Infectée par vundo.dll
RésoluVoila Mon antivirus(Avast) me signale un cheval de troie(vundo.dll)...
Apres avoir cherché dans ce forum,j ai fait un scan Jackthis et voilà mon rapport...
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:16:47, on 4/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\system32\oodag.exe
C:\WINDOWS\system32\svchost.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Search Settings\SearchSettings.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\lexpps.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
c:\documents and settings\autumn\local settings\application data\wokuwok.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Seekmo /fleok=1D8A83A5C4ED13799EAC6D2A1FBB39BFE4976E26CAEDA120180A196D6093 - {07AA283A-43D7-4CBE-A064-32A21112D94D} - C:\Program Files\Seekmo\bin\10.0.370.0\HostIE.dll (file missing)
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: BHO pour Compagnon Web Encarta - {955BE0B8-BC85-4CAF-856E-8E0D8B610560} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Web Companion\2007\ENCWCBAR.DLL
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\en-us\msntb.dll
O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\en-us\msntb.dll
O3 - Toolbar: Compagnon Web Encarta - {147D6308-0614-4112-89B1-31402F9B82C4} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Web Companion\2007\ENCWCBAR.DLL
O3 - Toolbar: Seekmo - {07AA283A-43D7-4CBE-A064-32A21112D94D} - C:\Program Files\Seekmo\bin\10.0.370.0\HostIE.dll (file missing)
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [Lexmark 1200 Series] "C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe"
O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Itch ford four knob] C:\Documents and Settings\All Users\Application Data\third lies itch ford\LOCKS ACTIVE.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [wokuwok] c:\documents and settings\autumn\local settings\application data\wokuwok.exe wokuwok
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-21-528292789-866590285-122395991-1010\..\Run: [E07FXLRD_8894968] "C:\Program Files\Microsoft Encarta\Microsoft Encarta 2007 - Collection DVD\EDICT.EXE" -m (User 'Alex')
O4 - HKUS\S-1-5-21-528292789-866590285-122395991-1010\..\Run: [CURB SPAM] C:\DOCUME~1\Alex\APPLIC~1\SIZETH~1\logamok.exe (User 'Alex')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - S-1-5-21-528292789-866590285-122395991-1010 Startup: IMVU.lnk = C:\Program Files\IMVU\IMVUClient.exe (User 'Alex')
O4 - S-1-5-21-528292789-866590285-122395991-1010 User Startup: IMVU.lnk = C:\Program Files\IMVU\IMVUClient.exe (User 'Alex')
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZNxmk789YYBE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: Barre de recherche Encarta - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\Alex\Menu Démarrer\Programmes\IMVU\Run IMVU.lnk
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei/SmileyCentralFWBInitialSetup1.0.0.15-3.cab
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://support.norton.com/sp/en/us/home/current/info
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {3451DEDE-631F-421C-8127-FD793AFC6CC8} (ActiveDataInfo Class) - https://support.norton.com/sp/en/us/home/current/info
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~3\Office12\GR99D3~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: yayaaXPi - C:\WINDOWS\SYSTEM32\yayaaXPi.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Unknown owner - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe (file missing)
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\Logitech\SrvLnch\SrvLnch.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe
--
End of file - 10909 bytes
Merci de m aider a me debarrasser de cette mechante bete : )
Bizzzzz a vous
Stef
Configuration: Windows XP Firefox 2.0.0.14
29 réponses
Alerte Avast signale la présence d'un cheval de Troie nommé vundo.dll et le rapport HijackThis dresse une liste étendue de processus, modules et éléments de démarrage susceptibles d'infecter Windows XP. Des réponses proposent des actions de nettoyage clés, notamment désinstaller Avast et installer Antivir Personal Edition Classic, puis utiliser ToolsCleaner pour supprimer les outils résiduels et les extensions suspectes. Un autre volet recommande d'utiliser l'outil de déinstallation d' Avast et de s'appuyer sur des procédures de suppression ciblées des barres d'outils, des BHO et des entrées de démarrage. Selon la meilleure réponse, le système serait propre et il est recommandé, le cas échéant, de modifier le statut du sujet en résolu tout en restant vigilant sur d'éventuels restes.
-
de rien ciao et bon surf
-
Ok Merci beaucoup pour ton aide et pour le temps que tu y a passé...Je suis tres tres tres satisfaite ; )))))
Bizzzz
Stef -
ok c est clean :
Si tu es satisfait de mon intervention
et que tu n as plus de probleme
change le statut du sujet en résolu stp
pour cela va en haut sur ta premiere question et la tu as le choix -
-->- Recherche:
C:\Qoobox: trouvé !
C:\_OtMoveIt: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: trouvé !
C:\Documents and Settings\autumn\Bureau\HijackThis.lnk: trouvé !
C:\Documents and Settings\autumn\Bureau\OtMoveIt2.exe: trouvé !
C:\Documents and Settings\autumn\Bureau\ComboFix.exe: trouvé !
C:\Program Files\Trend Micro\HijackThis: trouvé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !
---------------------------------
-->- Suppression:
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: supprimé !
C:\Documents and Settings\autumn\Bureau\HijackThis.lnk: supprimé !
C:\Documents and Settings\autumn\Bureau\OtMoveIt2.exe: supprimé !
C:\Documents and Settings\autumn\Bureau\ComboFix.exe: supprimé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: supprimé !
C:\Qoobox: supprimé !
C:\_OtMoveIt: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: supprimé !
C:\Program Files\Trend Micro\HijackThis: supprimé ! -
OK C est clean !
regarde ceci concernant avast :
antivir vs avast :
-> http://forum.malekal.com/ftopic3528.php
alors je te conseille de le desinstaller et d´installer antivir a la place
Telecharge et instales l'antivirus Antivir Personal Edition Classic :
->https://www.malekal.com/avira-free-security-antivirus-gratuit/
https://www.avira.com/en/prime
http://mickael.barroux.free.fr/securite/antivir.php
http://speedweb1.free.fr/frames2.php?page=tuto5
Pour désinstaller Avast telecharge cet outil
https://www.avast.com/fr-fr/uninstall-utility
ensuite pour finir :
* pour supprimer les outils/fix utilisés :
Télécharge ToolsCleaner sur ton bureau.
-->
http://pagesperso-orange.fr/AceRothstein/ToolsCleaner2.exe
http://a-rothstein.changelog.fr/TC/ToolsCleaner2.exe
# Clique sur Recherche et laisse le scan agir ...
# Clique sur Suppression pour finaliser.
# Tu peux, si tu le souhaites, te servir des Options facultatives.
# Clique sur Quitter pour obtenir le rapport.
# Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\). -
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:56:05, on 6/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\system32\oodag.exe
C:\WINDOWS\system32\svchost.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: BHO pour Compagnon Web Encarta - {955BE0B8-BC85-4CAF-856E-8E0D8B610560} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Web Companion\2007\ENCWCBAR.DLL
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\en-us\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\en-us\msntb.dll
O3 - Toolbar: Compagnon Web Encarta - {147D6308-0614-4112-89B1-31402F9B82C4} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Web Companion\2007\ENCWCBAR.DLL
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Splash screen for Avast!] C:\Program Files\Alwil Software\Avast4\ashAvast.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: Barre de recherche Encarta - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\Alex\Menu Démarrer\Programmes\IMVU\Run IMVU.lnk
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~3\Office12\GR99D3~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\Logitech\SrvLnch\SrvLnch.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe
-
---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------
+ Créé à: 14:45:03 6/06/2008
+ Résultat de l'analyse:
:mozilla.143:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.144:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.145:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.146:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.18:C:\Documents and Settings\autumn\Application Data\Mozilla\Profiles\default\sizt37lq.slt\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.19:C:\Documents and Settings\autumn\Application Data\Mozilla\Profiles\default\sizt37lq.slt\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.20:C:\Documents and Settings\autumn\Application Data\Mozilla\Profiles\default\sizt37lq.slt\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.21:C:\Documents and Settings\autumn\Application Data\Mozilla\Profiles\default\sizt37lq.slt\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.22:C:\Documents and Settings\autumn\Application Data\Mozilla\Profiles\default\sizt37lq.slt\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.23:C:\Documents and Settings\autumn\Application Data\Mozilla\Profiles\default\sizt37lq.slt\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.284:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.285:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.286:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.298:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.44:C:\Documents and Settings\autumn\Application Data\Mozilla\Profiles\default\sizt37lq.slt\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.307:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.308:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.309:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.310:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
C:\Documents and Settings\autumn\Cookies\autumn@adbrite[1].txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.178:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
C:\Documents and Settings\autumn\Cookies\autumn@adtech[1].txt -> TrackingCookie.Adtech : Nettoyé.
C:\Documents and Settings\autumn\Cookies\autumn@adtech[2].txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.84:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.90:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.91:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.92:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.93:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.11:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Adviva : Nettoyé.
:mozilla.42:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Atdmt : Nettoyé.
:mozilla.102:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Bluestreak : Nettoyé.
:mozilla.26:C:\Documents and Settings\autumn\Application Data\Mozilla\Profiles\default\sizt37lq.slt\cookies.txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\autumn\Cookies\autumn@bluestreak[2].txt -> TrackingCookie.Bluestreak : Nettoyé.
:mozilla.321:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.322:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.323:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.324:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.508:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Com : Nettoyé.
:mozilla.176:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.177:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.179:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.17:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Doubleclick : Nettoyé.
:mozilla.17:C:\Documents and Settings\autumn\Application Data\Mozilla\Profiles\default\sizt37lq.slt\cookies.txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\autumn\Cookies\autumn@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\autumn\Cookies\autumn@doubleclick[3].txt -> TrackingCookie.Doubleclick : Nettoyé.
:mozilla.391:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Enhance : Nettoyé.
:mozilla.392:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Enhance : Nettoyé.
:mozilla.131:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Estat : Nettoyé.
C:\Documents and Settings\autumn\Cookies\autumn@estat[1].txt -> TrackingCookie.Estat : Nettoyé.
:mozilla.94:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.95:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.96:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.97:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.98:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
C:\Documents and Settings\autumn\Cookies\autumn@fastclick[1].txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.584:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Imrworldwide : Nettoyé.
:mozilla.585:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Imrworldwide : Nettoyé.
:mozilla.10:C:\Documents and Settings\autumn\Application Data\Mozilla\Profiles\default\sizt37lq.slt\cookies.txt -> TrackingCookie.Information : Nettoyé.
:mozilla.8:C:\Documents and Settings\autumn\Application Data\Mozilla\Profiles\default\sizt37lq.slt\cookies.txt -> TrackingCookie.Information : Nettoyé.
:mozilla.9:C:\Documents and Settings\autumn\Application Data\Mozilla\Profiles\default\sizt37lq.slt\cookies.txt -> TrackingCookie.Information : Nettoyé.
C:\Documents and Settings\autumn\Cookies\autumn@www.lop[1].txt -> TrackingCookie.Lop : Nettoyé.
:mozilla.379:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Netflame : Nettoyé.
:mozilla.45:C:\Documents and Settings\autumn\Application Data\Mozilla\Profiles\default\sizt37lq.slt\cookies.txt -> TrackingCookie.Netflame : Nettoyé.
:mozilla.292:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Overture : Nettoyé.
:mozilla.129:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Revsci : Nettoyé.
