
C:\Documents and Settings\Administrateur\Application Data\Macromedia\Flash Player\#SharedObjects\KM7N9LBH\pagead2.googlesyndication.com\pagead\googleadplayer.swf\mediaPlayerUserSettings.sol 94 bytes
C:\Documents and Settings\Administrateur\Application Data\Macromedia\Flash Player\#SharedObjects\KM7N9LBH\pixmania.com\pixsettings.sol 96 bytes
C:\Documents and Settings\Administrateur\Application Data\Macromedia\Flash Player\#SharedObjects\KM7N9LBH\pixmania.com\pixsettings_fr.sol 99 bytes
C:\Documents and Settings\Administrateur\Application Data\Macromedia\Flash Player\#SharedObjects\KM7N9LBH\porn.gonzo-movies.com\sitevideos\flv_player_site_v4.swf\VolCookie.sol 46 bytes
C:\Documents and Settings\Administrateur\Application Data\Macromedia\Flash Player\#SharedObjects\KM7N9LBH\s.ytimg.com\moduleData.sol 54 bytes
C:\Documents and Settings\Administrateur\Application Data\Macromedia\Flash Player\#SharedObjects\KM7N9LBH\s.ytimg.com\soundData.sol 58 bytes
C:\Documents and Settings\Administrateur\Application Data\Macromedia\Flash Player\#SharedObjects\KM7N9LBH\s.ytimg.com\videostats.sol 199 bytes
C:\Documents and Settings\Administrateur\Application Data\Macromedia\Flash Player\#SharedObjects\KM7N9LBH\s9.addthis.com\as\addthis.swf\bucket.sol 49 bytes
C:\Documents and Settings\Administrateur\Application Data\Macromedia\Flash Player\#SharedObjects\KM7N9LBH\societegenerale.fr\EIPesources\sgplayer\brochure_tarifaire_particuliers_2008\catalogue\v320.swf\www.catalogue-virtuel.com.sol 138 bytes
C:\Documents and Settings\Administrateur\Application Data\Macromedia\Flash Player\#SharedObjects\KM7N9LBH\spe.atdmt.com\ft2693-10.sol 74 bytes
C:\Documents and Settings\Administrateur\Application Data\Macromedia\Flash Player\#SharedObjects\KM7N9LBH\spe.atdmt.com\ft2693-11.sol 74 bytes
C:\Documents and Settings\Administrateur\Application Data\Macromedia\Flash Player\#SharedObjects\KM7N9LBH\spe.atdmt.com\ft2693-13.sol 74 bytes
C:\Documents and Settings\Administrateur\Application Data\Macromedia\Flash Player\#SharedObjects\KM7N9LBH\spe.atdmt.com\ft2693-3.sol 73 bytes
C:\Documents and Settings\Administrateur\Application Data\Macromedia\Flash Player\#SharedObjects\KM7N9LBH\spe.atdmt.com\ft2699-5.sol 73 bytes
C:\Documents and Settings\Administrateur\Application Data\Macromedia\Flash Player\#SharedObjects\KM7N9LBH\store.nike.com\emeastore\siteshell\shell.swf
ikedev.framfab.dk.sol 519 bytes
C:\Documents and Settings\Administra

Utilisateur anonyme · Answer

Hi,

bon te laisse avec et bon courage.

Alut.

eternien · Answer

Pour le mode sans echec c'est mort, pas le temps d'ouvrir quoi que ce soit, toute les icones et la barre de taches s'en vont en une seconde.

Le plus bizarre c'est qu'en mode normal, j'ai au moins le temps d'ouvrir firefox (mais celui en "mode sans echec" car le normal me fait un message bizarre), en fait pour ça je vais sur rechercher (mes icones et ma barre s'en vont au bout de trois ou quatre seconde) donc j'ai juste le temps d'aller sur "rechercher" et de la d'ouvrir l'explorateur Windows.

Bien sur l'explorateur se referme très vite tout seul (3 ou 4 seconde) donc faut que j'aille très vite pour ouvrir les programmes voulus.

Donc c'est vraiment chiant.

Utilisateur anonyme · Answer

Hi,

fait ceci alors:

==>>Télécharge Toolbar-S&D (Team IDN) sur ton Bureau.<<===

Toolbar-S&D

!! Déconnectes toi et fermes toute tes applications en cours le temps de la manipe !!

* double-cliques sur l'.exe pour lancer l'installe et laisses toi guider ...

* Une fois fait, cliques sur le raccourci créé sur ton bureau pour lancer l'outil .

* Choisis l'option 1 ( "recherche") et tapes "entrée" .

* Une fois le scan finit , un rapport va apparaître, copie/colles l'intégralité
de son contenu dans ta prochaine réponse ...

( le rapport est en outre sauvegardé ici -> C:\TB.txt )

Alut.

eternien · Answer

voila le résultat de Toolbar SD


   -----------\  ToolBar S&D 1.2.4   XP/Vista

   Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
   X86-based PC ( Multiprocessor Free : Processeur Intel Pentium III Xeon )
   BIOS : BIOS Date: 10/30/07 20:44:12 Ver: 08.00.12
   USER : Administrateur ( Administrator )
   BOOT : Normal boot
   A:\ (USB)
   C:\ (Local Disk) - NTFS - Total:19 Go (Free:1 Go)
   D:\ (CD or DVD)
   E:\ (Local Disk) - NTFS - Total:446 Go (Free:330 Go)
   H:\ (CD or DVD)
   I:\ (Local Disk) - FAT32 - Total:465 Go (Free:178 Go)
   J:\ (Local Disk) - FAT32 - Total:186 Go (Free:29 Go)

   "C:\ToolBar SD" ( MAJ : 27-10-2008|09:25 )
   Option : [1] ( 18/11/2008|19:06 )

   -----------\  Recherche de Fichiers / Dossiers ...

   C:\Program Files\AskPBar
   C:\Program Files\AskPBar\bar
   C:\Program Files\DAEMON Tools Toolbar
   C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
   C:\Program Files\DAEMON Tools Toolbar\FirefoxDTT
   C:\Program Files\DAEMON Tools Toolbar\Resources
   C:\Program Files\DAEMON Tools Toolbar\uninst.exe
   C:\Program Files\DAEMON Tools Toolbar\_DTLite.xml

   -----------\  Extensions

   (Administrateur) - {34274bf4-1d97-a289-e984-17e546307e4f} => adblock
   (Administrateur) - {616f2aa8-9674-4009-90de-94ce4ea9d29a} => clines
   (Administrateur) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar
   (Administrateur) - {b621c0d9-9786-4779-aa35-2188be4d734e} => cards


   -----------\  [..\Internet Explorer\Main]

   [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

   [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
   "Start Page"="http://www.crystaliz.org"
   "Search Bar"="https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htm"
   "Default_Page_URL"="http://www.crystaliz.org"
   "Default_Search_URL"="https://www.google.fr/?gws_rd=ssl"
   "Search Page"="https://www.google.fr/?gws_rd=ssl"


   --------------------\  Recherche d'autres infections

   C:\WINDOWS\system32\TtsrsBeg.ini
   C:\WINDOWS\system32\TtsrsBeg.ini2
   C:\WINDOWS\system32\geBsrstT.dll
   [b]==> VUNDO <==/b
 
   --------------------\  Cracks & Keygens ..

