Probleme de pc. virus probable

De rien , bonne continuation :D

++

C'est fait. Merci pour tout !!!

Oui Norton tu laisses tomber , à moins que tu tiennes à avoir des problèmes ...

ZoneAlarm tu gardes
Clean a été supprimé
Antivir , tu gardes bien évidemment
AVG dans 30 jours la licence va expirer , donc tu auras des options en moins mais tu pourras toujours t'en servir.

Supprime Toolcleaner & Cleanup
=)

++

Bonsoir,
j'ai fait la manip. je voudrais savoir ce que je dois conserver. tout ce que tu m'as demandé de télécharger :

AVIR, AVG, CLEAN, ZONEALARM etc... NORTON que j'avais jusqu'à maintenant, je laisse tomber? merci de

me dire.

Re =)

Maintenant que ton PC n'est plus infecté, désactive ta "Restauration du système" puis réactive la, ce qui créer un point de restauration sain...

Désactivation :
Clique droit sur le "Poste de travail" > Propriétés > onglet "Restauration du système" > coche la case "Désactiver la Restauration du système sur tous les lecteurs"
> Applique patiente jusqu’à ce que cela soit marqué "désactivé" puis Ok.

Activation :
Suivre le même chemin ; décoche la case "Désactiver la Restauration du système sur tous les lecteurs"
> Applique attends que cela soit à nouveau sur "surveillance" puis Ok. Redémarre l'ordinateur.

+++

Voici le rapport. mon PC est moins lent.

-->- Recherche:

C:\Clean.zip: trouvé !
C:\HijackThis: trouvé !
C:\clean\clean\tar.exe: trouvé !
C:\clean\clean\remove.reg: trouvé !
C:\clean\clean\pskill.exe: trouvé !
C:\clean\clean\LFiles.exe: trouvé !
C:\clean\clean\gzip.exe: trouvé !
C:\clean\clean\delsiri.cmd: trouvé !
C:\clean\clean\delr.cmd: trouvé !
C:\clean\clean\del3.cmd: trouvé !
C:\clean\clean\del2.cmd: trouvé !
C:\clean\clean\clean.cmd: trouvé !
C:\clean\clean\cherche.cmd: trouvé !
C:\Documents and Settings\james\Bureau\HijackThis.lnk: trouvé !
C:\Documents and Settings\james\Bureau\HJTInstall.exe: trouvé !
C:\Documents and Settings\james\Local Settings\Temp\Répertoire temporaire 1 pour clean.zip\clean\clean.cmd: trouvé !
C:\Documents and Settings\james\Local Settings\Temp\Répertoire temporaire 2 pour clean.zip\clean\clean.cmd: trouvé !
C:\Documents and Settings\james\Mes documents\HijackThis.exe: trouvé !
C:\Program Files\Trend Micro\HijackThis: trouvé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc101\clean\tar.exe: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc101\clean\remove.reg: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc101\clean\pskill.exe: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc101\clean\LFiles.exe: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc101\clean\gzip.exe: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc101\clean\delsiri.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc101\clean\delr.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc101\clean\del3.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc101\clean\del2.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc101\clean\clean.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc101\clean\cherche.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\tar.exe: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\remove.reg: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\pskill.exe: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\LFiles.exe: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\gzip.exe: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\delsiri.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\delr.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\del3.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\del2.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\clean.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\cherche.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\clean\tar.exe: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\clean\remove.reg: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\clean\pskill.exe: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\clean\LFiles.exe: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\clean\gzip.exe: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\clean\delsiri.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\clean\delr.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\clean\del3.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\clean\del2.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\clean\clean.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\clean\cherche.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc97\clean\tar.exe: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc97\clean\remove.reg: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc97\clean\pskill.exe: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc97\clean\LFiles.exe: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc97\clean\gzip.exe: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc97\clean\delsiri.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc97\clean\delr.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc97\clean\del3.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc97\clean\del2.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc97\clean\clean.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc97\clean\cherche.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc98\clean\tar.exe: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc98\clean\remove.reg: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc98\clean\pskill.exe: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc98\clean\LFiles.exe: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc98\clean\gzip.exe: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc98\clean\delsiri.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc98\clean\delr.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc98\clean\del3.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc98\clean\del2.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc98\clean\clean.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc98\clean\cherche.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc99\tar.exe: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc99\remove.reg: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc99\pskill.exe: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc99\LFiles.exe: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc99\gzip.exe: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc99\delsiri.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc99\delr.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc99\del3.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc99\del2.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc99\clean.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc99\cherche.cmd: trouvé !