C:\Documents and Settings\autumn\Cookies\autumn@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.164:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Sitestat : Nettoyé.
:mozilla.165:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Sitestat : Nettoyé.
C:\WINDOWS\system32\config\systemprofile\Cookies\system@skype[1].txt -> TrackingCookie.Skype : Nettoyé.
:mozilla.16:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.18:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.19:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.20:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\autumn\Cookies\autumn@smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.227:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.228:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.229:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
C:\Documents and Settings\autumn\Cookies\autumn@statcounter[1].txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.316:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Tacoda : Nettoyé.
:mozilla.317:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Tacoda : Nettoyé.
:mozilla.318:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Tacoda : Nettoyé.
:mozilla.319:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Tacoda : Nettoyé.
:mozilla.320:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Tacoda : Nettoyé.
:mozilla.21:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.22:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.23:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.24:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.39:C:\Documents and Settings\autumn\Application Data\Mozilla\Profiles\default\sizt37lq.slt\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.40:C:\Documents and Settings\autumn\Application Data\Mozilla\Profiles\default\sizt37lq.slt\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
C:\Documents and Settings\autumn\Cookies\autumn@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.252:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.253:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.87:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.88:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.89:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.356:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Webtrends : Nettoyé.
C:\Documents and Settings\autumn\Cookies\autumn@m.webtrends[1].txt -> TrackingCookie.Webtrends : Nettoyé.
:mozilla.157:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Webtrendslive : Nettoyé.
:mozilla.116:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.117:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.118:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.119:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.120:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.121:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.122:C:\Documents and Settings\autumn\Application Data\Mozilla\Firefox\Profiles\5yrig103.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
C:\Documents and Settings\autumn\Cookies\autumn@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Nettoyé.
C:\Documents and Settings\autumn\Cookies\autumn@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Nettoyé.
Fin du rapport -
réouvre hijackthis
fais scan only
coche ces lignes :
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
R3 - URLSearchHook: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - (no file)
O2 - BHO: (no name) - {BA9A5E2B-606B-49CE-A429-FF6E66367B70} - C:\WINDOWS\system32\pmnoPfeb.dll (file missing)
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://support.norton.com/sp/en/us/home/current/info
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {3451DEDE-631F-421C-8127-FD793AFC6CC8} (ActiveDataInfo Class) - https://support.norton.com/sp/en/us/home/current/info
tu les coches et tu clic sur fix checked
ensuite fais ça :
Démarrer > executer > ' services.msc ' ,
- Clic droit sur le service cité - Logitech Process Monitor
- propriétés
- et dans "type de démarrage" et mets le sur « désactivé ».
- Ensuite si le "Status du service" est sur "Démarré" faire : « arrêté »
Tutorial : https://www.zebulon.fr/dossiers/windows/31-services.html
ensuite :
Télecharge et instal AVG anti spyware:
http://www.commentcamarche.net/telecharger/telecharger 218 avg anti spyware
instal le et met le a jours
ensuite lance le scan et supprime
puis poste le rapport sur le forum stp
ensuite déisntal java car pas a jours et telecharge et instal cette version :
https://www.java.com/fr/download/manual.jsp
ensuite :
telecharge Ccleaner :
https://www.01net.com/telecharger/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/32599.html
instal le sans la barre yahoo
fais lancer le nettoyage
repete l opération jusqu a ce qu il trouve rien
ensuite fais registre
fais chercher les erreures
ensuite fais corriger les erreures
repete l opération jusqu a ce qu il trouve rien
ensuit eregarde si tu trouve ce dossier :
C:\Documents and Settings\All Users\Application Data\third lies itch ford
si oui supprime le
ensuite refai sun scan hijackthis et poste le rapport stp -
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:12:30, on 6/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\system32\oodag.exe
C:\WINDOWS\system32\svchost.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\lexpps.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
R3 - URLSearchHook: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - (no file)
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: BHO pour Compagnon Web Encarta - {955BE0B8-BC85-4CAF-856E-8E0D8B610560} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Web Companion\2007\ENCWCBAR.DLL
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O2 - BHO: (no name) - {BA9A5E2B-606B-49CE-A429-FF6E66367B70} - C:\WINDOWS\system32\pmnoPfeb.dll (file missing)
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\en-us\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\en-us\msntb.dll
O3 - Toolbar: Compagnon Web Encarta - {147D6308-0614-4112-89B1-31402F9B82C4} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Web Companion\2007\ENCWCBAR.DLL
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [Itch ford four knob] C:\Documents and Settings\All Users\Application Data\third lies itch ford\LOCKS ACTIVE.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Splash screen for Avast!] C:\Program Files\Alwil Software\Avast4\ashAvast.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-21-528292789-866590285-122395991-1010\..\Run: [E07FXLRD_8894968] "C:\Program Files\Microsoft Encarta\Microsoft Encarta 2007 - Collection DVD\EDICT.EXE" -m (User 'Alex')
O4 - HKUS\S-1-5-21-528292789-866590285-122395991-1010\..\Run: [CURB SPAM] C:\DOCUME~1\Alex\APPLIC~1\SIZETH~1\logamok.exe (User 'Alex')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - S-1-5-21-528292789-866590285-122395991-1010 Startup: IMVU.lnk = C:\Program Files\IMVU\IMVUClient.exe (User 'Alex')
O4 - S-1-5-21-528292789-866590285-122395991-1010 User Startup: IMVU.lnk = C:\Program Files\IMVU\IMVUClient.exe (User 'Alex')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: Barre de recherche Encarta - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\Alex\Menu Démarrer\Programmes\IMVU\Run IMVU.lnk
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://support.norton.com/sp/en/us/home/current/info
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {3451DEDE-631F-421C-8127-FD793AFC6CC8} (ActiveDataInfo Class) - https://support.norton.com/sp/en/us/home/current/info
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~3\Office12\GR99D3~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Unknown owner - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe (file missing)
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\Logitech\SrvLnch\SrvLnch.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe
-
ok refais un scan hijackthis et poste le rapport stp
-
C:\Documents and Settings\All Users\Application Data\third lies itch ford\LOCKS ACTIVE.exe moved successfully.
File/Folder C:\DOCUME~1\Alex\APPLIC~1\SIZETH~1\logamok.exe not found.
C:\Documents and Settings\All Users\Application Data\third lies itch ford moved successfully.
File/Folder not found.
OTMoveIt2 by OldTimer - Version 1.0.4.2 log created on 06062008_130459 -
télécharge OTMoveIt http://download.bleepingcomputer.com/oldtimer/OTMoveIt2.exe (de Old_Timer) sur ton Bureau.
double-clique sur OTMoveIt.exe pour le lancer.
copie la liste qui se trouve en gras ci-dessous,
et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved.
C:\Documents and Settings\All Users\Application Data\third lies itch ford\LOCKS ACTIVE.exe
C:\DOCUME~1\Alex\APPLIC~1\SIZETH~1\logamok.exe
C:\Documents and Settings\All Users\Application Data\third lies itch ford\
clique sur MoveIt! pour lancer la suppression.
le résultat apparaitra dans le cadre "Results".
clique sur Exit pour fermer.
poste le rapport situé dans C:\_OTMoveIt\MovedFiles.
il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes.
-
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:49:46, on 6/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\system32\oodag.exe
C:\WINDOWS\system32\svchost.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\lexpps.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
R3 - URLSearchHook: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - (no file)
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: BHO pour Compagnon Web Encarta - {955BE0B8-BC85-4CAF-856E-8E0D8B610560} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Web Companion\2007\ENCWCBAR.DLL
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O2 - BHO: (no name) - {BA9A5E2B-606B-49CE-A429-FF6E66367B70} - C:\WINDOWS\system32\pmnoPfeb.dll (file missing)
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\en-us\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\en-us\msntb.dll
O3 - Toolbar: Compagnon Web Encarta - {147D6308-0614-4112-89B1-31402F9B82C4} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Web Companion\2007\ENCWCBAR.DLL
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [Itch ford four knob] C:\Documents and Settings\All Users\Application Data\third lies itch ford\LOCKS ACTIVE.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Splash screen for Avast!] C:\Program Files\Alwil Software\Avast4\ashAvast.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-21-528292789-866590285-122395991-1010\..\Run: [E07FXLRD_8894968] "C:\Program Files\Microsoft Encarta\Microsoft Encarta 2007 - Collection DVD\EDICT.EXE" -m (User 'Alex')
O4 - HKUS\S-1-5-21-528292789-866590285-122395991-1010\..\Run: [CURB SPAM] C:\DOCUME~1\Alex\APPLIC~1\SIZETH~1\logamok.exe (User 'Alex')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - S-1-5-21-528292789-866590285-122395991-1010 Startup: IMVU.lnk = C:\Program Files\IMVU\IMVUClient.exe (User 'Alex')
O4 - S-1-5-21-528292789-866590285-122395991-1010 User Startup: IMVU.lnk = C:\Program Files\IMVU\IMVUClient.exe (User 'Alex')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: Barre de recherche Encarta - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\Alex\Menu Démarrer\Programmes\IMVU\Run IMVU.lnk
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://support.norton.com/sp/en/us/home/current/info
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {3451DEDE-631F-421C-8127-FD793AFC6CC8} (ActiveDataInfo Class) - https://support.norton.com/sp/en/us/home/current/info
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~3\Office12\GR99D3~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Unknown owner - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe (file missing)
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\Logitech\SrvLnch\SrvLnch.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe
-
ComboFix 08-06-04.5 - autumn 2008-06-06 12:33:10.2 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.142 [GMT 2:00]
Endroit: C:\Documents and Settings\autumn\Bureau\ComboFix.exe
Command switches used :: C:\Documents and Settings\autumn\Bureau\CFScript.txt..txt
* Création d'un nouveau point de restauration
[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
FILE ::
C:\Documents and Settings\All Users\Application Data\third lies itch ford\Online deaf.exe
C:\PROGRA~1\MYWEBS~1\bar\1.bin\MWSBAR.DLL,S
C:\PROGRA~1\MYWEBS~1\bar\2.bin\mwsoemon.exe
C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
C:\Program Files\Search Settings\kb127\SearchSettings.dll
C:\Program Files\Search Settings\SearchSettings.exe
C:\upload_moi_PAIX2007.tar.gz
C:\WINDOWS\QTFont.for
C:\WINDOWS\QTFont.qfn
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\Program Files\Search Settings
C:\Program Files\Search Settings\kb127\SearchSettings.dll
C:\Program Files\Search Settings\kb127\SearchSettingsRes409.dll
C:\Program Files\Search Settings\SearchSettings.exe
C:\WINDOWS\QTFont.for
C:\WINDOWS\QTFont.qfn
.
((((((((((((((((((((((((((((( Fichiers créés 2008-05-06 to 2008-06-06 ))))))))))))))))))))))))))))))))))))
.