   C:\DOCUME~1\ADMINI~1\Application Data\BitTorrent\StarCraftKeyGen.rar.torrent
   C:\DOCUME~1\ADMINI~1\Mes documents\Downloads\StarCraftKeyGen.rar



   1 - "C:\ToolBar SD\TB_1.txt" - 18/11/2008|19:07 - Option : [1]

   -----------\  Fin du rapport a 19:07:38,57

Utilisateur anonyme · Answer

Hi,


Nettoyage avec ToolBar S&D :

!! Déconnectes toi et fermes toute tes applications en cours le temps de la manipe !!

Relances Toolbar-S&D en double-cliquant sur le raccourci.
-->Tapes sur l'option 2 ( "nettoyage" ) puis tapes sur "Entrée".

Note : ne touches à rien lors de la suppression !

Un rapport sera généré à la fin du processus : postes son contenu dans ta prochaine réponse
accompagné d'un nouveau rapport hijackthis pour analyse ... 

Alut.

eternien · Answer

Toolbar SD


   -----------\  ToolBar S&D 1.2.4   XP/Vista

   Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
   X86-based PC ( Multiprocessor Free : Processeur Intel Pentium III Xeon )
   BIOS : BIOS Date: 10/30/07 20:44:12 Ver: 08.00.12
   USER : Administrateur ( Administrator )
   BOOT : Normal boot
   A:\ (USB)
   C:\ (Local Disk) - NTFS - Total:19 Go (Free:2 Go)
   D:\ (CD or DVD)
   E:\ (Local Disk) - NTFS - Total:446 Go (Free:330 Go)
   H:\ (CD or DVD)
   I:\ (Local Disk) - FAT32 - Total:465 Go (Free:178 Go)
   J:\ (Local Disk) - FAT32 - Total:186 Go (Free:29 Go)

   "C:\ToolBar SD" ( MAJ : 27-10-2008|09:25 )
   Option : [2] ( 18/11/2008|19:24 )

   -----------\ SUPPRESSION

   Supprime! - C:\Program Files\AskPBar\bar
   Supprime! - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
   Supprime! - C:\Program Files\DAEMON Tools Toolbar\FirefoxDTT
   Supprime! - C:\Program Files\DAEMON Tools Toolbar\Resources
   Supprime! - C:\Program Files\DAEMON Tools Toolbar\uninst.exe
   Supprime! - C:\Program Files\DAEMON Tools Toolbar\_DTLite.xml
   Supprime! - C:\Program Files\AskPBar
   Supprime! - C:\Program Files\DAEMON Tools Toolbar

   -----------\  Recherche de Fichiers / Dossiers ...


   -----------\  Extensions

   (Administrateur) - {34274bf4-1d97-a289-e984-17e546307e4f} => adblock
   (Administrateur) - {616f2aa8-9674-4009-90de-94ce4ea9d29a} => clines
   (Administrateur) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar
   (Administrateur) - {b621c0d9-9786-4779-aa35-2188be4d734e} => cards


   -----------\  [..\Internet Explorer\Main]

   [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
   "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

   [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
   "Start Page"="https://www.msn.com/fr-fr/"
   "Search Bar"="https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htm"
   "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
   "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"


   --------------------\  Recherche d'autres infections

   --------------------\  Cracks & Keygens ..

   C:\DOCUME~1\ADMINI~1\Application Data\BitTorrent\StarCraftKeyGen.rar.torrent
   C:\DOCUME~1\ADMINI~1\Mes documents\Downloads\StarCraftKeyGen.rar



   1 - "C:\ToolBar SD\TB_1.txt" - 18/11/2008|19:07 - Option : [1]
   2 - "C:\ToolBar SD\TB_2.txt" - 18/11/2008|19:24 - Option : [2]

   -----------\  Fin du rapport a 19:24:58,15



hijackthis

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:25 Reloaded, on 18/11/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Unable to get Internet Explorer version!
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
E:\Avast\aswUpdSv.exe
E:\Avast\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\IoctlSvc.exe
C:\Program Files\Wireless 802.11g Monitor\WLService.exe
C:\Program Files\Wireless 802.11g Monitor\WLanCfgG.exe
E:\Avast\ashMaiSv.exe
E:\Avast\ashWebSv.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\MSI\Live Update 3\LMonitor.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\system32\hphmon05.exe
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Fichiers communs\Nero\Lib\NMIndexStoreSvr.exe
C:\Program Files\DNA\btdna.exe
C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = 
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {fbe76309-bda9-4587-b89b-8823590b45c9} - C:\WINDOWS\system32
nnkJdeF.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [WinSys2] C:\WINDOWS\system32\winsys2.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [LiveMonitor] C:\Program Files\MSI\Live Update 3\LMonitor.exe
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\WINDOWS\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [36X Raid Configurer] C:\WINDOWS\system32\xRaidSetup.exe boot
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\Hewlett-Packard\{D946675D-1D6C-4dc8-9E0D-B4B8EAA30EAA}\hphupd05.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HP Software Update] "c:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\system32\hphmon05.exe
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Documents and Settings\Administrateur\Bureau	itay\certificat de non gage\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [EA Core] C:\Program Files\Electronic Arts\EADM\Core.exe -silent
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Gadwin PrintScreen] C:\Program Files\Gadwin Systems\PrintScreen\PrintScreen.exe /nosplash
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [eMuleAutoStart] J:\eMule\emule.exe -AutoStart
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_01] rundll32 advpack.dll,DelNodeRunDLL32 "C:\WINDOWS\eHome" (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_02] rundll32 advpack.dll,DelNodeRunDLL32 "C:\WINDOWS\help" (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_03] rundll32 advpack.dll,DelNodeRunDLL32 "C:\WINDOWS\Srchasst" (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_04] rundll32 advpack.dll,DelNodeRunDLL32 "C:\WINDOWS\Help\Tours" (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_05] cmd.exe /c md "%SystemRoot%\Web\Wallpaper" (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_06] cmd.exe /c md "C:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\Quick Launch" (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_07] cmd.exe /c md "%AppData%\Microsoft\Internet Explorer\Quick Launch" (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_08] cmd.exe /c md "%USERPROFILE%\Local Settings\Temp" (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_09] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_10] rundll32 advpack.dll,LaunchINFSection nlite.inf,nLiteReg (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_11] rundll32 advpack.dll,LaunchINFSection nlite.inf,S (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\RunOnce: [nlpo_01] rundll32 advpack.dll,DelNodeRunDLL32 "C:\WINDOWS\eHome" (User 'SERVICE RÉSEAU')
O4 - Startup: Xfire.lnk = C:\Program Files\Xfire\xfire.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O10 - Unknown file in Winsock LSP: c:\docume~1\admini~1\locals~1	emp
tdll64.dll
O10 - Unknown file in Winsock LSP: c:\docume~1\admini~1\locals~1	emp
tdll64.dll
O13 - DefaultPrefix: 
O13 - WWW Prefix: 
O13 - Home Prefix: 
O13 - Mosaic Prefix: 
O13 - FTP Prefix: 
O13 - Gopher Prefix: 
O17 - HKLM\System\CCS\Services\Tcpip\..\{32A86DC7-E6A3-4FD4-A4BB-E819D2B46CA0}: NameServer = 213.36.80.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{32A86DC7-E6A3-4FD4-A4BB-E819D2B46CA0}: NameServer = 213.36.80.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{32A86DC7-E6A3-4FD4-A4BB-E819D2B46CA0}: NameServer = 213.36.80.1
O17 - HKLM\System\CS3\Services\Tcpip\..\{32A86DC7-E6A3-4FD4-A4BB-E819D2B46CA0}: NameServer = 213.36.80.1
O20 - Winlogon Notify: nnnkjdef - C:\WINDOWS\SYSTEM32
nnkJdeF.dll
O23 - Service: avast! iAVS4 Control Service (aswupdsv) - ALWIL Software - E:\Avast\aswUpdSv.exe
O23 - Service: avast! Antivirus (avast! antivirus) - ALWIL Software - E:\Avast\ashServ.exe
O23 - Service: avast! Mail Scanner (avast! mail scanner) - ALWIL Software - E:\Avast\ashMaiSv.exe
O23 - Service: avast! Web Scanner (avast! web scanner) - ALWIL Software - E:\Avast\ashWebSv.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: R54G Wireless Service - Unknown owner - C:\Program Files\Wireless 802.11g Monitor\WLService.exe