---------------------------------
-->- Suppression:

C:\Clean.zip: supprimé !
C:\clean\clean\tar.exe: supprimé !
C:\clean\clean\remove.reg: supprimé !
C:\clean\clean\pskill.exe: supprimé !
C:\clean\clean\LFiles.exe: supprimé !
C:\clean\clean\gzip.exe: supprimé !
C:\clean\clean\delsiri.cmd: supprimé !
C:\clean\clean\delr.cmd: supprimé !
C:\clean\clean\del3.cmd: supprimé !
C:\clean\clean\del2.cmd: supprimé !
C:\clean\clean\clean.cmd: supprimé !
C:\clean\clean\cherche.cmd: supprimé !
C:\Documents and Settings\james\Bureau\HijackThis.lnk: supprimé !
C:\Documents and Settings\james\Bureau\HJTInstall.exe: supprimé !
C:\Documents and Settings\james\Local Settings\Temp\Répertoire temporaire 1 pour clean.zip\clean\clean.cmd: ERREUR DE SUPPRESSION !!
C:\Documents and Settings\james\Local Settings\Temp\Répertoire temporaire 2 pour clean.zip\clean\clean.cmd: ERREUR DE SUPPRESSION !!
C:\Documents and Settings\james\Mes documents\HijackThis.exe: supprimé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc101\clean\tar.exe: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc101\clean\remove.reg: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc101\clean\pskill.exe: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc101\clean\LFiles.exe: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc101\clean\gzip.exe: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc101\clean\delsiri.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc101\clean\delr.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc101\clean\del3.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc101\clean\del2.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc101\clean\clean.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc101\clean\cherche.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\tar.exe: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\remove.reg: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\pskill.exe: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\LFiles.exe: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\gzip.exe: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\delsiri.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\delr.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\del3.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\del2.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\clean.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\cherche.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\clean\tar.exe: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\clean\remove.reg: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\clean\pskill.exe: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\clean\LFiles.exe: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\clean\gzip.exe: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\clean\delsiri.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\clean\delr.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\clean\del3.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\clean\del2.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\clean\clean.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\clean\cherche.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc97\clean\tar.exe: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc97\clean\remove.reg: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc97\clean\pskill.exe: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc97\clean\LFiles.exe: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc97\clean\gzip.exe: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc97\clean\delsiri.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc97\clean\delr.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc97\clean\del3.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc97\clean\del2.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc97\clean\clean.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc97\clean\cherche.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc98\clean\tar.exe: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc98\clean\remove.reg: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc98\clean\pskill.exe: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc98\clean\LFiles.exe: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc98\clean\gzip.exe: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc98\clean\delsiri.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc98\clean\delr.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc98\clean\del3.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc98\clean\del2.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc98\clean\clean.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc98\clean\cherche.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc99\tar.exe: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc99\remove.reg: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc99\pskill.exe: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc99\LFiles.exe: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc99\gzip.exe: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc99\delsiri.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc99\delr.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc99\del3.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc99\del2.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc99\clean.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc99\cherche.cmd: supprimé !
C:\HijackThis: supprimé !
C:\Program Files\Trend Micro\HijackThis: supprimé !

Sauvegarde du registre crée !

Re ahh voila =)

bon bon bon :

→ Ferme toutes les applications en cours, puis télécharge ToolsCleaner2 sur ton Bureau.

→ Double clique sur ToolsCleaner2.exe >
→ Clique sur .Recherche
→ puis sur Suppression quand la liste est trouvée.
→ Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).

Note : ton bureau RISQUE de disparaître, c'est normal. S'il n'apparaît pas à la fin du scan, fais la manip suivante :

CTRL+ALT+SUPP pour ouvrir le Gestionnaire des tâches.
Puis rends toi à l'onglet "Processus". Clique en haut à gauche sur Fichiers et choisis "Exécuter"

Tape explorer.exe et valide. Cela fera re-apparaître le Bureau

Tuto : http://www.commentcamarche.net/faq/sujet 8341 toolscleaner suppression des fix de force brute ( merci espion3004 )

ton pc est-t'il toujours aussi lent ?
a+

En MSE j'ai cliqué sur 2 ( nettoyage)

Script execute en mode sans echec
Rapport clean par Malekal_morte - http://www.malekal.com
Script execute en mode sans echec 24/03/2008 a 21:46:03,76