2008-06-04 22:25 . 2008-06-04 22:25 <REP> d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-06-04 22:25 . 2008-06-04 22:25 <REP> d-------- C:\Documents and Settings\autumn\Application Data\Malwarebytes
2008-06-04 22:25 . 2008-06-04 22:25 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-06-04 22:25 . 2008-05-30 01:06 34,296 --a------ C:\WINDOWS\system32\drivers\mbamcatchme.sys
2008-06-04 22:25 . 2008-05-30 01:06 15,864 --a------ C:\WINDOWS\system32\drivers\mbam.sys
2008-06-04 21:14 . 2008-06-04 21:14 <REP> d-------- C:\Program Files\Trend Micro
2008-06-04 17:17 . 2008-06-04 17:17 <REP> d-------- C:\Program Files\Shareaza
2008-06-04 17:17 . 2008-06-04 17:17 <REP> d-------- C:\Documents and Settings\autumn\Application Data\Shareaza
2008-06-03 16:48 . 2008-03-01 14:58 6,066,176 -----c--- C:\WINDOWS\system32\dllcache\ieframe.dll
2008-06-03 16:48 . 2007-04-17 11:32 2,455,488 -----c--- C:\WINDOWS\system32\dllcache\ieapfltr.dat
2008-06-03 16:48 . 2007-03-08 07:10 1,048,576 -----c--- C:\WINDOWS\system32\dllcache\ieframe.dll.mui
2008-06-03 16:48 . 2008-03-01 14:58 459,264 -----c--- C:\WINDOWS\system32\dllcache\msfeeds.dll
2008-06-03 16:48 . 2008-03-01 14:58 383,488 -----c--- C:\WINDOWS\system32\dllcache\ieapfltr.dll
2008-06-03 16:48 . 2008-03-01 14:58 267,776 -----c--- C:\WINDOWS\system32\dllcache\iertutil.dll
2008-06-03 16:48 . 2008-03-01 14:58 63,488 -----c--- C:\WINDOWS\system32\dllcache\icardie.dll
2008-06-03 16:48 . 2008-03-01 14:58 52,224 -----c--- C:\WINDOWS\system32\dllcache\msfeedsbs.dll
2008-06-03 16:48 . 2008-02-22 12:00 13,824 -----c--- C:\WINDOWS\system32\dllcache\ieudinit.exe
2008-06-03 01:15 . 2008-06-03 01:15 <REP> d-------- C:\Program Files\Microsoft CAPICOM 2.1.0.2
2008-06-02 20:19 . 2008-06-03 17:39 <REP> d-------- C:\Program Files\Fichiers communs\Softwin
2008-06-02 19:59 . 2008-06-04 10:01 <REP> d-------- C:\WINDOWS\system32\fr-fr
2008-06-02 19:55 . 2008-06-04 10:01 1,355 --a------ C:\WINDOWS\imsins.BAK
2008-06-02 19:49 . 2007-07-30 19:19 271,224 --a------ C:\WINDOWS\system32\mucltui.dll
2008-06-02 19:49 . 2007-07-30 19:19 207,736 --a------ C:\WINDOWS\system32\muweb.dll
2008-06-02 19:49 . 2007-07-30 19:18 30,072 --a------ C:\WINDOWS\system32\mucltui.dll.mui
2008-06-02 19:47 . 2008-06-02 19:47 <REP> d-------- C:\Program Files\AxBx
2008-06-02 15:21 . 2008-06-02 15:24 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Lavasoft
2008-06-01 14:19 . 2008-06-01 14:19 <REP> d-------- C:\Program Files\Size The Acid
2008-05-31 19:46 . 2008-05-31 19:46 <REP> d-------- C:\Program Files\iTunes
2008-05-31 19:46 . 2008-05-31 19:46 <REP> d-------- C:\Program Files\iPod
2008-05-31 19:46 . 2008-05-31 19:46 <REP> d-------- C:\Documents and Settings\autumn\Application Data\Apple Computer
2008-05-31 19:44 . 2008-05-31 19:45 <REP> d-------- C:\Program Files\QuickTime
2008-05-31 19:44 . 2008-05-31 19:44 <REP> d-------- C:\Program Files\Apple Software Update
2008-05-31 19:44 . 2008-05-31 19:46 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Apple Computer
2008-05-31 19:43 . 2008-05-31 19:43 <REP> d-------- C:\Program Files\Fichiers communs\Apple
2008-05-31 19:43 . 2008-05-31 19:43 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Apple
2008-05-28 12:16 . 2008-05-28 12:16 <REP> d-------- C:\Documents and Settings\autumn\Application Data\Search Settings
2008-05-27 15:02 . 2008-05-27 15:10 <REP> d-------- C:\Program Files\Free FLV Converter
2008-05-27 15:02 . 2007-06-19 01:22 364,544 --a------ C:\WINDOWS\system32\PropertyGrid.ocx
2008-05-27 15:02 . 2008-05-15 11:30 208,896 --a------ C:\WINDOWS\system32\TubeFinder.exe
2008-05-27 15:02 . 2005-10-13 15:42 208,500 --a------ C:\WINDOWS\system32\ReyXpBasics.tlb
2008-05-27 15:02 . 1998-07-13 01:00 141,312 --a------ C:\WINDOWS\system32\MSCMCFR.DLL
2008-05-27 15:02 . 2000-07-15 07:00 101,888 --a------ C:\WINDOWS\system32\VB6STKIT.DLL
2008-05-27 15:02 . 2004-03-09 02:00 84,512 --a------ C:\WINDOWS\system32\PICCLP32.OCX
2008-05-27 15:02 . 1998-07-12 21:00 32,768 --a------ C:\WINDOWS\system32\CMDLGFR.DLL
2008-05-27 15:02 . 2005-09-28 03:31 24,576 --a------ C:\WINDOWS\system32\ControlSubX.ocx
2008-05-27 15:02 . 1998-07-13 02:00 9,728 --a------ C:\WINDOWS\system32\PCCLPFR.DLL
2008-05-27 14:25 . 2008-05-27 14:44 <REP> d-------- C:\Documents and Settings\autumn\dwhelper
2008-05-23 14:26 . 2007-04-24 11:33 108,680 -ra------ C:\WINDOWS\system32\drivers\s125mdm.sys
2008-05-23 14:26 . 2007-04-24 11:33 100,488 -ra------ C:\WINDOWS\system32\drivers\s125mgmt.sys
2008-05-23 14:26 . 2007-04-24 11:33 98,696 -ra------ C:\WINDOWS\system32\drivers\s125obex.sys
2008-05-23 14:26 . 2007-04-24 11:33 83,336 -ra------ C:\WINDOWS\system32\drivers\s125bus.sys
2008-05-23 14:26 . 2007-04-24 11:33 15,112 -ra------ C:\WINDOWS\system32\drivers\s125mdfl.sys
2008-05-23 14:26 . 2007-04-24 11:33 12,424 -ra------ C:\WINDOWS\system32\drivers\s125whnt.sys
2008-05-23 14:26 . 2007-04-24 11:33 12,424 -ra------ C:\WINDOWS\system32\drivers\s125wh.sys
2008-05-23 14:26 . 2007-04-24 11:33 12,424 -ra------ C:\WINDOWS\system32\drivers\s125cmnt.sys
2008-05-23 14:26 . 2007-04-24 11:33 12,424 -ra------ C:\WINDOWS\system32\drivers\s125cm.sys
2008-05-22 23:27 . 2008-05-22 23:28 <REP> d-------- C:\Program Files\Lexmark 1200 Series
2008-05-22 23:27 . 2006-01-12 12:32 983,107 --a------ C:\WINDOWS\system32\LXCZGF.DLL
2008-05-22 23:27 . 2006-07-13 13:24 458,752 --a------ C:\WINDOWS\system32\LXCZJSWR.DLL
2008-05-22 23:27 . 2006-07-13 13:17 356,352 --a------ C:\WINDOWS\system32\LXCZUTIL.DLL
2008-05-22 23:27 . 2006-07-13 13:45 69,632 --a------ C:\WINDOWS\system32\lxczscin.dll
2008-05-22 23:27 . 2006-07-13 13:45 57,344 --a------ C:\WINDOWS\system32\lxczcinf.dll
2008-05-22 23:27 . 2006-07-13 13:45 49,152 --a------ C:\WINDOWS\system32\lxczcoin.dll
2008-05-22 23:27 . 2006-01-30 20:42 270 --a------ C:\WINDOWS\system32\lxczcoin.ini
2008-05-22 23:15 . 2008-05-22 23:15 <REP> d-------- C:\Lexmark
2008-05-22 21:04 . 2008-05-22 21:04 <REP> d-------- C:\Documents and Settings\autumn\Application Data\Teleca
2008-05-22 21:02 . 2008-05-22 21:02 <REP> d-------- C:\Documents and Settings\autumn\Application Data\Sony Ericsson
2008-05-20 18:03 . 2008-05-20 18:03 <REP> d-------- C:\Program Files\Sony Ericsson
2008-05-20 18:03 . 2008-05-20 18:07 <REP> d-------- C:\Program Files\Fichiers communs\Teleca Shared
2008-05-20 18:03 . 2008-05-20 18:03 <REP> d-------- C:\Program Files\Fichiers communs\Sony Ericsson Shared
2008-05-20 18:02 . 2008-05-20 18:02 <REP> d-------- C:\WINDOWS\Downloaded Installations
2008-05-20 18:00 . 2008-05-20 18:03 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Teleca
2008-05-20 18:00 . 2008-05-20 18:03 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Sony Ericsson
2008-05-16 13:31 . 2004-08-03 23:08 31,616 --a------ C:\WINDOWS\system32\drivers\usbccgp.sys
2008-05-16 13:31 . 2004-08-03 23:08 31,616 --a--c--- C:\WINDOWS\system32\dllcache\usbccgp.sys
2008-05-16 11:58 . 2008-05-16 11:58 12,632 --a------ C:\WINDOWS\system32\lsdelete.exe
2008-05-13 03:53 . 2008-05-13 03:53 3,596,288 --a------ C:\WINDOWS\system32\qt-dx331.dll
2008-05-13 03:53 . 2008-05-13 03:53 524,288 --a------ C:\WINDOWS\system32\DivXsm.exe
2008-05-13 03:53 . 2008-05-13 03:53 9,878 --a------ C:\WINDOWS\system32\dsm_fr.qm
2008-05-13 03:53 . 2008-05-13 03:53 4,816 --a------ C:\WINDOWS\system32\divxsm.tlb
2008-05-13 03:51 . 2008-05-13 03:51 1,044,480 --a------ C:\WINDOWS\system32\libdivx.dll
2008-05-13 03:51 . 2008-05-13 03:51 200,704 --a------ C:\WINDOWS\system32\ssldivx.dll
2008-05-13 03:49 . 2008-05-13 03:49 630,784 --a------ C:\WINDOWS\system32\divxdec.ax
2008-05-13 03:49 . 2008-05-13 03:49 352,401 --a------ C:\WINDOWS\system32\DivXMedia.ax
2008-05-13 03:49 . 2008-05-13 03:49 161,096 --a------ C:\WINDOWS\system32\DivXCodecVersionChecker.exe
2008-05-13 03:49 . 2008-05-13 03:49 12,288 --a------ C:\WINDOWS\system32\DivXWMPExtType.dll
2008-05-13 03:48 . 2008-05-13 03:48 8,835 --a------ C:\WINDOWS\system32\dpufr.qm
2008-05-12 12:37 . 2008-05-12 12:39 <REP> d-------- C:\Program Files\Startup Manager
2008-05-12 12:37 . 2008-05-12 12:37 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Startup Manager
2008-05-12 12:33 . 2008-05-12 12:33 <REP> d-------- C:\Program Files\SystemRequirementsLab
2008-05-12 12:33 . 2008-05-12 12:33 <REP> d-------- C:\Documents and Settings\autumn\Application Data\SystemRequirementsLab
2008-05-12 12:07 . 2008-05-12 12:10 664 --a------ C:\WINDOWS\system32\d3d9caps.dat
2008-05-11 18:11 . 2008-05-11 18:11 <REP> d-------- C:\WINDOWS\Profiles
2008-05-06 17:11 . 2008-05-06 17:12 <REP> d-------- C:\Program Files\SecondLife
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-06-06 09:57 --------- d-----w C:\Program Files\eMule
2008-06-05 16:05 --------- d-----w C:\Documents and Settings\All Users\Application Data\Google Updater
2008-06-02 23:18 --------- d-----w C:\Documents and Settings\All Users\Application Data\Microsoft Help
2008-06-02 15:06 --------- d-----w C:\Program Files\MSN Messenger
2008-06-02 13:21 --------- d-----w C:\Program Files\Lavasoft
2008-06-02 13:20 --------- d-----w C:\Program Files\Fichiers communs\Wise Installation Wizard
2008-06-01 12:20 --------- d-----w C:\Documents and Settings\All Users\Application Data\third lies itch ford
2008-06-01 12:04 --------- d-----w C:\Program Files\DivX
2008-05-30 16:00 --------- d-----w C:\Program Files\Norton Security Scan
2008-05-28 15:46 --------- d-----w C:\Program Files\Yahoo!