Utilisateur anonyme · Answer

Hi,

Passe ce fix.

delcwssk.zip


tutoriel


Alut.

eternien · Answer

The rapport après avoir suivis le tuto

Run Keys ****

RUN: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup 
RUN: [nwiz] nwiz.exe /install 
RUN: [WinSys2] C:\WINDOWS\system32\winsys2.exe 
RUN: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit 
RUN: [LiveMonitor] C:\Program Files\MSI\Live Update 3\LMonitor.exe 
RUN: [JMB36X IDE Setup] C:\WINDOWS\RaidTool\xInsIDE.exe 
RUN: [36X Raid Configurer] C:\WINDOWS\system32\xRaidSetup.exe boot 
RUN: [RTHDCPL] RTHDCPL.EXE 
RUN: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe 
RUN: [HPHUPD05] c:\Program Files\Hewlett-Packard\{D946675D-1D6C-4dc8-9E0D-B4B8EAA30EAA}\hphupd05.exe 
RUN: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" 
RUN: [HP Software Update] "c:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe" 
RUN: [HPHmon05] C:\WINDOWS\system32\hphmon05.exe 
RUN: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" 
RUN: [WinampAgent] "C:\Program Files\Winamp\winampa.exe" 
RUN: [Adobe Reader Speed Launcher] "C:\Documents and Settings\Administrateur\Bureau	itay\certificat de non gage\Reader\Reader_sl.exe" 
RUN: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" 
RUN: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s 
RUN: [NeroFilterCheck] C:\Program Files\Fichiers communs\Nero\Lib\NeroCheck.exe 
RUN: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" 
RUN: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime 
RUN: [EA Core] C:\Program Files\Electronic Arts\EADM\Core.exe -silent 
RUN: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background 
RUN: [Gadwin PrintScreen] C:\Program Files\Gadwin Systems\PrintScreen\PrintScreen.exe /nosplash 
RUN: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun 
RUN: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020 
RUN: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe" 
RUN: [eMuleAutoStart] J:\eMule\emule.exe -AutoStart 


 **** Browser Helper Objects ****

BHO: [Adobe PDF Link Helper] C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll 
BHO: [SSVHelper Class] C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll 
BHO: [SSVHelper Class] C:\WINDOWS\system32
nnkJdeF.dll 


 **** IE Toolbars ****



 **** IE Extensions ****

IEExt: []  


 **** Hosts File Entries ****

HOSTS: 127.0.0.1       localhost 
HOSTS: 127.0.0.1       localhost 


 **** IE Settings ****

Default Page: https://www.msn.com/fr-fr/?ocid=iehp 
Default Search: https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF 
Search Page: http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch 


 **** IE Context Menu (Right click) ****



 **** Layered Service Providers ****

LSP: WEB Guardian over [MSAFD Tcpip [TCP/IP]] 
LSP: MSAFD Tcpip [TCP/IP] 
LSP: MSAFD Tcpip [UDP/IP] 
LSP: RSVP UDP Service Provider 
LSP: RSVP TCP Service Provider 
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{B626889D-0CD8-439D-A049-8287744D65AE}] SEQPACKET 7 
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{B626889D-0CD8-439D-A049-8287744D65AE}] DATAGRAM 7 
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{A06D97DF-F85E-48FD-A4E2-EC2FB47BA59C}] SEQPACKET 6 
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{A06D97DF-F85E-48FD-A4E2-EC2FB47BA59C}] DATAGRAM 6 
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{6966F38E-E18E-4407-B4BC-F526E54FB277}] SEQPACKET 5 
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{6966F38E-E18E-4407-B4BC-F526E54FB277}] DATAGRAM 5 
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{55841B3F-1635-4412-A46B-E5348ED06774}] SEQPACKET 4 
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{55841B3F-1635-4412-A46B-E5348ED06774}] DATAGRAM 4 
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{32A86DC7-E6A3-4FD4-A4BB-E819D2B46CA0}] SEQPACKET 3 
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{32A86DC7-E6A3-4FD4-A4BB-E819D2B46CA0}] DATAGRAM 3 
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{56E801DD-2816-4C07-845C-786151A97C15}] SEQPACKET 0 
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{56E801DD-2816-4C07-845C-786151A97C15}] DATAGRAM 0 
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{AC45CC59-A55E-40F4-8AF8-B37A101FF60F}] SEQPACKET 1 
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{AC45CC59-A55E-40F4-8AF8-B37A101FF60F}] DATAGRAM 1 
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{594F6DE6-1AA5-4FA1-A497-984E00B77528}] SEQPACKET 2 
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{594F6DE6-1AA5-4FA1-A497-984E00B77528}] DATAGRAM 2 


 **** Blocked Control Panel Items ****

BLOCKED: [ncpa.cpl] No 
BLOCKED: [odbccp32.cpl] No 


 **** Downloaded Program Files ****

{8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab 
{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab 
{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab 


 **** Custom IE Search Items ****

SEARCH: [SearchAssistant] https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htm 
SEARCH: [CustomizeSearch] https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchcust.htm 


