Se connecter / S'enregistrer
Votre question

[Résolu] Antivir detecte un trojan horse: TR/Rootkit.gen

Tags :
  • Sécurité
Dernière réponse : dans Sécurité et virus
27 Avril 2008 19:51:53

Bonjour
A chaque fois que je lance un jeu online mon anti-virus (Avira antivir personal) détecte un trojan horse TR/Rootkit.gen
je n'arrive pas à le suprimer et l'on m'a conseillé de venir ici :) 
merci

Autres pages sur : resolu antivir detecte trojan horse rootkit gen

27 Avril 2008 20:02:22

merci de votre aide, voici le rapport;


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:00:14, on 27/04/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\utilitaires\Anti-Blaxx 1.18\Anti-Blaxx.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\utilitaires\Winamp\winampa.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Winamp Remote\bin\OrbTray.exe
C:\Program Files\SAGEM\SAGEM F@st 800-908\dslmon.exe
C:\Program Files\Winamp Remote\bin\Orb.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.free.fr/search/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFre1.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFre1.dll
O2 - BHO: Winamp Toolbar BHO - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: ShprRprts - {2A8A997F-BB9F-48F6-AA2B-2762D50F9289} - C:\Program Files\ShopperReports\Bin\2.0.20\ShprRprt.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: TVEngine Helper - {4B18DD50-C996-44fc-AC52-0FECFF82ED58} - c:\program files\spamblockerutility\sbtv\sbtvhelper.dll
O2 - BHO: Need2Find Bar BHO - {4D1C4E81-A32A-416b-BCDB-33B3EF3617D3} - C:\Program Files\Need2Find\bar\1.bin\ND2FNBAR.DLL
O2 - BHO: Nothing - {686a161d-5bd1-4999-8832-6393f41e564c} - C:\WINDOWS\system32\hp100.tmp (file missing)
O2 - BHO: SpamBlockerUtility - {74CC49F7-EB32-4A08-B204-948962A6E3DB} - C:\Program Files\SpamBlockerUtility\Bin\4.8.0.0\SbHostIE.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
O3 - Toolbar: SpamBlockerUtility - {74CC49F7-EB32-4A08-B204-948962A6E3DB} - C:\Program Files\SpamBlockerUtility\Bin\4.8.0.0\SbHostIE.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
O3 - Toolbar: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFre1.dll
O4 - HKLM\..\Run: [WinFixer 2005] C:\Program Files\WinFixer 2005\wfx5.exe
O4 - HKLM\..\Run: [Windows Compliant] ncbbpj.exe
O4 - HKLM\..\Run: [WeatherOnTray] C:\Program Files\SpamBlockerUtility\Bin\4.7.1.0\SbWeatherOnTray.exe
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [uhyzctgt] C:\WINDOWS\uhyzctgt.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [Start Upping] svchostings.exe
O4 - HKLM\..\Run: [SpySpotter System Defender] C:\Program Files\SpySpotter3\Defender.exe -startup
O4 - HKLM\..\Run: [SpamBlocker] C:\Program Files\SpamBlockerUtility\Bin\4.8.0.0\SbOEAddOn.exe
O4 - HKLM\..\Run: [Spam Blocker for Outlook Express] C:\PROGRA~1\SPAMBL~1\Bin\471~1.0\SBInst.exe
O4 - HKLM\..\Run: [Servicio Local] svhost.exe
O4 - HKLM\..\Run: [SdCheckOBBH] rundll32.exe C:\WINDOWS\lfd4_tmp.#32,Ini
O4 - HKLM\..\Run: [rybinyf] C:\WINDOWS\rybinyf.exe
O4 - HKLM\..\Run: [Norton Antivirus AV] C:\WINDOWS\FVProtect.exe
O4 - HKLM\..\Run: [mediamotor.exe] C:\WINDOWS\mmups.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [Anti-Blaxx Manager] C:\Program Files\utilitaires\Anti-Blaxx 1.18\Anti-Blaxx.exe
O4 - HKLM\..\Run: [ALTER DATA] c:\windows\system32\ccdew\repcale.exe c:\windows\system32\ccdew\beird.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [krroiahi] C:\WINDOWS\system32\bfbbemwd.exe
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\utilitaires\Winamp\winampa.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\RunServices: [Servicio Local] svhost.exe
O4 - HKLM\..\RunServices: [ALTER DATA] c:\windows\system32\ccdew\repcale.exe c:\windows\system32\ccdew\beird.exe
O4 - HKLM\..\RunServices: [Windows Compliant] ncbbpj.exe
O4 - HKLM\..\RunServices: [Start Upping] svchostings.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Orb] "C:\Program Files\Winamp Remote\bin\OrbTray.exe" /background
O4 - HKLM\..\Policies\Explorer\Run: [wininet.dll] regperf.exe
O4 - HKLM\..\Policies\Explorer\Run: [kernel32.dll] C:\WINDOWS\system32\atmclk.exe
O4 - HKLM\..\Policies\Explorer\Run: [dcomcfg.exe] dcomcfg.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [Start Upping] svchostings.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-908\dslmon.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Bureautique\crosoftoffice\Office10\OSA.EXE
O8 - Extra context menu item: &Search - http://ko.bar.need2find.com/KO/menusearch.html?p=KO
O8 - Extra context menu item: &Winamp Toolbar Search - C:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\BUREAU~1\CROSOF~1\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\utilitaires\WinHTTrack\WinHTTrackIEBar.dll (file missing)
O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\utilitaires\WinHTTrack\WinHTTrackIEBar.dll (file missing)
O9 - Extra button: ShopperReports - Compare product prices - {946B3E9E-E21A-49c8-9F63-900533FAFE14} - C:\Program Files\ShopperReports\Bin\2.0.20\ShprRprt.dll
O9 - Extra button: ShopperReports - Compare travel rates - {946B3E9E-E21A-49c8-9F63-900533FAFE15} - C:\Program Files\ShopperReports\Bin\2.0.20\ShprRprt.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O14 - IERESET.INF: START_PAGE_URL=http://freebox.free.fr/
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab312...
O16 - DPF: {2D2BEE6E-3C9A-4D58-B9EC-458EDB28D0F6} - http://cdn.drivecleaner.com/installdrivecleanerstart_fr...
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall...
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClie...
O16 - DPF: {B64F4A7C-97C9-11DA-8BDE-F66BAD1E3F3A} - http://download.cdn.winsoftware.com/files/installers/ca...
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/fl...
O17 - HKLM\System\CCS\Services\Tcpip\..\{D8BC072F-A077-4C4F-AC90-88EB09415E48}: NameServer = 192.162.0.101
O18 - Filter hijack: text/html - (no CLSID) - (no file)
O22 - SharedTaskScheduler: incaged - {05a91164-3c96-47d6-aa74-2c855791b2d0} - (no file)
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