2008-05-26 11:12 --------- d-----w C:\Program Files\Zylom Games
2008-05-13 01:53 9,464 ------w C:\WINDOWS\system32\drivers\cdralw2k.sys
2008-05-13 01:53 9,336 ------w C:\WINDOWS\system32\drivers\cdr4_xp.sys
2008-05-13 01:53 43,528 ------w C:\WINDOWS\system32\drivers\PxHelp20.sys
2008-05-13 01:53 129,784 ------w C:\WINDOWS\system32\pxafs.dll
2008-05-13 01:53 120,056 ------w C:\WINDOWS\system32\pxcpyi64.exe
2008-05-13 01:53 118,520 ------w C:\WINDOWS\system32\pxinsi64.exe
2008-05-12 12:16 --------- d-----w C:\Program Files\EA GAMES
2008-05-11 17:57 107,888 ----a-w C:\WINDOWS\system32\CmdLineExt.dll
2008-05-11 16:06 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-05-11 16:06 --------- d-----w C:\Documents and Settings\autumn\Application Data\Microsoft Games
2008-05-11 16:06 --------- d-----w C:\Documents and Settings\All Users\Application Data\Microsoft Games
2008-05-11 16:00 --------- d-----w C:\Program Files\Fichiers communs\Logitech
2008-05-11 15:58 --------- d-----w C:\Program Files\Google
2008-05-06 15:45 --------- d-----w C:\Documents and Settings\autumn\Application Data\SecondLife
2008-05-01 20:23 --------- d-----w C:\Documents and Settings\autumn\Application Data\Skype
2008-04-30 22:30 --------- d-----w C:\Program Files\Common Files
2008-04-29 09:20 15,648 ----a-w C:\WINDOWS\system32\drivers\NSDriver.sys
2008-04-29 09:19 15,648 ----a-w C:\WINDOWS\system32\drivers\Awrtrd.sys
2008-04-29 09:19 12,960 ----a-w C:\WINDOWS\system32\drivers\Awrtpd.sys
2008-04-28 20:45 --------- d-----w C:\Program Files\Messenger Plus! Live
2008-04-28 07:23 --------- d-----w C:\Program Files\GOA
2008-04-25 10:57 --------- d-----w C:\Documents and Settings\autumn\Application Data\IMVU
2008-04-21 13:41 --------- d-----w C:\Program Files\Atari
2008-04-21 12:34 --------- d-----w C:\Program Files\Sims2Pack Clean Installer
2008-04-21 12:34 --------- d-----w C:\Program Files\MySpace
2008-04-21 12:34 --------- d-----w C:\Program Files\GIMP-2.0
2008-04-21 12:34 --------- d-----w C:\Program Files\Beneton Movie GIF
2008-04-19 21:41 --------- dcsh--w C:\Program Files\Fichiers communs\WindowsLiveInstaller
2008-04-19 21:41 --------- d-----w C:\Program Files\Windows Live
2008-04-19 21:40 --------- d-----w C:\Documents and Settings\All Users\Application Data\WLInstaller
2008-04-19 15:56 --------- d-----w C:\Documents and Settings\All Users\Application Data\DVD Shrink
2008-03-25 04:51 621,344 ----a-w C:\WINDOWS\system32\mswstr10.dll
2008-03-25 04:51 194,144 ----a-w C:\WINDOWS\system32\msjint40.dll
2008-03-20 08:09 1,845,376 ----a-w C:\WINDOWS\system32\win32k.sys
2007-03-30 14:53 47,360 ----a-w C:\Documents and Settings\autumn\Application Data\pcouffin.sys
2006-03-02 12:00 73,728 -csh--w C:\WINDOWS\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}$BACKUP$\System\wmplayer.exe
.
((((((((((((((((((((((((((((( snapshot@2008-06-05_14.46.17.45 )))))))))))))))))))))))))))))))))))))))))
.
- 2008-06-05 12:29:29 2,048 --s-a-w C:\WINDOWS\bootstat.dat
+ 2008-06-06 07:16:13 2,048 --s-a-w C:\WINDOWS\bootstat.dat
.
((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{BA9A5E2B-606B-49CE-A429-FF6E66367B70}]
C:\WINDOWS\system32\pmnoPfeb.dll
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2006-03-02 14:00 15360]
"Splash screen for Avast!"="C:\Program Files\Alwil Software\Avast4\ashAvast.exe" [2008-05-16 01:10 271736]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2006-08-24 04:08 16050688 C:\WINDOWS\RTHDCPL.exe]
"Sony Ericsson PC Suite"="C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" [2007-06-13 08:16 528384]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-03-28 23:37 413696]
"Itch ford four knob"="C:\Documents and Settings\All Users\Application Data\third lies itch ford\LOCKS ACTIVE.exe" [2008-06-06 12:17 2157568]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2006-03-02 14:00 15360]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
--a------ 2008-01-11 23:16 39792 C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]
--a------ 2005-05-04 02:43 69632 C:\WINDOWS\Alcmtr.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
--a------ 2006-03-02 14:00 15360 C:\WINDOWS\system32\ctfmon.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
--a------ 2006-10-27 01:47 31016 C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
--a------ 2007-04-25 13:34 68856 C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"Windows Registry Repair Pro"=C:\Program Files\3B Software\Windows Registry Repair Pro\RegistryRepairPro.exe 4
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
"E07FXLRD_5793000"="C:\Program Files\Microsoft Encarta\Microsoft Encarta 2007 - Collection DVD\EDICT.EXE" -m
"E07FXLRD_9880078"="C:\Program Files\Microsoft Encarta\Microsoft Encarta 2007 - Collection DVD\EDICT.EXE" -m
"E07FXLRD_5371953"="C:\Program Files\Microsoft Encarta\Microsoft Encarta 2007 - Collection DVD\EDICT.EXE" -m
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"Lexmark 1200 Series"="C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe"
"LogitechCommunicationsManager"="C:\Program Files\Fichiers communs\Logitech\LComMgr\Communications_Helper.exe"
"LogitechQuickCamRibbon"="C:\Program Files\Logitech\QuickCam10\QuickCam10.exe" /hide
"ATICCC"="C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
"PCMService"="c:\APPS\Powercinema\PCMService.exe"
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe
"Google Desktop Search"="C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
"WinampAgent"="C:\Program Files\Winamp\Winampa.exe"
"LVCOMSX"="C:\Program Files\Fichiers communs\Logitech\LComMgr\LVComSX.exe"
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
"SeekmoOE"=C:\Program Files\Seekmo\bin\10.0.370.0\OEAddOn.exe
"SeekmoSA"="C:\Program Files\Seekmo\bin\10.0.370.0\SeekmoSA.exe"
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe"
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\APPS\\Powercinema\\PowerCinema.exe"=
"C:\\APPS\\Powercinema\\PCMService.exe"=
"C:\\Program Files\\Messenger\\msmsgs.exe"=
"C:\\Program Files\\eMule\\eMule.exe"=
"C:\\WINDOWS\\system32\\LEXPPS.EXE"=
"C:\\Program Files\\Internet Explorer\\IEXPLORE.EXE"=
"C:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"C:\\Program Files\\SecondLife\\SLVoice.exe"=
"C:\\WINDOWS\\system32\\mcoinstall.exe"=
"C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"C:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"C:\\Program Files\\iTunes\\iTunes.exe"=
"C:\\Program Files\\Shareaza\\Shareaza.exe"=
R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-05-16 01:20]
R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-05-16 01:16]
R2 UxTuneUp;Extension de conception TuneUp;C:\WINDOWS\System32\svchost.exe [2006-03-02 14:00]
S3 s125bus;Sony Ericsson Device 125 driver (WDM);C:\WINDOWS\system32\DRIVERS\s125bus.sys [2007-04-24 11:33]
S3 s125mdfl;Sony Ericsson Device 125 USB WMC Modem Filter;C:\WINDOWS\system32\DRIVERS\s125mdfl.sys [2007-04-24 11:33]
S3 s125mdm;Sony Ericsson Device 125 USB WMC Modem Driver;C:\WINDOWS\system32\DRIVERS\s125mdm.sys [2007-04-24 11:33]
S3 s125mgmt;Sony Ericsson Device 125 USB WMC Device Management Drivers (WDM);C:\WINDOWS\system32\DRIVERS\s125mgmt.sys [2007-04-24 11:33]
S3 s125obex;Sony Ericsson Device 125 USB WMC OBEX Interface;C:\WINDOWS\system32\DRIVERS\s125obex.sys [2007-04-24 11:33]
S3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 22:58]
S3 usbstor;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2006-03-02 14:00]
S4 Boonty Games;Boonty Games;"C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe" []
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
*Newly Created Service* - CATCHME
.
Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
"2008-06-06 10:00:01 C:\WINDOWS\Tasks\A61B837B91E434A7.job"
- c:\docume~1\alex\applic~1\sizeth~1\MfcdSeekDefault.exe
"2008-06-05 13:15:06 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
"2008-06-04 16:00:03 C:\WINDOWS\Tasks\Norton Security Scan.job"
- C:\Program Files\Norton Security Scan\Nss.exe
.
**************************************************************************
catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-06-06 12:36:08
Windows 5.1.2600 Service Pack 2 NTFS
Balayage processus cachés ...
Balayage caché autostart entries ...
Balayage des fichiers cachés ...
C:\Documents and Settings\autumn\Local Settings\Application Data\Microsoft\Windows\GameExplorer\{DFEF49D9-FC95-4301-99B9-2FB91C6ABA06}\PlayTasks\1\Les Sims™ 2 : Boit@Look.lnk 1087 bytes hidden from API
Scan terminé avec succès
Les fichiers cachés: 1
**************************************************************************
.