 **** Complete IE Options ****

IEOPT: [NoUpdateCheck]  
IEOPT: [NoJITSetup]  
IEOPT: [NotifyDownloadComplete] no 
IEOPT: [SmoothScroll]  
IEOPT: [Disable Script Debugger] yes 
IEOPT: [IEWatsonEnabled]  
IEOPT: [DisableScriptDebuggerIE] yes 
IEOPT: [RunOnceHasShown]  
IEOPT: [RunOnceComplete]  
IEOPT: [Search Page] http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch 
IEOPT: [Start Page] https://www.msn.com/fr-fr/ 
IEOPT: [Search Bar] https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htm 
IEOPT: [IEWatsonDisabled]  
IEOPT: [Default_Page_URL] https://www.msn.com/fr-fr/?ocid=iehp 
IEOPT: [Default_Search_URL] https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF 
IEOPT: [Search Page] https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF 
IEOPT: [Disable Script Debugger] yes 
IEOPT: [DisableScriptDebuggerIE] yes 
IEOPT: [Error Dlg Displayed On Every Error] no 
IEOPT: [Error Dlg Details Pane Open] no 
IEOPT: [Window Title]  


Sinon depuis le dernier redémarrage je n'ai plus le problème :-)

Utilisateur anonyme · Answer

Hi,

refait un hijackthis .

Alut.

eternien · Answer

Voilou

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:57 Reloaded, on 18/11/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Unable to get Internet Explorer version!
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
E:\Avast\aswUpdSv.exe
E:\Avast\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\IoctlSvc.exe
C:\Program Files\Wireless 802.11g Monitor\WLService.exe
C:\Program Files\Wireless 802.11g Monitor\WLanCfgG.exe
C:\WINDOWS\system32\RUNDLL32.EXE
E:\Avast\ashMaiSv.exe
E:\Avast\ashWebSv.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\system32\hphmon05.exe
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Fichiers communs\Nero\Lib\NMIndexStoreSvr.exe
C:\Program Files\DNA\btdna.exe
C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
J:\eMule\emule.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = 
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {fbe76309-bda9-4587-b89b-8823590b45c9} - C:\WINDOWS\system32
nnkJdeF.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [WinSys2] C:\WINDOWS\system32\winsys2.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [LiveMonitor] C:\Program Files\MSI\Live Update 3\LMonitor.exe
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\WINDOWS\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [36X Raid Configurer] C:\WINDOWS\system32\xRaidSetup.exe boot
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\Hewlett-Packard\{D946675D-1D6C-4dc8-9E0D-B4B8EAA30EAA}\hphupd05.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HP Software Update] "c:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\system32\hphmon05.exe
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Documents and Settings\Administrateur\Bureau	itay\certificat de non gage\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [EA Core] C:\Program Files\Electronic Arts\EADM\Core.exe -silent
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Gadwin PrintScreen] C:\Program Files\Gadwin Systems\PrintScreen\PrintScreen.exe /nosplash
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [eMuleAutoStart] J:\eMule\emule.exe -AutoStart
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_01] rundll32 advpack.dll,DelNodeRunDLL32 "C:\WINDOWS\eHome" (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_02] rundll32 advpack.dll,DelNodeRunDLL32 "C:\WINDOWS\help" (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_03] rundll32 advpack.dll,DelNodeRunDLL32 "C:\WINDOWS\Srchasst" (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_04] rundll32 advpack.dll,DelNodeRunDLL32 "C:\WINDOWS\Help\Tours" (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_05] cmd.exe /c md "%SystemRoot%\Web\Wallpaper" (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_06] cmd.exe /c md "C:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\Quick Launch" (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_07] cmd.exe /c md "%AppData%\Microsoft\Internet Explorer\Quick Launch" (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_08] cmd.exe /c md "%USERPROFILE%\Local Settings\Temp" (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_09] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_10] rundll32 advpack.dll,LaunchINFSection nlite.inf,nLiteReg (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_11] rundll32 advpack.dll,LaunchINFSection nlite.inf,S (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\RunOnce: [nlpo_01] rundll32 advpack.dll,DelNodeRunDLL32 "C:\WINDOWS\eHome" (User 'SERVICE RÉSEAU')
O4 - Startup: Xfire.lnk = C:\Program Files\Xfire\xfire.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O10 - Unknown file in Winsock LSP: c:\docume~1\admini~1\locals~1	emp
tdll64.dll
O10 - Unknown file in Winsock LSP: c:\docume~1\admini~1\locals~1	emp
tdll64.dll
O13 - DefaultPrefix: 
O13 - WWW Prefix: 
O13 - Home Prefix: 
O13 - Mosaic Prefix: 
O13 - FTP Prefix: 
O13 - Gopher Prefix: 
O17 - HKLM\System\CCS\Services\Tcpip\..\{32A86DC7-E6A3-4FD4-A4BB-E819D2B46CA0}: NameServer = 213.36.80.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{32A86DC7-E6A3-4FD4-A4BB-E819D2B46CA0}: NameServer = 213.36.80.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{32A86DC7-E6A3-4FD4-A4BB-E819D2B46CA0}: NameServer = 213.36.80.1
O17 - HKLM\System\CS3\Services\Tcpip\..\{32A86DC7-E6A3-4FD4-A4BB-E819D2B46CA0}: NameServer = 213.36.80.1
O20 - Winlogon Notify: nnnkjdef - C:\WINDOWS\SYSTEM32
nnkJdeF.dll
O23 - Service: avast! iAVS4 Control Service (aswupdsv) - ALWIL Software - E:\Avast\aswUpdSv.exe
O23 - Service: avast! Antivirus (avast! antivirus) - ALWIL Software - E:\Avast\ashServ.exe
O23 - Service: avast! Mail Scanner (avast! mail scanner) - ALWIL Software - E:\Avast\ashMaiSv.exe
O23 - Service: avast! Web Scanner (avast! web scanner) - ALWIL Software - E:\Avast\ashWebSv.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: R54G Wireless Service - Unknown owner - C:\Program Files\Wireless 802.11g Monitor\WLService.exe

Utilisateur anonyme · Answer

Hi,

passe combofix.

Alut.