Microsoft Windows XP [version 5.1.2600]

*** Suppression des fichiers dans C:

*** Suppression des fichiers dans C:\WINDOWS\

*** Suppression des fichiers dans C:\WINDOWS\system32

*** Suppression des fichiers dans C:\Program Files
tentative de suppression de "C:\Program Files\InternetGameBox\"

*** Suppression des clefs du registre effectuee..
*** Fin du rapport !

Je t'ai refais hijack

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:59:21, on 24/03/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Linksys\Wireless-G Notebook Adapter\NICServ.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ZoomingHook.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
C:\Program Files\TOSHIBA\Accessibility\FnKeyHook.exe
C:\Program Files\TOSHIBA\Commandes TOSHIBA\TFncKy.exe
C:\WINDOWS\system32\TCtrlIOHook.exe
C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
C:\Program Files\ltmoh\Ltmoh.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\TPSBattM.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\Linksys\Wireless-G Notebook Adapter\Gcc.exe
C:\Program Files\Linksys\Wireless-G Notebook Adapter\OdHost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: PagoBar - {0A4F47F9-E276-4AE4-83E5-C7D9E476883A} - C:\PROGRA~1\PagoBar\PagoBar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [Zooming] ZoomingHook.exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [Tvs] C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
O4 - HKLM\..\Run: [TPNF] C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
O4 - HKLM\..\Run: [TOSHIBA Accessibility] C:\Program Files\TOSHIBA\Accessibility\FnKeyHook.exe
O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
O4 - HKLM\..\Run: [TCtryIOHook] TCtrlIOHook.exe
O4 - HKLM\..\Run: [SVPWUTIL] C:\Program Files\Toshiba\Windows Utilities\SVPWUTIL.exe SVPwUTIL
O4 - HKLM\..\Run: [SmoothView] C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] "C:\Program Files\Fichiers communs\Logitech\khalshared\KHALMNPR.EXE"
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HWSetup] C:\Program Files\TOSHIBA\TOSHIBA Applet\HWSetup.exe hwSetUP
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [CeEKEY] C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [9xadiras] 9xadiras.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Wireless-G Notebook Adapter.lnk = C:\Program Files\Linksys\Wireless-G Notebook Adapter\Gcc.exe
O8 - Extra context menu item: &eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{3E4E9FDC-67A5-45FA-9AA4-50D7CF1507CB}: NameServer = 85.37.17.55 85.38.28.93
O17 - HKLM\System\CS1\Services\Tcpip\..\{3E4E9FDC-67A5-45FA-9AA4-50D7CF1507CB}: NameServer = 85.37.17.55 85.38.28.93
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NICSer_WPC54G - Unknown owner - C:\Program Files\Linksys\Wireless-G Notebook Adapter\NICServ.exe
O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