Temps d'accomplissement: 2008-06-06 12:49:02
ComboFix-quarantined-files.txt 2008-06-06 10:48:57
ComboFix2.txt 2008-06-05 12:47:12
Pre-Run: 49,135,628,288 octets libres
Post-Run: 49,146,945,536 octets libres
289 --- E O F --- 2008-06-04 08:01:43 -
Copie le texte ci-dessous :
File::
C:\Program Files\Search Settings\kb127\SearchSettings.dll
C:\upload_moi_PAIX2007.tar.gz
C:\WINDOWS\QTFont.qfn
C:\WINDOWS\QTFont.for
C:\Program Files\Search Settings\SearchSettings.exe
C:\PROGRA~1\MYWEBS~1\bar\2.bin\mwsoemon.exe
C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
C:\Documents and Settings\All Users\Application Data\third lies itch ford\Online deaf.exe
C:\PROGRA~1\MYWEBS~1\bar\1.bin\MWSBAR.DLL,S
Folder::
C:\Program Files\Search Settings
C:\Program Files\Fichiers communs\BOONTY Shared
Registry::
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SearchSettings"=-
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"MyWebSearch Email Plugin"=-
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"My Web Search Bar"=-
"MyWebSearch Email Plugin"=-
"Itch ford four knob"=-
Ouvre le Bloc-Notes puis colle le texte copié.
(Démarrer\Tous les programmes\Accessoires\Bloc notes.)
Sauvegarde ce fichier sous le nom de CFScript.txt.
Glisse maintenant le fichier CFScript.txt dans Combofix.exe comme ci-dessous :
http://sd-1.archive-host.com/membres/up/1366464061/CFScript.gif
Cela va relancer Combofix,
Une fenêtre bleue va apparaître: au message qui apparaît ( Type 1 to continue, or 2 to abort) , tape 1 puis valide.
Patiente le temps du scan.Le bureau va disparaître à plusieurs reprises: c'est normal!
Ne touche à rien tant que le scan n'est pas terminé.
Après redémarrage, poste le contenu du rapport Combofix.txt accompagné d'un rapport Hijackthis.
S'il n'y a pas de rédémarrage, poste quand même les rapports.
-
OK Je regarde ça plus tard et te dis la suite
-
Nouveau rapport Hijack :
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:03:56, on 5/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Search Settings\SearchSettings.exe
C:\WINDOWS\system32\oodag.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\svchost.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: BHO pour Compagnon Web Encarta - {955BE0B8-BC85-4CAF-856E-8E0D8B610560} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Web Companion\2007\ENCWCBAR.DLL
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O2 - BHO: (no name) - {BA9A5E2B-606B-49CE-A429-FF6E66367B70} - C:\WINDOWS\system32\pmnoPfeb.dll (file missing)
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\en-us\msntb.dll
O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\en-us\msntb.dll
O3 - Toolbar: Compagnon Web Encarta - {147D6308-0614-4112-89B1-31402F9B82C4} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Web Companion\2007\ENCWCBAR.DLL
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [Itch ford four knob] C:\Documents and Settings\All Users\Application Data\third lies itch ford\LOCKS ACTIVE.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Splash screen for Avast!] C:\Program Files\Alwil Software\Avast4\ashAvast.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: Barre de recherche Encarta - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\Alex\Menu Démarrer\Programmes\IMVU\Run IMVU.lnk
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://support.norton.com/sp/en/us/home/current/info
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {3451DEDE-631F-421C-8127-FD793AFC6CC8} (ActiveDataInfo Class) - https://support.norton.com/sp/en/us/home/current/info
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~3\Office12\GR99D3~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Unknown owner - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe (file missing)
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\Logitech\SrvLnch\SrvLnch.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe
-
Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es'
"2008-06-05 12:00:00 C:\WINDOWS\Tasks\A61B837B91E434A7.job"
- c:\docume~1\alex\applic~1\sizeth~1\MfcdSeekDefault.exe
"2008-05-31 17:44:16 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
"2008-06-04 16:00:03 C:\WINDOWS\Tasks\Norton Security Scan.job"
- C:\Program Files\Norton Security Scan\Nss.exe
.
**************************************************************************
catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-06-05 14:30:41
Windows 5.1.2600 Service Pack 2 NTFS
Balayage processus cach‚s ...
Balayage cach‚ autostart entries ...
Balayage des fichiers cach‚s ...
C:\Documents and Settings\autumn\Local Settings\Application Data\Microsoft\Windows\GameExplorer\{DFEF49D9-FC95-4301-99B9-2FB91C6ABA06}\PlayTasks\1\Les Sims™ 2 : Boit@Look.lnk 1087 bytes hidden from API
Scan termin‚ avec succŠs
Les fichiers cach‚s: 1
**************************************************************************
.
------------------------ Other Running Processes ------------------------
.
C:\WINDOWS\system32\ati2evxx.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\ati2evxx.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
C:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\system32\oodag.exe
C:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
.
**************************************************************************
.
Temps d'accomplissement: 2008-06-05 14:47:11 - machine was rebooted
ComboFix-quarantined-files.txt 2008-06-05 12:47:00
Pre-Run: 47,663,505,408 octets libres
Post-Run: 49,881,632,768 octets libres
2877 --- E O F --- 2008-06-04 08:01:43 -
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\85062
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\85268
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\85313
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\85365
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\85381
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\85418
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\8544
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\85564
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\85568
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\85587
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\8573
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\85932
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\86172
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\86173
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\86379
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\86380
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\86416
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\86423
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\86432
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\86654
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\86837
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\86919
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\87002
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\87028
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\87090
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\8732
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\87385
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\87387
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\8743
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\87439
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\87499
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\87555
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\87579
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\87594
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\87770
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\87908
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\87995
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\88119
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\88152
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\88467
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\88533
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\88668
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\890
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\89075
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\89116
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\89151
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\89200
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\89235
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\896
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\89673
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\89841
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\89936
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\90009
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\90098
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\90128
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\90154
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\90163
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\90195
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\90300
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\90358
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\90389
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\91096
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\91204
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\91224
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\91231
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\91236
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\9146
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\91629
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\91840
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\91925
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\92061
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\92573
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\92855
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\92886
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\92912
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\93110
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\93116
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\9313
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\93279
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\93295
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\93310
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\93515
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\93845
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\93899
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\93921
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\93934
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\93950
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\93997
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\94011
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\9413
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\94230
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\94246
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\94272
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\94407
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\94469
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\94748
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\94789
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\94844
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\95052
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\95319
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\95325
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\95610
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\95615
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\95678
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\95679
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\95692
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\95704
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\95716
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\95740
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\95774
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\95798
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\95803
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\95825
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\95828
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\95849
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\95866
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\95873
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\96458
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\96961
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\97380
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\97462
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\97487
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\97498
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\97499
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\97507
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\97524
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\97546
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\97558
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\97734
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\97741
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\97801
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\97964
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\9805
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\98060
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\9807
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\98120
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\98348
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\98732
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\99008
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\99163
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\9941
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\99533
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\99612
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\99739
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\99795
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\ustat\3543.dat
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\ads.cdf
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\btntrans.idx
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\btntrans1.dat
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\business_promo.htm
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\buttondir.txt
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\components.cdf
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_1000.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_2000.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_3000.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_bar.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_bbar1.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_logos.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_other.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_weather.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\default.cdf
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz1.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz10.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz11.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz12.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz13.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz14.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz15.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz16.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz17.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz18.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz19.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz2.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz20.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz3.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz4.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz5.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz6.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz7.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz8.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz9.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_categorize.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_comparison.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_em_PROFL_CA_flow_b_IEB.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_explorer-Mails.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_explorer-people.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_fastutilities.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_favorites.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_Games.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_Hide.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_hotbarcom.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_Hotmail.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_hsskin.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_jemster.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_jemsterie.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_jemsteruk.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_jobsearch.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_Mails.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_new.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_premium.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_reun.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_ringtones.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_SearchBoxTrapper.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_searchfor.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_searchgo.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_weather.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_yellowpages.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\email-def-511724-9595.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\email-t1-bg.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\hotbar-premium-hotbar-premium.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\hotbar-premium.cdf
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\hotbar_promo.htm
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\icons2.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\keywords.idx
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\keywords1.dat
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\layout.cdf
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\linkpathlegal.txt
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\progress.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\s_icons_buttons.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\sales_buttons.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\t2_bg.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\theweb.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\top7.cdf
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Top7_theweb.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\tsd_bg.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\ads.cdf
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\btntrans.idx
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\btntrans1.dat
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\business_promo.htm
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\buttondir.txt
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\components.cdf
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_1000.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_2000.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_3000.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_bar.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_bbar1.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_logos.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_other.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_weather.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\default.cdf
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz1.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz10.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz11.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz12.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz13.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz14.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz15.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz16.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz17.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz18.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz19.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz2.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz20.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz3.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz4.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz5.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz6.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz7.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz8.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz9.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_categorize.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_comparison.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_em_PROFL_CA_flow_b_IEB.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_explorer-Mails.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_explorer-people.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_fastutilities.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_favorites.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_Games.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_Hide.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_hotbarcom.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_Hotmail.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_hsskin.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_jemster.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_jemsterie.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_jemsteruk.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_jobsearch.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_Mails.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_new.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_premium.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_reun.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_ringtones.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_SearchBoxTrapper.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_searchfor.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_searchgo.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_weather.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_yellowpages.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\email-def-511724-9595.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\email-t1-bg.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\hotbar-premium-hotbar-premium.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\hotbar-premium.cdf
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\hotbar_promo.htm
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\icons2.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\keywords.idx
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\keywords1.dat
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\layout.cdf
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\linkpathlegal.txt
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\progress.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\s_icons_buttons.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\sales_buttons.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\t2_bg.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\theweb.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\top7.cdf
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Top7_theweb.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\tsd_bg.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\ads.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\BtnTrans.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\BtnTrans1.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\business_promo.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\buttondir.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_1000.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_2000.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_3000.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_bar.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_bbar1.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_logos.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_other.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_weather.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\default.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\email-t1-bg.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\hotbar-premium.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\hotbar_promo.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\icons2.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\keywords.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\keywords1.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\layout.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\linkpathlegal.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\progress.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\s_icons_buttons.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\sales_buttons.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\samplegroups2.txt
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\samplegroups2.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\t2_bg.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\top7.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\tsd_bg.xip
C:\Documents and Settings\autumn\Local Settings\Application Data\wokuwok.dat
c:\documents and settings\autumn\local settings\application data\wokuwok.exe
C:\Documents and Settings\autumn\Local Settings\Application Data\wokuwok_nav.dat
C:\Documents and Settings\autumn\Local Settings\Application Data\wokuwok_navps.dat
C:\Redemption.ECF
C:\WINDOWS\system32\befPonmp.ini
C:\WINDOWS\system32\befPonmp.ini2
.
((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-05-05 to 2008-06-05 ))))))))))))))))))))))))))))))))))))
.