--
End of file - 11896 bytes
Contenus similaires
27 Avril 2008 21:26:34

Re,

Ouaou :ouch:  Il est méga infecté ton PC : tu fais quoi avec ? :heink: 

Bon on va nettoyer tout ça. Mais avant tout je te conseille de sauvegarder tes données les plus importantes, comme tes documents de travails etc.

On va commencer par ça :

1) Télécharge BTFix (Bibi26[/#f]).
Dézippe l'archive sur ton Bureau.
  • Ouvre le dossier BTFix.
  • Double clique sur BTFix.exe.
  • Clique sur Rechercher.
  • Un rapport va apparaître, copie/colle-le dans ta prochaine réponse.
  • Ouvre à nouveau BTFix.
  • Clique sur [#ff0000]Nettoyer
  • .
  • Un rapport va apparaître, copie/colle-le dans ta prochaine réponse.

    2) Cette procédure doit être imprimée pour que tu puisses l’avoir sous les yeux quand tu seras en mode sans échec.

    Télécharge SDFix(créé par AndyManchesta) et sauvegarde le sur ton Bureau.
    ***Si le lien ne fonctionne pas, essaie celui-ci : http://download.bleepingcomputer.com/andymanchesta/SDFi... ***
    Guide d'utilisation : http://mickael.barroux.free.fr/securite/sdfix.php
    Double clique sur SDFix.exe et choisis Install pour l'extraire dans un dossier dédié sur le Bureau. Redémarre ton ordinateur en mode sans échec en suivant la procédure que voici :
  • Redémarre ton ordinateur
  • Après avoir entendu l'ordinateur biper lors du démarrage, mais avant que l'icône Windows apparaisse, tapote la touche F8 (une pression par seconde).
  • A la place du chargement normal de Windows, un menu avec différentes options devrait apparaître.
  • Choisis la première option, pour exécuter Windows en mode sans échec, puis appuie sur "Entrée".
  • Choisis ton compte.
    Déroule la liste des instructions ci-dessous :
  • Ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double clique sur RunThis.bat pour lancer le script.
  • Appuie sur Y pour commencer le processus de nettoyage.
  • Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer.
  • Appuie sur une touche pour redémarrer le PC.
  • Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers.
  • Après le chargement du Bureau, l'outil terminera son travail et affichera Finished.
  • Appuie sur une touche pour finir l'exécution du script et charger les icônes de ton Bureau.
  • Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt.
  • Enfin, copie/colle le contenu du fichier Report.txt dans ta prochaine réponse sur le forum, avec un nouveau log Hijackthis !
    N.B.:
    - Le fichier SDFIX_README.htm (dans le dossier SDFix) contient la liste des malwares pris en compte par l'outil.
    - Andy fait plusieurs mises à jour, souvent plus d'une par jour... N'hésitez donc pas à demander de télécharger une nouvelle version lorsque le nettoyage dure et que l'outil ne semble pas tout voir.

    + nouveau rapport hijackthis.