Clean option2 stp pas 1.
Recommence
A+

clean relancé e MSE: 24/03/2008 a 21:14:59,45

*** Recherche des fichiers dans C:

*** Recherche des fichiers dans C:\WINDOWS\

*** Recherche des fichiers dans C:\WINDOWS\system32

*** Recherche des fichiers dans C:\Program Files
"C:\Program Files\InternetGameBox\" FOUND
*** Fin du rapport !

Et dernier rapport

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:30:54, on 24/03/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Linksys\Wireless-G Notebook Adapter\NICServ.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ZoomingHook.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
C:\Program Files\TOSHIBA\Accessibility\FnKeyHook.exe
C:\Program Files\TOSHIBA\Commandes TOSHIBA\TFncKy.exe
C:\WINDOWS\system32\TCtrlIOHook.exe
C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
C:\Program Files\ltmoh\Ltmoh.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\system32\TPSBattM.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Linksys\Wireless-G Notebook Adapter\Gcc.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\Linksys\Wireless-G Notebook Adapter\OdHost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: PagoBar - {0A4F47F9-E276-4AE4-83E5-C7D9E476883A} - C:\PROGRA~1\PagoBar\PagoBar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [Zooming] ZoomingHook.exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [Tvs] C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
O4 - HKLM\..\Run: [TPNF] C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
O4 - HKLM\..\Run: [TOSHIBA Accessibility] C:\Program Files\TOSHIBA\Accessibility\FnKeyHook.exe
O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
O4 - HKLM\..\Run: [TCtryIOHook] TCtrlIOHook.exe
O4 - HKLM\..\Run: [SVPWUTIL] C:\Program Files\Toshiba\Windows Utilities\SVPWUTIL.exe SVPwUTIL
O4 - HKLM\..\Run: [SmoothView] C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] "C:\Program Files\Fichiers communs\Logitech\khalshared\KHALMNPR.EXE"
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HWSetup] C:\Program Files\TOSHIBA\TOSHIBA Applet\HWSetup.exe hwSetUP
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [CeEKEY] C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [9xadiras] 9xadiras.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Wireless-G Notebook Adapter.lnk = C:\Program Files\Linksys\Wireless-G Notebook Adapter\Gcc.exe
O8 - Extra context menu item: &eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{3E4E9FDC-67A5-45FA-9AA4-50D7CF1507CB}: NameServer = 85.37.17.55 85.38.28.93
O17 - HKLM\System\CS1\Services\Tcpip\..\{3E4E9FDC-67A5-45FA-9AA4-50D7CF1507CB}: NameServer = 85.37.17.55 85.38.28.93
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NICSer_WPC54G - Unknown owner - C:\Program Files\Linksys\Wireless-G Notebook Adapter\NICServ.exe
O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

→ Redémarre en MSE

Autre tutorials pour MSE:

https://www.micro-astuce.com/depannage/demarrer-mode-sans-echec.php
http://www.coupdepoucepc.com/modules/news/article.php?storyid=253

→ Re-lance clean -> Choisis l'option 2

---Clean va travailler.---

→ Un rapport Va etre généré , poste le moi ;)

( Le rapport est aussi sauvegardé dans C:\Rapport_clean.txt )

+ un autre rapport hijackthis.

a+

?

tu tapes 1 puis [entrée]

A+

Re ,

C'est marqué pourtant ...

clean.cmd ( ou clean tout seul )

a+

De rien =)

Et hop 370 mo de gagné ;)

Passe à clean maintenant.

A+

Voici le 1er rapport sur les trois demandés.
En effet je réside en Italie. Dans un petit village où je suis bien isolé(informatiquement parlant) je n'ai pas d'échanges.

Heureusement qu'il existe cette communauté et des gens comme toi pour aider les modestes internautes. Merci