2008-06-05 13:03 . 2008-06-05 13:03 3,594,628 --a------ C:\upload_moi_PAIX2007.tar.gz
2008-06-04 22:25 . 2008-06-04 22:25 <REP> d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-06-04 22:25 . 2008-06-04 22:25 <REP> d-------- C:\Documents and Settings\autumn\Application Data\Malwarebytes
2008-06-04 22:25 . 2008-06-04 22:25 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-06-04 22:25 . 2008-05-30 01:06 34,296 --a------ C:\WINDOWS\system32\drivers\mbamcatchme.sys
2008-06-04 22:25 . 2008-05-30 01:06 15,864 --a------ C:\WINDOWS\system32\drivers\mbam.sys
2008-06-04 21:14 . 2008-06-04 21:14 <REP> d-------- C:\Program Files\Trend Micro
2008-06-04 17:17 . 2008-06-04 17:17 <REP> d-------- C:\Program Files\Shareaza
2008-06-04 17:17 . 2008-06-04 17:17 <REP> d-------- C:\Documents and Settings\autumn\Application Data\Shareaza
2008-06-03 16:48 . 2008-03-01 14:58 6,066,176 -----c--- C:\WINDOWS\system32\dllcache\ieframe.dll
2008-06-03 16:48 . 2007-04-17 11:32 2,455,488 -----c--- C:\WINDOWS\system32\dllcache\ieapfltr.dat
2008-06-03 16:48 . 2007-03-08 07:10 1,048,576 -----c--- C:\WINDOWS\system32\dllcache\ieframe.dll.mui
2008-06-03 16:48 . 2008-03-01 14:58 459,264 -----c--- C:\WINDOWS\system32\dllcache\msfeeds.dll
2008-06-03 16:48 . 2008-03-01 14:58 383,488 -----c--- C:\WINDOWS\system32\dllcache\ieapfltr.dll
2008-06-03 16:48 . 2008-03-01 14:58 267,776 -----c--- C:\WINDOWS\system32\dllcache\iertutil.dll
2008-06-03 16:48 . 2008-03-01 14:58 63,488 -----c--- C:\WINDOWS\system32\dllcache\icardie.dll
2008-06-03 16:48 . 2008-03-01 14:58 52,224 -----c--- C:\WINDOWS\system32\dllcache\msfeedsbs.dll
2008-06-03 16:48 . 2008-02-22 12:00 13,824 -----c--- C:\WINDOWS\system32\dllcache\ieudinit.exe
2008-06-03 01:15 . 2008-06-03 01:15 <REP> d-------- C:\Program Files\Microsoft CAPICOM 2.1.0.2
2008-06-02 20:19 . 2008-06-03 17:39 <REP> d-------- C:\Program Files\Fichiers communs\Softwin
2008-06-02 19:59 . 2008-06-04 10:01 <REP> d-------- C:\WINDOWS\system32\fr-fr
2008-06-02 19:55 . 2008-06-04 10:01 1,355 --a------ C:\WINDOWS\imsins.BAK
2008-06-02 19:49 . 2007-07-30 19:19 271,224 --a------ C:\WINDOWS\system32\mucltui.dll
2008-06-02 19:49 . 2007-07-30 19:19 207,736 --a------ C:\WINDOWS\system32\muweb.dll
2008-06-02 19:49 . 2007-07-30 19:18 30,072 --a------ C:\WINDOWS\system32\mucltui.dll.mui
2008-06-02 19:47 . 2008-06-02 19:47 <REP> d-------- C:\Program Files\AxBx
2008-06-02 15:21 . 2008-06-02 15:24 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Lavasoft
2008-06-02 10:08 . 2008-06-05 13:48 54,156 --ah----- C:\WINDOWS\QTFont.qfn
2008-06-02 10:08 . 2008-06-02 10:08 1,409 --a------ C:\WINDOWS\QTFont.for
2008-06-01 14:19 . 2008-06-01 14:19 <REP> d-------- C:\Program Files\Size The Acid
2008-05-31 19:46 . 2008-05-31 19:46 <REP> d-------- C:\Program Files\iTunes
2008-05-31 19:46 . 2008-05-31 19:46 <REP> d-------- C:\Program Files\iPod
2008-05-31 19:46 . 2008-05-31 19:46 <REP> d-------- C:\Documents and Settings\autumn\Application Data\Apple Computer
2008-05-31 19:44 . 2008-05-31 19:45 <REP> d-------- C:\Program Files\QuickTime
2008-05-31 19:44 . 2008-05-31 19:44 <REP> d-------- C:\Program Files\Apple Software Update
2008-05-31 19:44 . 2008-05-31 19:46 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Apple Computer
2008-05-31 19:43 . 2008-05-31 19:43 <REP> d-------- C:\Program Files\Fichiers communs\Apple
2008-05-31 19:43 . 2008-05-31 19:43 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Apple
2008-05-28 12:16 . 2008-05-28 12:16 <REP> d-------- C:\Documents and Settings\autumn\Application Data\Search Settings
2008-05-27 15:03 . 2008-05-27 15:03 <REP> d-------- C:\Program Files\Search Settings
2008-05-27 15:02 . 2008-05-27 15:10 <REP> d-------- C:\Program Files\Free FLV Converter
2008-05-27 15:02 . 2007-06-19 01:22 364,544 --a------ C:\WINDOWS\system32\PropertyGrid.ocx
2008-05-27 15:02 . 2008-05-15 11:30 208,896 --a------ C:\WINDOWS\system32\TubeFinder.exe
2008-05-27 15:02 . 2005-10-13 15:42 208,500 --a------ C:\WINDOWS\system32\ReyXpBasics.tlb
2008-05-27 15:02 . 1998-07-13 01:00 141,312 --a------ C:\WINDOWS\system32\MSCMCFR.DLL
2008-05-27 15:02 . 2000-07-15 07:00 101,888 --a------ C:\WINDOWS\system32\VB6STKIT.DLL
2008-05-27 15:02 . 2004-03-09 02:00 84,512 --a------ C:\WINDOWS\system32\PICCLP32.OCX
2008-05-27 15:02 . 1998-07-12 21:00 32,768 --a------ C:\WINDOWS\system32\CMDLGFR.DLL
2008-05-27 15:02 . 2005-09-28 03:31 24,576 --a------ C:\WINDOWS\system32\ControlSubX.ocx
2008-05-27 15:02 . 1998-07-13 02:00 9,728 --a------ C:\WINDOWS\system32\PCCLPFR.DLL
2008-05-27 14:25 . 2008-05-27 14:44 <REP> d-------- C:\Documents and Settings\autumn\dwhelper
2008-05-23 14:26 . 2007-04-24 11:33 108,680 -ra------ C:\WINDOWS\system32\drivers\s125mdm.sys
2008-05-23 14:26 . 2007-04-24 11:33 100,488 -ra------ C:\WINDOWS\system32\drivers\s125mgmt.sys
2008-05-23 14:26 . 2007-04-24 11:33 98,696 -ra------ C:\WINDOWS\system32\drivers\s125obex.sys
2008-05-23 14:26 . 2007-04-24 11:33 83,336 -ra------ C:\WINDOWS\system32\drivers\s125bus.sys
2008-05-23 14:26 . 2007-04-24 11:33 15,112 -ra------ C:\WINDOWS\system32\drivers\s125mdfl.sys
2008-05-23 14:26 . 2007-04-24 11:33 12,424 -ra------ C:\WINDOWS\system32\drivers\s125whnt.sys
2008-05-23 14:26 . 2007-04-24 11:33 12,424 -ra------ C:\WINDOWS\system32\drivers\s125wh.sys
2008-05-23 14:26 . 2007-04-24 11:33 12,424 -ra------ C:\WINDOWS\system32\drivers\s125cmnt.sys
2008-05-23 14:26 . 2007-04-24 11:33 12,424 -ra------ C:\WINDOWS\system32\drivers\s125cm.sys
2008-05-22 23:27 . 2008-05-22 23:28 <REP> d-------- C:\Program Files\Lexmark 1200 Series
2008-05-22 23:27 . 2006-01-12 12:32 983,107 --a------ C:\WINDOWS\system32\LXCZGF.DLL
2008-05-22 23:27 . 2006-07-13 13:24 458,752 --a------ C:\WINDOWS\system32\LXCZJSWR.DLL
2008-05-22 23:27 . 2006-07-13 13:17 356,352 --a------ C:\WINDOWS\system32\LXCZUTIL.DLL
2008-05-22 23:27 . 2006-07-13 13:45 69,632 --a------ C:\WINDOWS\system32\lxczscin.dll
2008-05-22 23:27 . 2006-07-13 13:45 57,344 --a------ C:\WINDOWS\system32\lxczcinf.dll
2008-05-22 23:27 . 2006-07-13 13:45 49,152 --a------ C:\WINDOWS\system32\lxczcoin.dll
2008-05-22 23:27 . 2006-01-30 20:42 270 --a------ C:\WINDOWS\system32\lxczcoin.ini
2008-05-22 23:15 . 2008-05-22 23:15 <REP> d-------- C:\Lexmark
2008-05-22 21:04 . 2008-05-22 21:04 <REP> d-------- C:\Documents and Settings\autumn\Application Data\Teleca
2008-05-22 21:02 . 2008-05-22 21:02 <REP> d-------- C:\Documents and Settings\autumn\Application Data\Sony Ericsson
2008-05-20 18:03 . 2008-05-20 18:03 <REP> d-------- C:\Program Files\Sony Ericsson
2008-05-20 18:03 . 2008-05-20 18:07 <REP> d-------- C:\Program Files\Fichiers communs\Teleca Shared
2008-05-20 18:03 . 2008-05-20 18:03 <REP> d-------- C:\Program Files\Fichiers communs\Sony Ericsson Shared
2008-05-20 18:02 . 2008-05-20 18:02 <REP> d-------- C:\WINDOWS\Downloaded Installations
2008-05-20 18:00 . 2008-05-20 18:03 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Teleca
2008-05-20 18:00 . 2008-05-20 18:03 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Sony Ericsson
2008-05-16 13:31 . 2004-08-03 23:08 31,616 --a------ C:\WINDOWS\system32\drivers\usbccgp.sys
2008-05-16 13:31 . 2004-08-03 23:08 31,616 --a--c--- C:\WINDOWS\system32\dllcache\usbccgp.sys
2008-05-16 11:58 . 2008-05-16 11:58 12,632 --a------ C:\WINDOWS\system32\lsdelete.exe
2008-05-13 03:53 . 2008-05-13 03:53 3,596,288 --a------ C:\WINDOWS\system32\qt-dx331.dll
2008-05-13 03:53 . 2008-05-13 03:53 524,288 --a------ C:\WINDOWS\system32\DivXsm.exe
2008-05-13 03:53 . 2008-05-13 03:53 9,878 --a------ C:\WINDOWS\system32\dsm_fr.qm
2008-05-13 03:53 . 2008-05-13 03:53 4,816 --a------ C:\WINDOWS\system32\divxsm.tlb
2008-05-13 03:51 . 2008-05-13 03:51 1,044,480 --a------ C:\WINDOWS\system32\libdivx.dll
2008-05-13 03:51 . 2008-05-13 03:51 200,704 --a------ C:\WINDOWS\system32\ssldivx.dll
2008-05-13 03:49 . 2008-05-13 03:49 630,784 --a------ C:\WINDOWS\system32\divxdec.ax
2008-05-13 03:49 . 2008-05-13 03:49 352,401 --a------ C:\WINDOWS\system32\DivXMedia.ax
2008-05-13 03:49 . 2008-05-13 03:49 161,096 --a------ C:\WINDOWS\system32\DivXCodecVersionChecker.exe
2008-05-13 03:49 . 2008-05-13 03:49 12,288 --a------ C:\WINDOWS\system32\DivXWMPExtType.dll
2008-05-13 03:48 . 2008-05-13 03:48 8,835 --a------ C:\WINDOWS\system32\dpufr.qm
2008-05-12 12:37 . 2008-05-12 12:39 <REP> d-------- C:\Program Files\Startup Manager
2008-05-12 12:37 . 2008-05-12 12:37 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Startup Manager
2008-05-12 12:33 . 2008-05-12 12:33 <REP> d-------- C:\Program Files\SystemRequirementsLab
2008-05-12 12:33 . 2008-05-12 12:33 <REP> d-------- C:\Documents and Settings\autumn\Application Data\SystemRequirementsLab
2008-05-12 12:07 . 2008-05-12 12:10 664 --a------ C:\WINDOWS\system32\d3d9caps.dat
2008-05-11 18:11 . 2008-05-11 18:11 <REP> d-------- C:\WINDOWS\Profiles
2008-05-06 17:11 . 2008-05-06 17:12 <REP> d-------- C:\Program Files\SecondLife
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-06-05 10:42 --------- d-----w C:\Program Files\eMule
2008-06-04 15:05 --------- d-----w C:\Documents and Settings\All Users\Application Data\Google Updater
2008-06-02 23:18 --------- d-----w C:\Documents and Settings\All Users\Application Data\Microsoft Help
2008-06-02 15:06 --------- d-----w C:\Program Files\MSN Messenger
2008-06-02 13:21 --------- d-----w C:\Program Files\Lavasoft
2008-06-02 13:20 --------- d-----w C:\Program Files\Fichiers communs\Wise Installation Wizard
2008-06-01 12:20 --------- d-----w C:\Documents and Settings\All Users\Application Data\third lies itch ford
2008-06-01 12:04 --------- d-----w C:\Program Files\DivX
2008-05-30 16:00 --------- d-----w C:\Program Files\Norton Security Scan
2008-05-28 15:46 --------- d-----w C:\Program Files\Yahoo!