    ;) 

    27 Avril 2008 21:48:05

    Re,
    "sauvegarder tes données les plus importantes" :ouch: 
    je risque de perdre des documents ?
    je ne suis pas le seul utilisateur de cet ordinateur et donc je ne sais pas ce qui est le plus important :( 
    27 Avril 2008 21:53:54

    Re,

    Vu le degré d'infection, il peut y avoir des risques. C'est donc une mesure préventive. Et d'ailleurs, les utilisateurs devraient faire des sauvegardes régulières de leurs données.

    Ben ce qui est important c'est document de travail, administratifs etc. La musique, les photos, les films, c'est secondaire et peu important.

    Sinon pour répondre à ta question, non tu ne risques pas de perdre tes documents, mais le PC pourrait planter, vu son degré d'infection.

    Enfin, ça reste rare.

    J'attends les rapports demandés.

    Bonne soirée :hello: 
    27 Avril 2008 22:08:51

    1)BTfix
    premier rapport:

    BTFix 1.098 (par bibi26) - 27/04/2008 21:58:45 - Analyse
    Lancé depuis C:\Documents and Settings\Pierre\Bureau\BTFix\BTFix.exe

    ---> Fichiers/Dossiers trouvés

    - [Heuristique : Hotbar] C:\WINDOWS\system32\bfbbemwd.exe
    - C:\WINDOWS\smdat32m.sys
    - C:\WINDOWS\smdat32a.sys
    - C:\Program Files\RXToolBar\
    - C:\Program Files\Need2Find\
    - C:\Program Files\ShopperReports\
    - C:\Program Files\SpamBlockerUtility\
    - C:\Documents and Settings\Pierre\Application Data\ShopperReports\
    - C:\Documents and Settings\Pierre\Application Data\SpamBlockerUtility\

    ---> Analyse terminée le 27/04/2008 21:59:27

    deuxième rapport:

    BTFix 1.098 (par bibi26) - 27/04/2008 22:01:13 - Nettoyage - Mode normal
    Lancé depuis C:\Documents and Settings\Pierre\Bureau\BTFix\BTFix.exe

    ---> Fichiers/dossiers supprimés (Première passe)

    - Fichiers temporaires effacés
    - [Heuristique : Hotbar] C:\WINDOWS\system32\bfbbemwd.exe
    - C:\WINDOWS\smdat32m.sys
    - C:\WINDOWS\smdat32a.sys
    - C:\Program Files\RXToolBar\
    - C:\Program Files\Need2Find\bar\1.bin\
    - C:\Program Files\Need2Find\bar\Cache\
    - C:\Program Files\Need2Find\bar\History\
    - C:\Program Files\Need2Find\bar\Settings\
    - C:\Program Files\Need2Find\bar\
    - C:\Program Files\Need2Find\
    - C:\Program Files\ShopperReports\Bin\1.0.8.0\
    - C:\Program Files\ShopperReports\Bin\2.0.0\
    - C:\Program Files\ShopperReports\Bin\2.0.20\
    - C:\Program Files\ShopperReports\Bin\
    - C:\Program Files\ShopperReports\cs\
    - C:\Program Files\ShopperReports\
    - C:\Program Files\SpamBlockerUtility\Bin\4.7.1.0\ (erreur lors de la suppression)
    - C:\Program Files\SpamBlockerUtility\Bin\4.8.0.0\
    - C:\Program Files\SpamBlockerUtility\Bin\
    - C:\Program Files\SpamBlockerUtility\SBTV\
    - C:\Program Files\SpamBlockerUtility\
    - C:\Documents and Settings\Pierre\Application Data\ShopperReports\cs\db\
    - C:\Documents and Settings\Pierre\Application Data\ShopperReports\cs\dwld\
    - C:\Documents and Settings\Pierre\Application Data\ShopperReports\cs\report\
    - C:\Documents and Settings\Pierre\Application Data\ShopperReports\cs\res1\
    - C:\Documents and Settings\Pierre\Application Data\ShopperReports\cs\
    - C:\Documents and Settings\Pierre\Application Data\ShopperReports\
    - C:\Documents and Settings\Pierre\Application Data\SpamBlockerUtility\IESkins\
    - C:\Documents and Settings\Pierre\Application Data\SpamBlockerUtility\v3.0\HostOI\dynamic\
    - C:\Documents and Settings\Pierre\Application Data\SpamBlockerUtility\v3.0\HostOI\static\
    - C:\Documents and Settings\Pierre\Application Data\SpamBlockerUtility\v3.0\HostOI\
    - C:\Documents and Settings\Pierre\Application Data\SpamBlockerUtility\v3.0\HostOL\dynamic\
    - C:\Documents and Settings\Pierre\Application Data\SpamBlockerUtility\v3.0\HostOL\static\
    - C:\Documents and Settings\Pierre\Application Data\SpamBlockerUtility\v3.0\HostOL\
    - C:\Documents and Settings\Pierre\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\hstat\
    - C:\Documents and Settings\Pierre\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\
    - C:\Documents and Settings\Pierre\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\ustat\
    - C:\Documents and Settings\Pierre\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\
    - C:\Documents and Settings\Pierre\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\
    - C:\Documents and Settings\Pierre\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\
    - C:\Documents and Settings\Pierre\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\
    - C:\Documents and Settings\Pierre\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\
    - C:\Documents and Settings\Pierre\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\
    - C:\Documents and Settings\Pierre\Application Data\SpamBlockerUtility\v3.0\
    - C:\Documents and Settings\Pierre\Application Data\SpamBlockerUtility\