CleanUp! started on 03/24/08 09:56:03.
...
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\I31FHGHA\unlimited[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\I31FHGHA\UT[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\I31FHGHA\WindowsLive[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\I31FHGHA\yui_2.3.1_1[1].js - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\0000000001_000000000000000301318[1].jpg - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\0000000001_000000000000000319645[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\0000000001_000000000000000353126[1].jpg - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\10356336-4[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\1431867162@Top,Middle,TopRight[1] - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\35373037636537343437653535326330[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\5[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\61046683[1].jpg - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\70x50cetelem[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\931x100_mobile[1].swf - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\ADSAdClient31[1].htm - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\ADSAdClient31[2].htm - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\ADSAdClient31[3].htm - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\ADSAdClient31[4].htm - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\answers_favicon[1].ico - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\antivir-parametrage-002[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\Antivir-parametrage-menu-001[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\arrow[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\arrow[2].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\ATT00083[1].swf - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\b3[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\back_onglets[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\back_suite02[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\back_tabs[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\back_titre[1].jpg - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\bcr_2.0.4[1].js - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\bhp002[1].js - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\bhp006[1].js - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\bhp010[1].js - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\botSx[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\btnMenu01[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\btn_search_01[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\BurstingInteractionsPipe[1].htm - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\button_bg[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\CAAWDSBC.HTM - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\CAJERGD6 - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\calciatori2_2[1].jpg - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\clear[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\clear[2].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\easte1[1].jpg - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\faviconCA0E1LBG.ico - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\faviconCAYE6QIL.ico - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\favicon[10].ico - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\favicon[11].ico - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\favicon[1].ico - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\favicon[2].ico - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\favicon[3].ico - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\favicon[4].ico - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\favicon[5].ico - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\favicon[6].ico - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\favicon[7].ico - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\favicon[8].ico - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\favicon[9].ico - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\flechebas[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\fotDx[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\freccette_Big[1].jpg - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\fr_yahoo_com[1].htm - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\gif_totocalcio_tris[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\giocoResponsabile[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\header[1].js - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\hit[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\homeScommesse[1].js - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\icoLogout[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\InboxLight[1].htm - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\i_help[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\i_yellowshield[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\LayoutCommon[1].css - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\Light[1].js - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\logoAmsBkgnd[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\logoAmsPart2[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\logo[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\manifestazioniDwr[1].js - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\midDx[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\midSx[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\midSx[2].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\mpoko8[1].jpg - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\never_lose[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\nissa[1].jpg - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\pcbackedup_gw_logo[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\pic_empty[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\pic_rss[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\plx[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\ReadMessageLight[1].htm - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\ReadMessageLight[2].htm - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\ReadMessageLight[3].htm - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\ReadMessageLight[4].htm - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\Request[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\show_ads[1].js - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\sprite_forum[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\template_css[1].css - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\TFSMflashobject[1].js - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\thala7[1].jpg - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\ToolbarBG[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\topCen[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\topDx[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\topSx[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\touch[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\tracker[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\transp[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\tryitfree_gw_logo[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\utbkgnd[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\util[1].js - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\v53[1].js - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\wbk194.tmp - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\zlsSetup_70_462_000_fr[1].exe - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\10356341-3[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\1149046468@Position4!Position4[1] - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\60996034[1].jpg - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\61045671[1].jpg - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\actions_06[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\ADSAdClient31[1].htm - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\ADSAdClient31[2].htm - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\ADSAdClient31[3].htm - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\ADSAdClient31[4].htm - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\ADSAdClient31[5].htm - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\ADSAdClient31[6].htm - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\ads[1].htm - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\advertisement[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\affich-5553728-probleme-de-pc-virus-probable[1].htm - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\affich-5553728-probleme-de-pc-virus-probable[2].htm - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\ajout[1].htm - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\b2[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\back_ccm_ht[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\back_suite01[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\back_tab_off6[1].jpg - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\back_titre[1].jpg - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\bannerSMSetteMezzo[1].jpg - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\bannerSM_FortunaGira[1].jpg - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\bannerSM_Miliardario[1].jpg - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\bgMenu[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\bhp003[1].js - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\bhp007[1].js - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\bnt_search[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\botSx[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\btnApriContoTop[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\calcio_portiere_S[1].jpg - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\carrelloDwr[1].js - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\doveGiocare[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\ebay2[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\emailButton[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\empty[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\engine[1].js - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\faviconCA0J7IGQ.ico - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\favicon[10].ico - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\favicon[11].ico - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\favicon[1].ico - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\favicon[2].ico - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\favicon[3].ico - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\favicon[4].ico - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\favicon[5].ico - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\favicon[6].ico - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\favicon[7].ico - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\favicon[8].ico - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\favicon[9].ico - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\flag_es[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\flag_fr[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\forum[1].css - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\header_short[1].jpg - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\homeBetterDwr[1].js - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\home_better[1].css - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\icc_left1[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\icons_1.1[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\ilede1[1].jpg - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\InboxLight[1].htm - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\indent1[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\intermerche350x200[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\jewel_24_hover[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\jquery-1.2.3.pack[1].js - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\LayoutInbox_12.4.0078.0228[1].css - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\LayoutItemList[1].css - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\lmatica_testata[1].css - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\logo_box_gvinci[1].jpg - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\lottomaticard[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\lunet1[1].jpg - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\midDx[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\midSx[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\paic2[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\pic_02[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\pic_next[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\poivre[1].swf - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\prof[1].xml - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\p[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\ReadMessageLight[1].htm - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\ReadMessageLight[1].js - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\rssico[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\scommesse[1].css - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\sc_rest[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\sempliceVeloce[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\sfondoIcone[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\sfondo_banner[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\spacerVerdeScommesse[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\sprite_charte[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\sp_3[1].htm - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\supporto[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\ThemeCommon_12.4.0078.0228[1].css - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\titGiocoOnLine[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\topCen[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\topDx[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\trans1x1[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\trans1[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\WEBWinLive1036[1].css - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\WLLogin_JS[1].htm - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\yad5[1].js - deleted
C:\Documents and Settings\Default User\Cookies\index.dat - deleted
C:\Documents and Settings\Default User\locals~1\tempor~1\Content.IE5\index.dat - deleted
C:\Documents and Settings\Default User\Cookies\index.dat - deleted
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\index.dat - deleted
Emptied Recycle Bin on drive C:
'Run MRU' list - removed from the registry.
'Doc Find Spec MRU' list - removed from the registry.
'FindComputerMRU' list - removed from the registry.
'ComputerNameMRU' list - removed from the registry.
'ContainingTextMRU' list - removed from the registry.
'FilesNamedMRU' list - removed from the registry.
Search Assistant MRU list - removed from the registry.
Explorer Open/Save MRU list - removed from the registry.
Explorer Last Visited MRU list - removed from the registry.
Paint Recent File List - removed from the registry.
WordPad Recent File List - removed from the registry.
Telnet's MRU list - removed from the registry.
Windows Media Player Recent File List - removed from the registry.
WinZip Extract MRU list - removed from the registry.
WinZip File MRU list - removed from the registry.
CleanUp! 4.5.2 recovered 368.0 MB of disk space from 3664 files.
CleanUp! finished on 03/24/08 09:56:32.