2008-05-26 11:12 --------- d-----w C:\Program Files\Zylom Games
2008-05-13 01:53 9,464 ------w C:\WINDOWS\system32\drivers\cdralw2k.sys
2008-05-13 01:53 9,336 ------w C:\WINDOWS\system32\drivers\cdr4_xp.sys
2008-05-13 01:53 43,528 ------w C:\WINDOWS\system32\drivers\PxHelp20.sys
2008-05-12 12:16 --------- d-----w C:\Program Files\EA GAMES
2008-05-11 16:06 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-05-11 16:06 --------- d-----w C:\Documents and Settings\autumn\Application Data\Microsoft Games
2008-05-11 16:06 --------- d-----w C:\Documents and Settings\All Users\Application Data\Microsoft Games
2008-05-11 16:00 --------- d-----w C:\Program Files\Fichiers communs\Logitech
2008-05-11 15:58 --------- d-----w C:\Program Files\Google
2008-05-06 15:45 --------- d-----w C:\Documents and Settings\autumn\Application Data\SecondLife
2008-05-01 20:23 --------- d-----w C:\Documents and Settings\autumn\Application Data\Skype
2008-04-30 22:30 --------- d-----w C:\Program Files\Common Files
2008-04-29 09:20 15,648 ----a-w C:\WINDOWS\system32\drivers\NSDriver.sys
2008-04-29 09:19 15,648 ----a-w C:\WINDOWS\system32\drivers\Awrtrd.sys
2008-04-29 09:19 12,960 ----a-w C:\WINDOWS\system32\drivers\Awrtpd.sys
2008-04-28 20:45 --------- d-----w C:\Program Files\Messenger Plus! Live
2008-04-28 07:23 --------- d-----w C:\Program Files\GOA
2008-04-25 10:57 --------- d-----w C:\Documents and Settings\autumn\Application Data\IMVU
2008-04-21 13:41 --------- d-----w C:\Program Files\Atari
2008-04-21 12:34 --------- d-----w C:\Program Files\Sims2Pack Clean Installer
2008-04-21 12:34 --------- d-----w C:\Program Files\MySpace
2008-04-21 12:34 --------- d-----w C:\Program Files\GIMP-2.0
2008-04-21 12:34 --------- d-----w C:\Program Files\Beneton Movie GIF
2008-04-19 21:41 --------- dcsh--w C:\Program Files\Fichiers communs\WindowsLiveInstaller
2008-04-19 21:41 --------- d-----w C:\Program Files\Windows Live
2008-04-19 21:40 --------- d-----w C:\Documents and Settings\All Users\Application Data\WLInstaller
2008-04-19 15:56 --------- d-----w C:\Documents and Settings\All Users\Application Data\DVD Shrink
2007-03-30 14:53 47,360 ----a-w C:\Documents and Settings\autumn\Application Data\pcouffin.sys
2006-03-02 12:00 73,728 -csh--w C:\WINDOWS\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}$BACKUP$\System\wmplayer.exe
.
((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{BA9A5E2B-606B-49CE-A429-FF6E66367B70}]
C:\WINDOWS\system32\pmnoPfeb.dll
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}]
2008-04-16 17:56 1107296 --a------ C:\Program Files\Search Settings\kb127\SearchSettings.dll
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2006-03-02 14:00 15360]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2006-08-24 04:08 16050688 C:\WINDOWS\RTHDCPL.exe]
"Sony Ericsson PC Suite"="C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" [2007-06-13 08:16 528384]
"Lexmark 1200 Series"="C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe" [2006-07-13 13:25 57344]
"SearchSettings"="C:\Program Files\Search Settings\SearchSettings.exe" [2008-04-16 17:56 985440]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-03-28 23:37 413696]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-03-30 10:36 267048]
"Itch ford four knob"="C:\Documents and Settings\All Users\Application Data\third lies itch ford\LOCKS ACTIVE.exe" [2008-06-05 14:33 2157056]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2006-03-02 14:00 15360]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
--a------ 2008-01-11 23:16 39792 C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]
--a------ 2005-05-04 02:43 69632 C:\WINDOWS\Alcmtr.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
--a------ 2006-03-02 14:00 15360 C:\WINDOWS\system32\ctfmon.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
--a------ 2006-10-27 01:47 31016 C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
--a------ 2007-04-25 13:34 68856 C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"Windows Registry Repair Pro"=C:\Program Files\3B Software\Windows Registry Repair Pro\RegistryRepairPro.exe 4
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
"E07FXLRD_5793000"="C:\Program Files\Microsoft Encarta\Microsoft Encarta 2007 - Collection DVD\EDICT.EXE" -m
"E07FXLRD_9880078"="C:\Program Files\Microsoft Encarta\Microsoft Encarta 2007 - Collection DVD\EDICT.EXE" -m
"MyWebSearch Email Plugin"=C:\PROGRA~1\MYWEBS~1\bar\2.bin\mwsoemon.exe
"E07FXLRD_5371953"="C:\Program Files\Microsoft Encarta\Microsoft Encarta 2007 - Collection DVD\EDICT.EXE" -m
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"Lexmark 1200 Series"="C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe"
"LogitechCommunicationsManager"="C:\Program Files\Fichiers communs\Logitech\LComMgr\Communications_Helper.exe"
"LogitechQuickCamRibbon"="C:\Program Files\Logitech\QuickCam10\QuickCam10.exe" /hide
"ATICCC"="C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
"PCMService"="c:\APPS\Powercinema\PCMService.exe"
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe
"Google Desktop Search"="C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
"My Web Search Bar"=rundll32 C:\PROGRA~1\MYWEBS~1\bar\1.bin\MWSBAR.DLL,S
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
"WinampAgent"="C:\Program Files\Winamp\Winampa.exe"
"LVCOMSX"="C:\Program Files\Fichiers communs\Logitech\LComMgr\LVComSX.exe"
"MyWebSearch Email Plugin"=C:\PROGRA~1\MYWEBS~1\bar\2.bin\mwsoemon.exe
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
"SeekmoOE"=C:\Program Files\Seekmo\bin\10.0.370.0\OEAddOn.exe
"SeekmoSA"="C:\Program Files\Seekmo\bin\10.0.370.0\SeekmoSA.exe"
"Itch ford four knob"=C:\Documents and Settings\All Users\Application Data\third lies itch ford\Online deaf.exe
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\APPS\\Powercinema\\PowerCinema.exe"=
"C:\\APPS\\Powercinema\\PCMService.exe"=
"C:\\Program Files\\Messenger\\msmsgs.exe"=
"C:\\Program Files\\eMule\\eMule.exe"=
"C:\\WINDOWS\\system32\\LEXPPS.EXE"=
"C:\\Program Files\\Internet Explorer\\IEXPLORE.EXE"=
"C:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"C:\\Program Files\\SecondLife\\SLVoice.exe"=
"C:\\WINDOWS\\system32\\mcoinstall.exe"=
"C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"C:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"C:\\Program Files\\iTunes\\iTunes.exe"=
"C:\\Program Files\\Shareaza\\Shareaza.exe"=
R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-05-16 01:20]
R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-05-16 01:16]
R2 UxTuneUp;Extension de conception TuneUp;C:\WINDOWS\System32\svchost.exe [2006-03-02 14:00]
S3 s125bus;Sony Ericsson Device 125 driver (WDM);C:\WINDOWS\system32\DRIVERS\s125bus.sys [2007-04-24 11:33]
S3 s125mdfl;Sony Ericsson Device 125 USB WMC Modem Filter;C:\WINDOWS\system32\DRIVERS\s125mdfl.sys [2007-04-24 11:33]
S3 s125mdm;Sony Ericsson Device 125 USB WMC Modem Driver;C:\WINDOWS\system32\DRIVERS\s125mdm.sys [2007-04-24 11:33]
S3 s125mgmt;Sony Ericsson Device 125 USB WMC Device Management Drivers (WDM);C:\WINDOWS\system32\DRIVERS\s125mgmt.sys [2007-04-24 11:33]
S3 s125obex;Sony Ericsson Device 125 USB WMC OBEX Interface;C:\WINDOWS\system32\DRIVERS\s125obex.sys [2007-04-24 11:33]
S3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 22:58]
S3 usbstor;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2006-03-02 14:00]
S4 Boonty Games;Boonty Games;"C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe" []
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es'
"2008-06-05 12:00:00 C:\WINDOWS\Tasks\A61B837B91E434A7.job"
- c:\docume~1\alex\applic~1\sizeth~1\MfcdSeekDefault.exe
"2008-05-31 17:44:16 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
"20 -
desolee je n avais pas vu que c etait coupe.