    ---> Fichiers/dossiers supprimés (Seconde passe - Redémarrage de l'ordinateur)

    - Fichiers temporaires effacés

    ---> Nettoyage terminé le 27/04/2008 22:03:44



    note : l'ordinateur a redémarrer et l'antivirus a signalé un autre logiciel malveillant :ouch: 
    je lance la deuxième procédure
    27 Avril 2008 22:57:49

    2)SDfix


    SDFix: Version 1.176
    Run by Administrateur on 27/04/2008 at 22:30

    Microsoft Windows XP [version 5.1.2600]
    Running From: C:\SDFix

    Checking Services :


    Restoring Windows Registry Values
    Restoring Windows Default Hosts File

    Rebooting


    Checking Files :

    Trojan Files Found:

    C:\WINDOWS\system32\TFTP2308 - Deleted
    C:\WINDOWS\system32\TFTP3928 - Deleted
    C:\WINDOWS\system32\TFTP4068 - Deleted
    C:\WINDOWS\system32\TFTP4108 - Deleted
    C:\WINDOWS\system32\TFTP4980 - Deleted
    C:\WINDOWS\system32\TFTP832 - Deleted





    Removing Temp Files

    ADS Check :



    Final Check :

    catchme 0.3.1353.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-04-27 22:41:38
    Windows 5.1.2600 Service Pack 2 NTFS

    scanning hidden processes ...

    scanning hidden services & system hive ...

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\d347prt\Cfg\0Jf40]
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\d347prt\Cfg\0Jf41]
    "khjeh"=hex:20,02,00,00,89,26,b2,40,69,eb,2e,a8,18,82,b6,20,db,d6,47,7b,d2,..
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\d347prt\Cfg\0Jf42]
    "khjeh"=hex:20,02,00,00,2d,31,85,e1,45,1b,e9,f3,c4,6f,61,45,d7,5c,97,50,3e,..
    "hj34z0"=hex:21,58,2d,b2,d0,bc,65,fb,de,80,00,0a,6f,2c,b0,05,2d,40,dd,17,33,..
    "hj34z1"=hex:c1,58,2d,b2,a8,bc,65,fb,df,80,01,0a,6e,2c,b0,05,2d,40,dd,17,a4,..
    "hj34z2"=hex:c1,58,2d,b2,a8,bc,65,fb,df,80,01,0a,6e,2c,b0,05,2d,40,dd,17,a4,..
    "hj34z3"=hex:c1,58,2d,b2,a8,bc,65,fb,df,80,01,0a,6e,2c,b0,05,2d,40,dd,17,a4,..
    "hj34z4"=hex:c1,58,2d,b2,a8,bc,65,fb,df,80,01,0a,6e,2c,b0,05,2d,40,dd,17,a4,..
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\d347prt\Cfg\0Jf43]
    "khjeh"=hex:20,02,00,00,3d,b4,39,08,b5,88,79,f4,74,49,dc,71,87,06,ce,a3,2e,..
    "hj34z0"=hex:ad,65,b5,3e,d5,8a,1e,5f,95,00,ec,d5,5a,75,37,d3,3a,c0,30,ce,70,..

    scanning hidden registry entries ...

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Prefetcher]
    "TracesProcessed"=dword:0000004d

    scanning hidden files ...


    scan completed successfully
    hidden processes: 0
    hidden services: 0
    hidden files: 30


    Remaining Services :




    Authorized Application Key Export:

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
    "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
    "C:\\Program Files\\utilitaires\\mIRC\\mirc.exe"="C:\\Program Files\\utilitaires\\mIRC\\mirc.exe:*:Enabled:mIRC"
    "C:\\WINDOWS\\system32\\svhost.exe"="C:\\WINDOWS\\system32\\svhost.exe:*:Enabled:Generic Host Process for Win32 Services"
    "C:\\WINDOWS\\system32\\javaw.exe"="C:\\WINDOWS\\system32\\javaw.exe:*:Enabled:javaw"
    "C:\\Program Files\\Microsoft Games\\Dungeon Siege\\DungeonSiege.exe"="C:\\Program Files\\Microsoft Games\\Dungeon Siege\\DungeonSiege.exe:*:Enabled:D ungeon Siege"
    "C:\\Program Files\\utilitaires\\Phone\\Skype.exe"="C:\\Program Files\\utilitaires\\Phone\\Skype.exe:*:Enabled:Skype"
    "C:\\Program Files\\utilitaires\\X-Chat 2\\xchat.exe"="C:\\Program Files\\utilitaires\\X-Chat 2\\xchat.exe:*:Enabled:xchat"
    "C:\\Program Files\\jeux\\Freeciv-1.14.0\\civserver.exe"="C:\\Program Files\\jeux\\Freeciv-1.14.0\\civserver.exe:*:Enabled:civserver"
    "C:\\Program Files\\utilitaires\\Maple 9.5\\bin.win\\mserver.exe"="C:\\Program Files\\utilitaires\\Maple 9.5\\bin.win\\mserver.exe:*:D isabled:mserver"
    "C:\\Program Files\\utilitaires\\Maple 9.5\\jre\\bin\\java.exe"="C:\\Program Files\\utilitaires\\Maple 9.5\\jre\\bin\\java.exe:*:D isabled:java"
    "C:\\Program Files\\jeux\\Valve\\Steam\\Steam.exe"="C:\\Program Files\\jeux\\Valve\\Steam\\Steam.exe:*:Enabled:Steam"
    "C:\\Program Files\\jeux\\Valve\\Steam\\SteamApps\\usul2k@hotmail.com\\day of defeat\\hl.exe"="C:\\Program Files\\jeux\\Valve\\Steam\\SteamApps\\usul2k@hotmail.com\\day of defeat\\hl.exe:*:Enabled:Half-Life Launcher"
    "C:\\Program Files\\EA GAMES\\La Bataille pour la Terre du Milieu(tm)\\game.dat"="C:\\Program Files\\EA GAMES\\La Bataille pour la Terre du Milieu(tm)\\game.dat:*:Enabled:La Bataille pour la Terre du Milieu(tm)"
    "C:\\Program Files\\Enlight\\Infinite Interactive\\Warlords Battlecry III\\Battlecry III.exe"="C:\\Program Files\\Enlight\\Infinite Interactive\\Warlords Battlecry III\\Battlecry III.exe:*:Enabled:Warlords Battlecry III"
    "C:\\WINDOWS\\system32\\dpnsvr.exe"="C:\\WINDOWS\\system32\\dpnsvr.exe:*:Enabled:Microsoft DirectPlay8 Server"
    "C:\\Program Files\\JVTorrent\\btdownloadgui.exe"="C:\\Program Files\\JVTorrent\\btdownloadgui.exe:*:Enabled:btdownloadgui"
    "C:\\Kazaa\\kazaa.exe"="C:\\Kazaa\\kazaa.exe:*:Enabled:Kazaa Media Desktop"
    "C:\\Documents and Settings\\L93112\\Bureau\\Maelstrom-3.0.6-Windows\\Maelstrom-3.0.6\\Maelstrom.exe"="C:\\Documents and Settings\\L93112\\Bureau\\Maelstrom-3.0.6-Windows\\Maelstrom-3.0.6\\Maelstrom.exe:*:Enabled:Maelstrom"
    "C:\\Documents and Settings\\L93112\\Mes documents\\My Games\\Maelstrom-3.0.6-Windows\\Maelstrom-3.0.6\\Maelstrom.exe"="C:\\Documents and Settings\\L93112\\Mes documents\\My Games\\Maelstrom-3.0.6-Windows\\Maelstrom-3.0.6\\Maelstrom.exe:*:Enabled:Maelstrom"
    "C:\\Program Files\\jeux\\Firaxis Games\\Sid Meier's Civilization 4\\Civilization4.exe"="C:\\Program Files\\jeux\\Firaxis Games\\Sid Meier's Civilization 4\\Civilization4.exe:*:Enabled:Sid Meier's Civilization 4"
    "C:\\Program Files\\utilitaires\\xchat\\xchat.exe"="C:\\Program Files\\utilitaires\\xchat\\xchat.exe:*:Enabled:XChat IRC Client"
    "C:\\Program Files\\Real\\RealPlayer\\realplay.exe"="C:\\Program Files\\Real\\RealPlayer\\realplay.exe:*:Enabled:RealPlayer"
    "C:\\Program Files\\jeux\\TrackMania Nations ESWC\\TmNationsESWC.exe"="C:\\Program Files\\jeux\\TrackMania Nations ESWC\\TmNationsESWC.exe:*:Enabled:TmNationsESWC"
    "C:\\Program Files\\eMule\\emule.exe"="C:\\Program Files\\eMule\\emule.exe:*:Enabled:eMule"
    "C:\\Program Files\\jeux\\FreeOrion\\freeoriond.exe"="C:\\Program Files\\jeux\\FreeOrion\\freeoriond.exe:*:Enabled:freeoriond"
    "C:\\Program Files\\utilitaire\\eMule\\emule.exe"="C:\\Program Files\\utilitaire\\eMule\\emule.exe:*:Enabled:eMule"
    "C:\\torrent\\xevil\\xevil.exe"="C:\\torrent\\xevil\\xevil.exe:*:Enabled:XEvil2.0 Beta Demo"