eternien · Answer

combofix ComboFix 08-11-17.06 - Administrateur 2008-11-18 20:05:05.3 - NTFSx86 Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.2625 [GMT 1:00] Lancé depuis: c:\documents and settings\Administrateur\Bureau\ComboFix.exe . ((((((((((((((((((((((((((((( Fichiers créés du 2008-10-18 au 2008-11-18 )))))))))))))))))))))))))))))))))))) . 2008-11-18 19:48 . 2008-11-18 19:48 d-------- c:\program files\InterMute 2008-11-18 19:46 . 2008-11-18 19:48 d-------- C:\CWS 2008-11-18 19:05 . 2008-11-18 19:24 d-------- C:\ToolBar SD 2008-11-18 17:55 . 2008-11-18 17:55 d-------- c:\program files\CCleaner 2008-11-18 17:44 . 2008-11-18 17:58 d-------- C:\SDFix 2008-11-18 17:41 . 2008-11-18 17:41 d-------- c:\program files\Trend Micro 2008-11-18 14:47 . 2003-03-18 21:20 1,060,864 --a------ c:\windows\system32\MFC71.dll 2008-11-18 14:40 . 2008-11-18 14:40 d-------- c:\windows\Downloaded Program Files 2008-11-18 14:40 . 2008-11-18 16:33 d-------- c:\program files\RealAV 2008-11-18 14:00 . 2008-11-18 14:00 664 --a------ c:\windows\system32\d3d9caps.dat 2008-11-18 14:00 . 2008-11-18 14:00 552 --a------ c:\windows\system32\d3d8caps.dat 2008-11-18 13:57 . 2008-11-18 13:57 4,785 --a------ c:\windows\system32\warning.gif 2008-11-18 13:57 . 2008-11-18 13:57 1,349 --a------ c:\windows\system32\ahtn.htm 2008-11-18 13:57 . 2008-11-18 13:57 475 --a------ c:\windows\system32\win32hlp.cnf 2008-11-18 13:56 . 2008-11-18 13:56 26,624 --a------ c:\windows\system32\qoMcaYSm.dll 2008-11-18 13:56 . 2008-11-18 13:56 26,624 --a------ c:\windows\system32 nnkJdeF.dll 2008-11-18 13:56 . 2008-11-18 13:56 23,552 --a------ c:\windows\system32\frmwrk32.exe 2008-11-18 13:56 . 2008-11-18 13:56 1 --a------ c:\windows\system32\uniq.tll 2008-11-18 13:56 . 2008-11-18 13:56 1 --a------ c:\windows\system32 est.ttt 2008-11-18 13:51 . 2008-11-18 19:03 0 --a------ c:\windows\system32\drivers\d28f34b8.sys 2008-11-18 13:43 . 2008-11-18 13:43 d-------- c:\program files\Vstplugins 2008-11-18 13:43 . 2008-11-18 13:43 d-------- c:\documents and settings\All Users\Application Data\Sony 2008-11-08 00:34 . 2008-11-08 00:34 d-------- c:\program files\DivX 2008-11-07 21:05 . 2008-11-07 21:05 72 ---hs---- C:\desktop.ini 2008-11-06 09:02 . 2008-11-06 09:02 d-------- c:\documents and settings\Administrateur\Application Data\Apple Computer 2008-11-05 11:32 . 2008-11-05 11:32 d-------- c:\windows\Logs 2008-11-05 11:32 . 2008-11-05 11:32 d-------- c:\documents and settings\All Users\Application Data\Fallout3 2008-11-05 11:32 . 2008-05-30 14:11 3,850,760 --a------ c:\windows\system32\D3DX9_38.dll 2008-11-05 11:32 . 2008-05-30 14:11 1,491,992 --a------ c:\windows\system32\D3DCompiler_38.dll 2008-11-05 11:32 . 2008-05-30 14:19 507,400 --a------ c:\windows\system32\XAudio2_1.dll 2008-11-05 11:32 . 2008-05-30 14:11 467,984 --a------ c:\windows\system32\d3dx10_38.dll 2008-11-05 11:32 . 2008-05-30 14:18 238,088 --a------ c:\windows\system32\xactengine3_1.dll 2008-11-05 11:32 . 2008-05-30 14:17 65,032 --a------ c:\windows\system32\XAPOFX1_0.dll 2008-11-05 11:32 . 2008-05-30 14:17 25,608 --a------ c:\windows\system32\X3DAudio1_4.dll 2008-11-05 11:29 . 2008-11-05 11:29 d-------- c:\windows\system32\XPSViewer 2008-11-05 11:28 . 2008-11-05 11:28 d-------- c:\windows\system32\xlive 2008-11-02 14:54 . 2008-11-02 14:54 0 -ra------ C:\logwmemory.bin 2008-11-02 13:55 . 2008-11-02 13:55 d-------- c:\windows\system32\AGEIA 2008-11-02 13:55 . 2008-11-02 13:55 d-------- c:\program files\Fichiers communs\Wise Installation Wizard 2008-11-02 13:55 . 2008-11-02 13:55 d-------- c:\program files\AGEIA Technologies 2008-11-01 20:44 . 2008-11-01 20:44 d-------- c:\documents and settings\Administrateur\Application Data\Soldat 2008-11-01 19:56 . 2008-11-01 19:56 d-------- c:\documents and settings\Administrateur\Application Data\Talkback 2008-11-01 05:40 . 2008-11-14 16:08 d-------- c:\documents and settings\All Users\Application Data\TrackMania 2008-10-31 23:31 . 2008-11-01 13:10 6,201,856 --a------ c:\windows\system32\CCL_Launcher.exe 2008-10-31 23:25 . 2008-10-31 23:25 1,060,864 --a------ c:\windows\system32\libeay32.dll 2008-10-31 23:25 . 2008-10-31 23:25 916,849 --a------ c:\windows\system32\libiconv-2.dll 2008-10-31 23:25 . 2008-10-31 23:25 200,704 --a------ c:\windows\system32\ssleay32.dll 2008-10-31 23:25 . 2008-10-31 23:25 169,092 --a------ c:\windows\system32\libpq8x.dll 2008-10-31 23:25 . 2008-10-31 23:25 149,726 --a------ c:\windows\system32\libpq.dll 2008-10-31 23:25 . 2008-10-31 23:25 51,016 --a------ c:\windows\system32\libintl-2.dll 2008-10-30 02:24 . 2008-10-30 02:24 42,320 --a------ c:\windows\system32\xfcodec.dll . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-11-18 18:56 --------- d-----w c:\documents and settings\Administrateur\Application Data\DNA 2008-11-18 18:37 --------- d-----w c:\documents and settings\Administrateur\Application Data\Xfire 2008-11-18 18:36 --------- d-----w c:\program files\DNA 2008-11-15 12:58 --------- d-----w c:\documents and settings\Administrateur\Application Data\BitTorrent 2008-11-14 15:57 --------- d--h--w c:\program files\InstallShield Installation Information 2008-11-12 10:00 --------- d-----w c:\program files\Xfire 2008-11-05 10:43 --------- d-----w c:\program files\Stardock 2008-11-01 19:38 --------- d-----w c:\program files\MSN Messenger 2008-10-17 09:42 --------- d-----w c:\documents and settings\Administrateur\Application Data\Spore 2008-09-21 11:57 --------- d-----w c:\program files\Electronic Arts 2008-09-21 10:52 --------- d-----w c:\program files\QuickTime 2008-09-21 10:52 --------- d-----w c:\program files\Fichiers communs\Apple 2008-09-21 10:52 --------- d-----w c:\program files\Apple Software Update 2008-09-21 10:52 --------- d-----w c:\documents and settings\All Users\Application Data\Apple Computer 2008-09-21 10:52 --------- d-----w c:\documents and settings\All Users\Application Data\Apple 2008-09-20 11:15 --------- d-----w c:\documents and settings\NetworkService\Application Data\Xfire 2008-09-20 11:15 --------- d-----w c:\documents and settings\LocalService\Application Data\Xfire 2008-09-20 10:48 --------- d-----w c:\program files\Frets on Fire 2008-09-20 10:48 --------- d-----w c:\documents and settings\Administrateur\Application Data\fretsonfire 2008-09-19 21:55 200,704 ----a-w c:\windows\system32\ssldivx.dll 2008-09-19 21:55 1,044,480 ----a-w c:\windows\system32\libdivx.dll 2008-09-04 01:57 107,888 ----a-w c:\windows\system32\CmdLineExt.dll 2006-06-23 22:48 32,768 ----a-r c:\windows\inf\UpdateUSB.exe . ------- Sigcheck ------- 2008-03-18 15:29 360576 bd8686216e34e22c4ed45a2320b2bea1 c:\windows\system32\dllcache\TCPIP.SYS 2008-03-18 15:29 360576 bd8686216e34e22c4ed45a2320b2bea1 c:\windows\system32\drivers\TCPIP.SYS 2006-08-25 16:59 1407488 5d0b9a8658ec74b5f8bec2b5558694bd c:\windows\explorer.exe . ((((((((((((((((((((((((((((( snapshot@2008-11-18_19.20.39.39 ))))))))))))))))))))))))))))))))))))))))) . + 2008-11-18 18:35:59 16,384 ----atw c:\windows\system32\config\systemprofile\Local Settings\Temp\Perflib_Perfdata_5f4.dat . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{fbe76309-bda9-4587-b89b-8823590b45c9}] 2008-11-18 13:56 26624 --a------ c:\windows\system32 nnkJdeF.dll [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "EA Core"="c:\program files\Electronic Arts\EADM\Core.exe" [2008-06-13 2752512] "MsnMsgr"="c:\program files\MSN Messenger\MsnMsgr.Exe" [2007-01-19 5674352] "Gadwin PrintScreen"="c:\program files\Gadwin Systems\PrintScreen\PrintScreen.exe" [2007-08-20 495616] "DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2008-07-04 486856] "IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Fichiers communs\Nero\Lib\NMIndexStoreSvr.exe" [2008-06-24 1840424] "BitTorrent DNA"="c:\program files\DNA\btdna.exe" [2008-11-14 342336] "eMuleAutoStart"="j:\emule\emule.exe" [2008-08-01 5480448] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-06-28 8466432] "WinSys2"="c:\windows\system32\winsys2.exe" [2006-04-29 208896] "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-06-28 81920] "LiveMonitor"="c:\program files\MSI\Live Update 3\LMonitor.exe" [2006-09-05 497152] "JMB36X IDE Setup"="c:\windows\RaidTool\xInsIDE.exe" [2007-03-20 36864] "36X Raid Configurer"="c:\windows\system32\xRaidSetup.exe" [2007-03-21 1953792] "HPDJ Taskbar Utility"="c:\windows\system32\spool\drivers\w32x86\3\hpztsb09.exe" [2003-12-04 176128] "HPHUPD05"="c:\program files\Hewlett-Packard\{D946675D-1D6C-4dc8-9E0D-B4B8EAA30EAA}\hphupd05.exe" [2003-12-08 49152] "HP Component Manager"="c:\program files\HP\hpcoretech\hpcmpmgr.exe" [2004-05-12 241664] "HP Software Update"="c:\program files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe" [2003-12-05 49152] "HPHmon05"="c:\windows\system32\hphmon05.exe" [2004-02-02 495616] "MessengerPlus3"="c:\program files\MessengerPlus! 3\MsgPlus.exe" [2008-03-15 190024] "WinampAgent"="c:\program files\Winamp\winampa.exe" [2008-07-09 36352] "Adobe Reader Speed Launcher"="c:\documents and settings\Administrateur\Bureau itay\certificat de non gage\Reader\Reader_sl.exe" [2008-06-12 34672] "SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784] "CloneCDTray"="c:\program files\SlySoft\CloneCD\CloneCDTray.exe" [2006-09-28 57344] "NeroFilterCheck"="c:\program files\Fichiers communs\Nero\Lib\NeroCheck.exe" [2008-06-19 570664] "NBKeyScan"="c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2008-06-08 2221352] "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2008-09-06 413696] "nwiz"="nwiz.exe" [2007-06-28 c:\windows\system32 wiz.exe] "RTHDCPL"="RTHDCPL.EXE" [2007-03-21 c:\windows\RTHDCPL.exe] c:\documents and settings\Administrateur\Menu D‚marrer\Programmes\D‚marrage\ Xfire.lnk - c:\program files\Xfire\xfire.exe [2008-10-30 3104080] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer] "ForceClassicControlPanel"= 1 (0x1) [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer] "NoSMHelp"= 1 (0x1) "NoSMMyPictures"= 1 (0x1) "NoResolveTrack"= 1 (0x1) "NoResolveSearch"= 1 (0x1) [HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer] "NoSMHelp"= 1 (0x1) "NoInternetIcon"= 1 (0x1) "NoSMMyPictures"= 1 (0x1) "NoResolveTrack"= 1 (0x1) "NoResolveSearch"= 1 (0x1) [HKEY_LOCAL_MACHINE\software\policies\microsoft\windows\windowsupdate\au] "NoAutoUpdate"= 1 (0x1) [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks] "{FBE76309-BDA9-4587-B89B-8823590B45C9}"= "c:\windows\system32 nnkJdeF.dll" [2008-11-18 26624] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon otify nnkjdef] 2008-11-18 13:56 26624 c:\windows\system32 nnkJdeF.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "vidc.iv31"= c:\windows\system32\ir32_32.dll "vidc.iv32"= c:\windows\system32\ir32_32.dll "VIDC.XFR1"= xfcodec.dll "vidc.ffds"= c:\progra~1\COMBIN~1\Filters\FFDShow\ff_vfw.dll [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] SecurityProviders schannel.dll, digest.dll [HKEY_LOCAL_MACHINE\software\microsoft\security center] "UpdatesDisableNotify"=dword:00000001 "AntiVirusOverride"=dword:00000001 "AntiVirusDisableNotify"=dword:00000001 "FirewallOverride"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "DisableUnicastResponsesToMulticastBroadcast"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\system32\sessmgr.exe"= "c:\Program Files\DNA\btdna.exe"= "e:\BitTorrent\bittorrent.exe"= "c:\Program Files\Mozilla Firefox\firefox.exe"= "c:\Program Files\Electronic Arts\EADM\Core.exe"= "c:\Program Files\Xfire\xfire.exe"= "C:1\Everquest II\LaunchPad.exe"= "C:2\Everquest II\LaunchPad.exe"= "C:3\Everquest II\LaunchPad.exe"= "C:4\eMule\emule.exe"= "C:3\Everquest II\LP_REGION_FR_FR\LaunchPad.exe"= "j:\eMule\emule.exe"= "i:\Everquest II\LP_REGION_FR_FR\LaunchPad.exe"= "\\le-mien\LAN$\Quake III\quake3.exe"= "\\Yahooo\Vietcong\Vietcong\vietcong.exe"= "\\le-mien\lan$\DOW\W40kWA.exe"= "e:\TmNationsForever\TmForever.exe"= "c:\Program Files\MSN Messenger\msnmsgr.exe"= "c:\Documents and Settings\Administrateur\Bureau\BlackDC.exe"= "\\le-mien\lan$\UT 2004\System\UT2004.exe"= "e:\Soldat\Soldat.exe"= "C:0\Everquest II\LP_REGION_FR_FR\LaunchPad.exe"= R1 aswsp;avast! Self Protection;c:\windows\system32\drivers\aswsp.sys [2008-11-18 110160] R2 acedrv11;acedrv11;\??\c:\windows\system32\drivers\acedrv11.sys [2008-01-23 501560] R2 aswfsblk;aswFsBlk;c:\windows\system32\DRIVERS\aswFsBlk.sys [2008-11-18 20560] R2 R54G Wireless Service;R54G Wireless Service;c:\program files\Wireless 802.11g Monitor\WLService.exe [2008-03-07 49152] R3 AtcL001;NDIS Miniport Driver for Attansic L1 Gigabit Ethernet Controller;c:\windows\system32\DRIVERS\atl01_xp.sys [2008-03-11 38656] S1 d28f34b8;d28f34b8;c:\windows\system32\drivers\d28f34b8.sys [2008-11-18 0] S3 PortlUSB;PortlUSB;c:\windows\system32\DRIVERS\MS-5530.sys [2008-08-23 7552] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\I] \Shell\AutoRun\command - i:\wd_windows_tools\setup.exe *Newly Created Service* - CATCHME . Contenu du dossier 'Tâches planifiées' 2008-11-12 c:\windows\Tasks\AppleSoftwareUpdate.job - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34] 2008-11-18 c:\windows\Tasks\HP Usg Daily.job - c:\program files\Hewlett-Packard\{D946675D-1D6C-4dc8-9E0D-B4B8EAA30EAA}\pexpress\hphped05.exe [2004-01-07 02:05] . . ------- Examen supplémentaire ------- . FireFox -: Profile - c:\documents and settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\jxi3034h.default\ FF -: plugin - c:\documents and settings\Administrateur\Bureau itay\certificat de non gage\Reader\browser ppdf32.dll FF -: plugin - c:\program files\DNA\plugins pbtdna.dll FF -: plugin - c:\program files\Mozilla Firefox\plugins pbittorrent.dll . ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-11-18 20:06:02 Windows 5.1.2600 Service Pack 2 NTFS Recherche de processus cachés ... Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... Scan terminé avec succès Fichiers cachés: 0 ************************************************************************** . --------------------- DLLs chargées dans les processus actifs --------------------- PROCESSUS: c:\windows\system32\winlogon.exe -> c:\windows\system32 nnkJdeF.dll . Heure de fin: 2008-11-18 20:06:36 ComboFix-quarantined-files.txt 2008-11-18 19:06:34 ComboFix2.txt 2008-11-18 18:38:00 ComboFix3.txt 2008-11-18 18:21:04 Avant-CF: 2 138 312 704 octets libres Après-CF: 2,124,492,800 octets libres 234