Re !

Tu habites en Italie ?

*******************************************************

Ta version d'Adobe n'est pas à jour , désinstalle ta version actuelle en passant par ' ajout et supréssion de programmes '

Puis télécharge la dernière , via ce site --> https://get2.adobe.com/reader/otherversions/

Bulletin de sécurité sur les versions Adobe 7.0.8 et antérieures :

https://www.adobe.com/support/security/bulletins/apsb07-01.html

https://get2.adobe.com/reader/otherversions/

**************************************************
→ Relance hijackthis , Choisis ' Do a system scan ' Et fixe ces lignes : ( coche la case à leurs gauches > ' fixchecked ')

O4 - Global Startup: DSLMON.lnk = ?
O4 - Global Startup: Logitech SetPoint.lnk = ?
O22 - SharedTaskScheduler: flammei - {9d635a36-6b3c-4146-8625-f3aaf507bbf8} - (no file)

**********************************************

Désinstalle Norton :

http://service1.symantec.com/SUPPORT/INTER/tsgeninfointl.nsf/fr_docid/20050414110429924

Et télécharge Antivir ( PersonnalEdition Classic) → ici

Tuto Installation + configuration Antivir → https://www.malekal.com/avira-free-security-antivirus-gratuit/

Tuto Installation : → https://www.astucesinternet.com/modules/news/article.php?storyid=253

Pour le rendre encore plus discret....

******************************************

Télécharge le pare-feu ZoneAlarm Lit bien tout l'article pour éviter les surprises.

Des soucis avec ?

***************************************

→ Télécharge CleanUp452 ( Primary download site ... )

→ Lance-le et choisi l'option ' cleanup! '

→ Poste le rapport.

Tutorial: http://pageperso.aol.fr/balltrap34/democleanup.htm ( merci à balltrap34 )

************************************

→ Télécharge clean : http://www.malekal.com/download/clean.zip

→ Dézippe-le ( clique droit , extraire tout)

→ Lance clean.cmd ( ou clean ), Choisi l'option 1 et poste moi le rapport.

(- Où est le rapport clean ? : « Poste de travail » / double clic sur disque « C / » double-clic sur « rapport_clean.txt » et « copier/coller le contenu » sur le forum. )

Note : Tu auras peut-être un message qui t'invitera a uploader un fichier , fait-le dès que tu pourras.

*********************************

3 rapports.

_Cleanup
_Clean
_Hijackthis

A poster dans l'ordre.

A+

Re ,

Reposte un rapport Hijackthis stp.

A+

Recommence il a tout ignoré.

fait ceci :

Puis sur l'onglet Paramètres
sous "Comment réagir", clique sur Actions recommandées. Sélectionne Quarantaine.

A+

Re , ah merde.

Lance AVG Anti-Spyware

Clique sur le bouton Analyse (de la barre d'outils)

fais dans l'ordre stp. Tu sauvegardes le rapport APRES avoir mis les actions.

Puis sur l'onglet Paramètres
sous "Comment réagir", clique sur Actions recommandées. Sélectionne Quarantaine.

Reviens à l'onglet Analyse. Clique sur Analyse complète du système.

A la fin du scan, choisis l'option 3

"Appliquer toutes les actions " en bas.

Clique sur "Enregistrer le rapport".

Ceci génère un rapport en fichier texte qui se trouve dans le dossier Reports du dossier d'AVG Anti-Spyware.

Poste le moi.

A+

Re , fait ceci :

Va sur ce site , /!\ Internet Explorer obligatoire /!\ , Clique sur ' J'accepte ' , Installe les ActiveX si necessaire ,et vérifie si ils sont bien configurés Clique sur ' installer ' puis ' click here to scan '( ou : cliquez ici pour scanner ).
Et poste moi le rapport.

a+