    "C:\\Program Files\\Utilitaires poste\\Nouveau dossier\\firefox.exe"="C:\\Program Files\\Utilitaires poste\\Nouveau dossier\\firefox.exe:*:Enabled:Firefox"
    "C:\\Program Files\\utilitaires\\eMule\\emule.exe"="C:\\Program Files\\utilitaires\\eMule\\emule.exe:*:Enabled:eMule"
    "C:\\Program Files\\Windows Media Player\\wmplayer.exe"="C:\\Program Files\\Windows Media Player\\wmplayer.exe:*:Enabled:Windows Media Player"
    "C:\\Documents and Settings\\L93112\\Mes documents\\My Games\\Company of Heroes\\Patch\\FR_1_0_0_to_1_2_0.exe"="C:\\Documents and Settings\\L93112\\Mes documents\\My Games\\Company of Heroes\\Patch\\FR_1_0_0_to_1_2_0.exe:*:Enabled:TODO: <File description>"
    "C:\\Program Files\\jeux\\THQ\\Company of Heroes\\RelicCOH.exe"="C:\\Program Files\\jeux\\THQ\\Company of Heroes\\RelicCOH.exe:*:Enabled:RelicCOH"
    "C:\\Program Files\\jeux\\CrackAttack\\bin\\crackattack.exe"="C:\\Program Files\\jeux\\CrackAttack\\bin\\crackattack.exe:*:Enabled:crackattack"
    "C:\\Program Files\\Crack-Attack\\bin\\crack-attack.exe"="C:\\Program Files\\Crack-Attack\\bin\\crack-attack.exe:*:Enabled:crack-attack"
    "C:\\Program Files\\jeux\\Anno 1701\\Anno1701.exe"="C:\\Program Files\\jeux\\Anno 1701\\Anno1701.exe:*:Enabled:Anno 1701"
    "C:\\Program Files\\jeux\\Atari\\Neverwinter Nights 2\\nwn2main.exe"="C:\\Program Files\\jeux\\Atari\\Neverwinter Nights 2\\nwn2main.exe:*:Enabled:Neverwinter Nights 2 Main"
    "C:\\Program Files\\jeux\\Atari\\Neverwinter Nights 2\\nwn2main_amdxp.exe"="C:\\Program Files\\jeux\\Atari\\Neverwinter Nights 2\\nwn2main_amdxp.exe:*:Enabled:Neverwinter Nights 2 AMD"
    "C:\\Program Files\\jeux\\Atari\\Neverwinter Nights 2\\nwupdate.exe"="C:\\Program Files\\jeux\\Atari\\Neverwinter Nights 2\\nwupdate.exe:*:Enabled:Neverwinter Nights 2 Updater"
    "C:\\Program Files\\jeux\\Atari\\Neverwinter Nights 2\\nwn2server.exe"="C:\\Program Files\\jeux\\Atari\\Neverwinter Nights 2\\nwn2server.exe:*:Enabled:Neverwinter Nights 2 Server"
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
    "C:\\Program Files\\utilitaires\\Overnet\\overnet.exe"="C:\\Program Files\\utilitaires\\Overnet\\overnet.exe:*:Enabled:o vernet Application"
    "C:\\Program Files\\utilitaires\\Freeplayer\\vlc\\vlc.exe"="C:\\Program Files\\utilitaires\\Freeplayer\\vlc\\vlc.exe:*:Enabled:VLC media player"
    "C:\\Program Files\\utilitaires\\VideoLAN\\VLC\\vlc.exe"="C:\\Program Files\\utilitaires\\VideoLAN\\VLC\\vlc.exe:*:Enabled:VLC media player"
    "C:\\Program Files\\jeux\\UFOAI\\ufo.exe"="C:\\Program Files\\jeux\\UFOAI\\ufo.exe:*:Enabled:UFO:Alien Invasion"
    "C:\\Documents and Settings\\Pierre\\Local Settings\\Temp\\ElectronicArts_Patcher_000.exe"="C:\\Documents and Settings\\Pierre\\Local Settings\\Temp\\ElectronicArts_Patcher_000.exe:*:Enabled:ElectronicArts_Patcher_000"
    "C:\\Program Files\\Mozilla Firefox\\firefox.exe"="C:\\Program Files\\Mozilla Firefox\\firefox.exe:*:Enabled:Firefox"
    "C:\\Program Files\\Electronic Arts\\Command & Conquer 3\\RetailExe\\1.4\\cnc3game.dat"="C:\\Program Files\\Electronic Arts\\Command & Conquer 3\\RetailExe\\1.4\\cnc3game.dat:*:Enabled:Command & Conquer 3 Les guerres du TiberiumT"
    "C:\\Program Files\\Winamp Remote\\bin\\Orb.exe"="C:\\Program Files\\Winamp Remote\\bin\\Orb.exe:*:Enabled:o rb"
    "C:\\Program Files\\Winamp Remote\\bin\\OrbTray.exe"="C:\\Program Files\\Winamp Remote\\bin\\OrbTray.exe:*:Enabled:o rbTray"
    "C:\\Program Files\\Winamp Remote\\bin\\OrbStreamerClient.exe"="C:\\Program Files\\Winamp Remote\\bin\\OrbStreamerClient.exe:*:Enabled:o rb Stream Client"
    "C:\\Program Files\\jeux\\Soldat\\Soldat.exe"="C:\\Program Files\\jeux\\Soldat\\Soldat.exe:*:Enabled:Soldat"
    "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
    "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
    "C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
    "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
    "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
    "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