Utilisateur anonyme · Answer

Hi,

-Télécharge et installe MalwareByte's Anti-Malware
Malwarebyte

- Mets le à jour

---
- Double clique sur le raccourci de MalwareByte's Anti-Malware qui est sur le bureau.
- Sélectionne Exécuter un examen complet si ce n'est pas déjà fait
- clique sur Rechercher

- Une fois le scan terminé, une fenêtre s'ouvre, clique sur sur Ok

- Si MalwareByte's n'a rien détecté, clique sur Ok Un rapport va apparaître ferme-le.

- Si MalwareByte's a détecté des infections, clique sur Afficher les résultats ensuite sur Supprimer la sélection

- Enregistre le rapport sur ton Bureau comme cela il sera plus facile à retrouver, poste ensuite ce rapport.

Note : Si MalwareByte's a besoin de redémarrer pour terminer la suppression, accepte en cliquant sur Ok

Alut.

eternien · Answer

Ca me met

"Ce programme requiert la version 4.0 ou supérieure de Windows NT."

Edit : c'est bon j'ai mis en mode de comptabilité NT 4.

Utilisateur anonyme · Answer

Hi,

clic droit sur le log et ensuite "comptatibilité" et la tu choisit le windows que tu as.

Alut.

eternien · Answer

Voila le rapport

Malwarebytes' Anti-Malware 1.30
Version de la base de données: 1306
Windows 5.1.2600 Service Pack 2

18/11/2008 21:10:58 Reloaded
mbam-log-2008-11-18 (21-10-58).txt

Type de recherche: Examen complet (C:\|E:\|I:\|J:\|)
Eléments examinés: 206421
Temps écoulé: 42 minute(s), 0 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 1
Clé(s) du Registre infectée(s): 5
Valeur(s) du Registre infectée(s): 2
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 3
Fichier(s) infecté(s): 9

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
C:\WINDOWS\system32
nnkJdeF.dll (Trojan.Vundo.H) -> Delete on reboot.

Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{fbe76309-bda9-4587-b89b-8823590b45c9} (Trojan.Vundo.H) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify
nnkjdef (Trojan.Vundo.H) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{fbe76309-bda9-4587-b89b-8823590b45c9} (Trojan.Vundo.H) -> Delete on reboot.
HKEY_CLASSES_ROOT\CLSID\{0cb66ba8-5e1f-4963-93d1-e1d6b78fe9a2} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\RealAV (Rogue.RealAV) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{fbe76309-bda9-4587-b89b-8823590b45c9} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\winsys2 (Spyware.OnlineGames) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
C:\Program Files\RealAV (Rogue.RealAV) -> Quarantined and deleted successfully.
C:\Program Files\RealAV\Infected (Rogue.RealAV) -> Quarantined and deleted successfully.
C:\Program Files\RealAV\Suspicious (Rogue.RealAV) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
C:\WINDOWS\system32
nnkJdeF.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\system32\qoMcaYSm.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
E:\Documents\EvID4226Patch.exe (Adware.Agent) -> Quarantined and deleted successfully.
C:\Program Files\RealAV	rz4.tmp (Rogue.RealAV) -> Quarantined and deleted successfully.
C:\Program Files\RealAV\vscan.tsi (Rogue.RealAV) -> Quarantined and deleted successfully.
C:\Program Files\RealAV\zlib.dll (Rogue.RealAV) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\WinSys2.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\Microsoft\Internet Explorer\Quick Launch\RealAV.lnk (Rogue.RealAV) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Temp
tdll64.dll (Trojan.FakeAlert) -> Delete on reboot.

Utilisateur anonyme · Answer

Hi,

refait un hijackthis.