ComboFix 08-06-04.5 - autumn 2008-06-05 14:20:19.1 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.146 [GMT 2:00]
Endroit: C:\Documents and Settings\autumn\Bureau\ComboFix.exe
* Création d'un nouveau point de restauration
[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\InternetGameBox
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\InternetGameBox\Conditions générales.url
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\InternetGameBox\Confidentialité.url
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\InternetGameBox\Désinstaller.lnk
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\InternetGameBox\InternetGameBox.lnk
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\InternetGameBox\Website.url
C:\Documents and Settings\autumn\Application Data\SpamBlocker
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\eskin\empty_bg_st.htm
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\eskin\FileManager.txt
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\SpamBlockerUtility.log
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\SpamBlockerUtility_1173480996.log
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\SpamBlockerUtility_1176678441.log
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]30104_emte10_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]30104_emte11_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]30104_emte12_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]30104_emte13_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]30104_emte14_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]30104_emte19_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]30104_emte20_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]30104_emte21_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]30104_emte9_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]30203lib_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]33102angel_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]33102bigluf_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]33102bigsmile_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]33102birthday_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]33102cheers_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]33102flo_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]33102good_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]33102jump_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]33102king_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]33102lough_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]33102luf_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]33102smile_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]33102smiled_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]33102sor_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]33102thanx_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]33102uhu_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]40103ahh_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]40103wow_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]40104_emi2_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]42102_1134_112_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]50103big_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]50103gig_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]50103hm_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]50103nomail_emoti_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]50103norm_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]60104_ema15_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]60104_ema16_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]60104_ema17_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]60104_ema18_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]60104_ema19_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]60104_ema20_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]60104_ema21_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]60104_ema24_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]60104_ema25_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]60104_ema26_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]60104_ema30_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]60104_ema33_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]60104_ema34_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]62802hippi_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]62802jumpie_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]80402argh_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]80402oops_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]80402ouch_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]82502no_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\[u]0[/u]82502yes_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\110103_boring1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\110103_confused_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\110103_crying_ugly_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\110103_fantastic_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\110103_feel_better_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\110103_gimme_break_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\110103_heehee_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\110103_hlopaet_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\110103_ign_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\110103_lol_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\110103_no_comment_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\110103_peace_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\110103_smashing_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\110103_talk2thehand_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\block_sm.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\block_sm2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\block_smli.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\block_smli2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\blocked.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\blocked2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\btn_add-but.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\btn_back-but.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\btn_left_cut_enabled_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\btn_left_enabled_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\btn_left_pressed_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\btn_middle_enabled_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\btn_middle_pressed_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\btn_right_cut_enabled_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\btn_right_enabled_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\btn_right_pressed_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\business_promo.htm
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\buttondir.txt
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\components.cdf
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\css_cattree.css
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\css_flashpreview.css
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\css2_main.css
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\css2_pagingmodule.css
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\css2_topbuttons.css
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\delete.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\edit_clear_sound.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\edit_fs.htm
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\edit_select.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-511724-549108.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-511724-9595.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-backgrounds.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-bcards.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-ecards.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-emoticons.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-estationery.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-funny.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-help.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-images.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-info.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-more.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-my.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-new.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-new2.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-options.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-people.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-photo.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-SpamBlocked.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-tell.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-temp.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-text.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-voice.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-def.cdf
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-premium-email-premium.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\email-t7-bg.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\estatationery.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\flashpatch.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\flashpreview.htm
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\fs3.htm
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\hotbar_promo.htm
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\icon_checked_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\icon_close_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\icon_close_pressed_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\icon_edit_preview.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\icon_edit_send.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\icon_flash_preview.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\icon_recently_used.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\icon_remove_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\icon_remove_pressed_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\icon_sand-clock2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\icon_tell_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\icon_tell_pressed_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\icon_tree_null.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\icon_unchecked_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\icon_unchecked_pressed_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\img_barlayout.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\img_barlayout2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\img_barlayout4.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\img_corner_left.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\img_local_logo.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\js2_basetemplate.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\js2_hbgroups.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\js2_hbobject3.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\js2_hbobjectset3.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\js2_hotbarwrapper.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\js2_iteratorsandreaders3nf.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\js2_pagingmoduleobj3.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\js2_texts3.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\js2_xmltree3nf.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\layout.cdf
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\linkpathlegal.txt
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\n.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\nav_b_2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\nav_bb_2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\nav_f_2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\nav_ff_2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\progress.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\s_icons_buttons.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\searchbtn.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\submit.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\t6_bg.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\tab_bg.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\tab_bga.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\tab_bgia.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\tab_l.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\tab_la.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\tab_lia.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\tab_r.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\tab_ra.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\tab_ria.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\tree_dots.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\tree_minus.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\tree_plus.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\treedata_animations.xml
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\treedata_backgrounds.xml
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\treedata_ecards.xml
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\treedata_emoticons.xml
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\treedata_notifiers.xml
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\1\treedata_text.xml
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]30104_emte10_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]30104_emte11_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]30104_emte12_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]30104_emte13_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]30104_emte14_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]30104_emte19_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]30104_emte20_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]30104_emte21_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]30104_emte9_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]30203lib_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]33102angel_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]33102bigluf_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]33102bigsmile_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]33102birthday_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]33102cheers_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]33102flo_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]33102good_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]33102jump_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]33102king_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]33102lough_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]33102luf_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]33102smile_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]33102smiled_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]33102sor_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]33102thanx_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]33102uhu_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]40103ahh_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]40103wow_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]40104_emi2_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]42102_1134_112_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]50103big_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]50103gig_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]50103hm_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]50103nomail_emoti_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]50103norm_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]60104_ema15_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]60104_ema16_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]60104_ema17_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]60104_ema18_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]60104_ema19_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]60104_ema20_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]60104_ema21_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]60104_ema24_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]60104_ema25_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]60104_ema26_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]60104_ema30_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]60104_ema33_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]60104_ema34_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]62802hippi_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]62802jumpie_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]80402argh_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]80402oops_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]80402ouch_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]82502no_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\[u]0[/u]82502yes_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\110103_boring1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\110103_confused_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\110103_crying_ugly_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\110103_fantastic_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\110103_feel_better_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\110103_gimme_break_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\110103_heehee_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\110103_hlopaet_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\110103_ign_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\110103_lol_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\110103_no_comment_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\110103_peace_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\110103_smashing_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\110103_talk2thehand_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\block_sm.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\block_sm2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\block_smli.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\block_smli2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\blocked.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\blocked2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\btn_add-but.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\btn_back-but.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\btn_left_cut_enabled_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\btn_left_enabled_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\btn_left_pressed_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\btn_middle_enabled_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\btn_middle_pressed_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\btn_right_cut_enabled_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\btn_right_enabled_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\btn_right_pressed_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\business_promo.htm
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\buttondir.txt
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\components.cdf
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\css_cattree.css
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\css_flashpreview.css
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\css2_main.css
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\css2_pagingmodule.css
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\css2_topbuttons.css
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\delete.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\edit_clear_sound.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\edit_fs.htm
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\edit_select.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-511724-549108.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-511724-9595.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-backgrounds.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-bcards.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-ecards.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-emoticons.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-estationery.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-funny.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-help.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-images.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-info.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-more.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-my.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-new.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-new2.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-options.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-people.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-photo.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-SpamBlocked.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-tell.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-temp.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-text.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-voice.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-def.cdf
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-premium-email-premium.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\email-t7-bg.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\estatationery.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\flashpatch.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\flashpreview.htm
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\fs3.htm
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\hotbar_promo.htm
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\icon_checked_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\icon_close_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\icon_close_pressed_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\icon_edit_preview.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\icon_edit_send.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\icon_flash_preview.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\icon_recently_used.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\icon_remove_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\icon_remove_pressed_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\icon_sand-clock2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\icon_tell_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\icon_tell_pressed_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\icon_tree_null.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\icon_unchecked_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\icon_unchecked_pressed_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\img_barlayout.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\img_barlayout2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\img_barlayout4.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\img_corner_left.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\img_local_logo.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\js2_basetemplate.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\js2_hbgroups.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\js2_hbobject3.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\js2_hbobjectset3.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\js2_hotbarwrapper.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\js2_iteratorsandreaders3nf.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\js2_pagingmoduleobj3.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\js2_texts3.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\js2_xmltree3nf.js
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\layout.cdf
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\linkpathlegal.txt
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\n.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\nav_b_2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\nav_bb_2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\nav_f_2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\nav_ff_2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\progress.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\s_icons_buttons.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\searchbtn.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\submit.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\t6_bg.res
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\tab_bg.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\tab_bga.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\tab_bgia.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\tab_l.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\tab_la.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\tab_lia.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\tab_r.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\tab_ra.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\tab_ria.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\tree_dots.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\tree_minus.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\tree_plus.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\treedata_animations.xml
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\treedata_backgrounds.xml
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\treedata_ecards.xml
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\treedata_emoticons.xml
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\treedata_notifiers.xml
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\2\treedata_text.xml
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\DownLoad\business_promo.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\DownLoad\buttondir.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\DownLoad\code.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\DownLoad\email-def.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\DownLoad\email-t7-bg.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\DownLoad\hotbar_promo.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\DownLoad\images.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\DownLoad\layout.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\DownLoad\linkpathlegal.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\DownLoad\localcontent.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\DownLoad\progress.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\DownLoad\s_icons_buttons.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\DownLoad\t6_bg.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOI\static\DownLoad\treexml.xip
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]30104_emte10_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]30104_emte11_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]30104_emte12_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]30104_emte13_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]30104_emte14_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]30104_emte19_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]30104_emte20_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]30104_emte21_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]30104_emte9_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]30203lib_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]33102angel_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]33102bigluf_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]33102bigsmile_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]33102birthday_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]33102cheers_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]33102flo_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]33102good_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]33102jump_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]33102king_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]33102lough_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]33102luf_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]33102smile_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]33102smiled_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]33102sor_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]33102thanx_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]33102uhu_1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]40103ahh_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]40103wow_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]40104_emi2_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]42102_1134_112_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]50103big_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]50103gig_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]50103hm_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]50103nomail_emoti_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]50103norm_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]60104_ema15_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]60104_ema16_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]60104_ema17_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]60104_ema18_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]60104_ema19_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]60104_ema20_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]60104_ema21_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]60104_ema24_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]60104_ema25_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]60104_ema26_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]60104_ema30_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]60104_ema33_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]60104_ema34_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]62802hippi_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]62802jumpie_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]80402argh_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]80402oops_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]80402ouch_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]82502no_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\[u]0[/u]82502yes_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\110103_boring1_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\110103_confused_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\110103_crying_ugly_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\110103_fantastic_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\110103_feel_better_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\110103_gimme_break_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\110103_heehee_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\110103_hlopaet_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\110103_ign_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\110103_lol_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\110103_no_comment_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\110103_peace_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\110103_smashing_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\110103_talk2thehand_prv.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\block_sm.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\block_sm2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\block_smli.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\block_smli2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\blocked.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\blocked2.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\btn_add-but.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\btn_back-but.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\btn_left_cut_enabled_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\btn_left_enabled_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\btn_left_pressed_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\btn_middle_enabled_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\btn_middle_pressed_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\btn_right_cut_enabled_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\btn_right_enabled_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\btn_right_pressed_1.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\business_promo.htm
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\buttondir.txt
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\components.cdf
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\css_cattree.css
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\css_flashpreview.css
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\css2_main.css
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\css2_pagingmodule.css
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\css2_topbuttons.css
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\delete.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\edit_clear_sound.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\edit_fs.htm
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\edit_select.gif
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-511724-512971.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-511724-512972.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-511724-549108.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-511724-589306.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-511724-591943.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-511724-592579.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-511724-598579.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-511724-603763.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-511724-9595.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-email-backgrounds.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-email-bcards.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-email-ecards.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-email-emoticons.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-email-estationery.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-email-funny.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-email-help.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-email-images.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-email-info.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-email-more.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-email-my.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-email-new.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-email-new2.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-email-options.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-email-people.mnu
C:\Documents and Settings\autumn\Application Data\SpamBlockerUtility\v3.0\HostOL\static\1\email-def-em
- 1
- 2