    Remaining Files :


    File Backups: - C:\SDFix\backups\backups.zip

    Files with Hidden Attributes :

    Thu 9 Dec 2004 4,348 A.SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
    Sun 28 Nov 2004 400 ..SH. --- "C:\Documents and Settings\All Users\DRM\v2ks.bla.bak"
    Sun 28 Nov 2004 48 ..SH. --- "C:\Documents and Settings\All Users\DRM\v2ks.sec.bak"
    Tue 28 Nov 2006 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv02.tmp"
    Fri 29 Jun 2007 4,592 ...H. --- "C:\Documents and Settings\L93112\Local Settings\Temp\Z@R3C.tmp"
    Sun 2 Mar 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\7333946973f87a4fdf879a85eeae256b\BIT1A9.tmp"
    Sat 5 May 2007 1,714 ...HR --- "C:\Documents and Settings\L93112\Application Data\SecuROM\UserData\securom_v7_01.bak"
    Mon 5 Nov 2007 1,714 ...HR --- "C:\Documents and Settings\Pierre\Application Data\SecuROM\UserData\securom_v7_01.bak"
    Thu 15 May 2003 43,008 A..H. --- "C:\Program Files\Bureautique\Adobe\Adobe_5.0\ESD\DLMCleanup.exe"
    Wed 9 Nov 2005 0 A..H. --- "C:\Program Files\Bureautique\crosoftoffice\media\office10\I286\WFXrepair.tmp"

    Finished!


    rapport hijackthis:

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 22:56:53, on 27/04/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16640)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
    C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
    C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\notepad.exe
    C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\Program Files\utilitaires\Anti-Blaxx 1.18\Anti-Blaxx.exe
    C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
    C:\Program Files\utilitaires\Winamp\winampa.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Winamp Remote\bin\OrbTray.exe
    C:\Program Files\SAGEM\SAGEM F@st 800-908\dslmon.exe
    C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\Winamp Remote\bin\Orb.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFre1.dll
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFre1.dll
    O2 - BHO: Winamp Toolbar BHO - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
    O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
    O2 - BHO: Nothing - {686a161d-5bd1-4999-8832-6393f41e564c} - C:\WINDOWS\system32\hp100.tmp (file missing)
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
    O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
    O3 - Toolbar: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFre1.dll
    O4 - HKLM\..\Run: [WinFixer 2005] C:\Program Files\WinFixer 2005\wfx5.exe
    O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
    O4 - HKLM\..\Run: [uhyzctgt] C:\WINDOWS\uhyzctgt.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
    O4 - HKLM\..\Run: [SpySpotter System Defender] C:\Program Files\SpySpotter3\Defender.exe -startup
    O4 - HKLM\..\Run: [Servicio Local] svhost.exe
    O4 - HKLM\..\Run: [SdCheckOBBH] rundll32.exe C:\WINDOWS\lfd4_tmp.#32,Ini
    O4 - HKLM\..\Run: [rybinyf] C:\WINDOWS\rybinyf.exe
    O4 - HKLM\..\Run: [Norton Antivirus AV] C:\WINDOWS\FVProtect.exe
    O4 - HKLM\..\Run: [mediamotor.exe] C:\WINDOWS\mmups.exe
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
    O4 - HKLM\..\Run: [Anti-Blaxx Manager] C:\Program Files\utilitaires\Anti-Blaxx 1.18\Anti-Blaxx.exe
    O4 - HKLM\..\Run: [ALTER DATA] c:\windows\system32\ccdew\repcale.exe c:\windows\system32\ccdew\beird.exe
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
    O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\utilitaires\Winamp\winampa.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\RunServices: [Servicio Local] svhost.exe
    O4 - HKLM\..\RunServices: [ALTER DATA] c:\windows\system32\ccdew\repcale.exe c:\windows\system32\ccdew\beird.exe
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [Orb] "C:\Program Files\Winamp Remote\bin\OrbTray.exe" /background
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\S-1-5-18\..\Run: [Start Upping] svchostings.exe (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
    O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-908\dslmon.exe
    O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Bureautique\crosoftoffice\Office10\OSA.EXE
    O8 - Extra context menu item: &Winamp Toolbar Search - C:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\BUREAU~1\CROSOF~1\Office10\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\utilitaires\WinHTTrack\WinHTTrackIEBar.dll (file missing)
    O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\utilitaires\WinHTTrack\WinHTTrackIEBar.dll (file missing)
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
    O14 - IERESET.INF: START_PAGE_URL=http://freebox.free.fr/
    O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab312...
    O16 - DPF: {2D2BEE6E-3C9A-4D58-B9EC-458EDB28D0F6} - http://cdn.drivecleaner.com/installdrivecleanerstart_fr...
    O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall...
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClie...
    O16 - DPF: {B64F4A7C-97C9-11DA-8BDE-F66BAD1E3F3A} - http://download.cdn.winsoftware.com/files/installers/ca...
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/fl...
    O17 - HKLM\System\CCS\Services\Tcpip\..\{D8BC072F-A077-4C4F-AC90-88EB09415E48}: NameServer = 192.162.0.101
    O18 - Filter hijack: text/html - (no CLSID) - (no file)
    O22 - SharedTaskScheduler: incaged - {05a91164-3c96-47d6-aa74-2c855791b2d0} - (no file)
    O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
    O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
    O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