Alut.

eternien · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:30 Reloaded, on 18/11/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Unable to get Internet Explorer version!
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
E:\Avast\aswUpdSv.exe
E:\Avast\ashServ.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\MSI\Live Update 3\LMonitor.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\system32\hphmon05.exe
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Fichiers communs\Nero\Lib\NMIndexStoreSvr.exe
C:\Program Files\DNA\btdna.exe
J:\eMule\emule.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\IoctlSvc.exe
C:\Program Files\Wireless 802.11g Monitor\WLService.exe
C:\Program Files\Wireless 802.11g Monitor\WLanCfgG.exe
C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe
E:\Avast\ashMaiSv.exe
E:\Avast\ashWebSv.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = 
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [LiveMonitor] C:\Program Files\MSI\Live Update 3\LMonitor.exe
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\WINDOWS\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [36X Raid Configurer] C:\WINDOWS\system32\xRaidSetup.exe boot
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\Hewlett-Packard\{D946675D-1D6C-4dc8-9E0D-B4B8EAA30EAA}\hphupd05.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HP Software Update] "c:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\system32\hphmon05.exe
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Documents and Settings\Administrateur\Bureau	itay\certificat de non gage\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [EA Core] C:\Program Files\Electronic Arts\EADM\Core.exe -silent
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Gadwin PrintScreen] C:\Program Files\Gadwin Systems\PrintScreen\PrintScreen.exe /nosplash
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [eMuleAutoStart] J:\eMule\emule.exe -AutoStart
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_01] rundll32 advpack.dll,DelNodeRunDLL32 "C:\WINDOWS\eHome" (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_02] rundll32 advpack.dll,DelNodeRunDLL32 "C:\WINDOWS\help" (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_03] rundll32 advpack.dll,DelNodeRunDLL32 "C:\WINDOWS\Srchasst" (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_04] rundll32 advpack.dll,DelNodeRunDLL32 "C:\WINDOWS\Help\Tours" (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_05] cmd.exe /c md "%SystemRoot%\Web\Wallpaper" (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_06] cmd.exe /c md "C:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\Quick Launch" (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_07] cmd.exe /c md "%AppData%\Microsoft\Internet Explorer\Quick Launch" (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_08] cmd.exe /c md "%USERPROFILE%\Local Settings\Temp" (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_09] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_10] rundll32 advpack.dll,LaunchINFSection nlite.inf,nLiteReg (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_11] rundll32 advpack.dll,LaunchINFSection nlite.inf,S (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\RunOnce: [nlpo_01] rundll32 advpack.dll,DelNodeRunDLL32 "C:\WINDOWS\eHome" (User 'SERVICE RÉSEAU')
O4 - Startup: Xfire.lnk = C:\Program Files\Xfire\xfire.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O13 - DefaultPrefix: 
O13 - WWW Prefix: 
O13 - Home Prefix: 
O13 - Mosaic Prefix: 
O13 - FTP Prefix: 
O13 - Gopher Prefix: 
O17 - HKLM\System\CCS\Services\Tcpip\..\{32A86DC7-E6A3-4FD4-A4BB-E819D2B46CA0}: NameServer = 213.36.80.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{32A86DC7-E6A3-4FD4-A4BB-E819D2B46CA0}: NameServer = 213.36.80.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{32A86DC7-E6A3-4FD4-A4BB-E819D2B46CA0}: NameServer = 213.36.80.1
O17 - HKLM\System\CS3\Services\Tcpip\..\{32A86DC7-E6A3-4FD4-A4BB-E819D2B46CA0}: NameServer = 213.36.80.1
O23 - Service: avast! iAVS4 Control Service (aswupdsv) - ALWIL Software - E:\Avast\aswUpdSv.exe
O23 - Service: avast! Antivirus (avast! antivirus) - ALWIL Software - E:\Avast\ashServ.exe
O23 - Service: avast! Mail Scanner (avast! mail scanner) - ALWIL Software - E:\Avast\ashMaiSv.exe
O23 - Service: avast! Web Scanner (avast! web scanner) - ALWIL Software - E:\Avast\ashWebSv.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: R54G Wireless Service - Unknown owner - C:\Program Files\Wireless 802.11g Monitor\WLService.exe

Utilisateur anonyme · Answer

Hi,

Installe [- Télécharge SmitfraudFix (de de S!Ri, balltrap34 et moe31) :
http://siri.urz.free.fr/Fix/SmitfraudFix.exe smitfraudfix]



Option:1 => Recherche:

    * Double cliquer sur SmitfraudFix.exe
    
* Sélectionner 1 et pressez =>Entrée dans le menu pour créer 

un rapport des fichiers responsables de l'infection. Le rapport se trouve à la racine du disque 

système 

C:\rapport.txt

==>et colle le rapport génèrer sur le forum.

*=>Ne pas faire l'option 2 sans un avis d'une personne compétente*<=

Alut.

eternien · Answer

Oki ferais ça demain, la je suis crevé.

eternien · Answer

SmitFraudFix v2.375

Rapport fait à 14:06:28,84, 19/11/2008
Executé à partir de C:\Program Files\Mozilla Firefox\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode normal

»»»»»»»»»»»»»»»»»»»»»»»» Process

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
E:\Avast\aswUpdSv.exe
E:\Avast\ashServ.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\MSI\Live Update 3\LMonitor.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\system32\hphmon05.exe
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Fichiers communs\Nero\Lib\NMIndexStoreSvr.exe
C:\Program Files\DNA\btdna.exe
J:\eMule\emule.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\IoctlSvc.exe
C:\Program Files\Wireless 802.11g Monitor\WLService.exe
C:\Program Files\Wireless 802.11g Monitor\WLanCfgG.exe
C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe
E:\Avast\ashMaiSv.exe
E:\Avast\ashWebSv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\cmd.exe

»»»»»»»»»»»»»»»»»»»»»»»» hosts


»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Administrateur


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Administrateur\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\ADMINI~1\Favoris


»»»»»»»»»»»»»»»»»»»»»»»» Bureau


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files 


»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues


»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau
 
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Ma page d'accueil"
 

»»»»»»»»»»»»»»»»»»»»»»»» o4Patch
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

o4Patch
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» IEDFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» VACFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» 404Fix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="C:\WINDOWS\system32\userinit.exe,"
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» RK



»»»»»»»»»»»»»»»»»»»»»»»» DNS

Description: RT73 USB Wireless LAN Card
DNS Server Search Order: 213.36.80.1

HKLM\SYSTEM\CCS\Services\Tcpip\..\{32A86DC7-E6A3-4FD4-A4BB-E819D2B46CA0}: NameServer=213.36.80.1
HKLM\SYSTEM\CS1\Services\Tcpip\..\{32A86DC7-E6A3-4FD4-A4BB-E819D2B46CA0}: NameServer=213.36.80.1
HKLM\SYSTEM\CS2\Services\Tcpip\..\{32A86DC7-E6A3-4FD4-A4BB-E819D2B46CA0}: NameServer=213.36.80.1
HKLM\SYSTEM\CS3\Services\Tcpip\..\{32A86DC7-E6A3-4FD4-A4BB-E819D2B46CA0}: NameServer=213.36.80.1


»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin

Utilisateur anonyme · Answer

Hi,

Refait un coup de Malwarebyte.

Et un hijackthis.

Alut.

Problème gestionnaire de taches

31 réponses

Newsletters