    --
    End of file - 9385 bytes
    27 Avril 2008 23:12:45

    Re,

    Bien, on continue :) 

    1) Si tu as spybot, ouvre Spybot , clique sur l'onglet Mode et choisis Mode Avancé
    Ne tiens pas compte de l'avertissement
    En bas à gauche , clique sur Outils
    Toujours dans la colonne de gauche , clique sur Résident ( pas dans la fenêtre centrale )
    Et décoche l'option Resident "TeaTimer"

    Télécharge MsnFix (de !aur3n7) sur ton Bureau. (>>Tuto<<)
    Dézippe-le sur C:\

    Ouvre le dossier MSNFix puis double-clique sur MSNFix.bat. (L’extension bat peut ne pas apparaître)
    - Exécute l'option R.
    - Si l'infection est détectée, presse une touche pour lancer le nettoyage. (N)

    Si tu dois redémarrer l’ordinateur fais le manuellement.

    Poste le rapport situé dans le dossier MSNFix.
    Le nom du rapport correspond au moment de sa création : date_heure.log

    Note : Si tu obtiens un fichier zip d’upload sur ton bureau, fais ceci

    2) Télécharge Smitfraudfix (de S!ri).
    Enregistre-le sur ton bureau.
    Lance SmitfraudFix.exe (le .exe peut ne pas apparaitre).
    Choisis l'Option 1 (Recherche)
    Poste le premier rapport ici.

    **Si le lien ne fonctionne pas, clique ici**

    ;) 
    27 Avril 2008 23:15:30

    euh c'est quoi un spybot ? :ouch: 
    c'est grave de ne pas en avoir ?
    27 Avril 2008 23:19:16

    Re,

    Spybot est un anti-spyware facultatif. Si tu ne l'as pas, ce n'est pas grave :) 
    27 Avril 2008 23:26:03

    1)MsnFix :

    MSNFix 1.712

    C:\MSNFix
    Fix exécuté le 27/04/2008 - 23:22:04,85 By Pierre
    mode normal

    ************************ Recherche les fichiers présents

    Aucun Fichier trouvé

    ************************ Recherche les dossiers présents

    ... \TEMP\




    ************************ Suppression des fichiers



    ************************ Suppression des dossiers

    .. OK ... \TEMP\


    ************************ Nettoyage du registre



    ************************ Fichiers suspects

    Aucun Fichier trouvé


    Les fichiers et clés de registre supprimés ont été sauvegardés dans le fichier 27042008_23233106.zip

    ************************ HKLM\...\Winlogon\Userinit

    Userinit = C:\WINDOWS\system32\userinit.exe,


    ------------------------------------------------------------------------
    Auteur : !aur3n7 Contact: http://changelog.fr
    ------------------------------------------------------------------------

    --------------------------------------------- END ---------------------------------------------

    27 Avril 2008 23:29:45

    2) smtifraudfix :

    SmitFraudFix v2.319

    Rapport fait à 23:27:07,53, 27/04/2008
    Executé à partir de C:\Documents and Settings\Pierre\Bureau\SmitfraudFix
    OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
    Le type du système de fichiers est NTFS
    Fix executé en mode normal

    »»»»»»»»»»»»»»»»»»»»»»»» Process

    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
    C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
    C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\Program Files\utilitaires\Anti-Blaxx 1.18\Anti-Blaxx.exe
    C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
    C:\Program Files\utilitaires\Winamp\winampa.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Winamp Remote\bin\OrbTray.exe
    C:\Program Files\SAGEM\SAGEM F@st 800-908\dslmon.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\Winamp Remote\bin\Orb.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\WINDOWS\explorer.exe
    C:\WINDOWS\system32\cmd.exe

    »»»»»»»»»»»»»»»»»»»»»»»» hosts


    »»»»»»»»»»»»»»»»»»»»»»»» C:\


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

    C:\WINDOWS\system32\ncompat.tlb PRESENT !
    C:\WINDOWS\system32\ot.ico PRESENT !
    C:\WINDOWS\system32\stdole3.tlb PRESENT !
    C:\WINDOWS\system32\ts.ico PRESENT !
    C:\WINDOWS\system32\1024\ PRESENT !

    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles


    »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Pierre


    »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Pierre\Application Data


    »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer


    »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\Pierre\Favoris


    »»»»»»»»»»»»»»»»»»»»»»»» Bureau


    »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

    C:\Program Files\eMedia Codec\ PRESENT !

    »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues


    »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
    "Source"="About:Home"
    "SubscribedURL"="About:Home"
    "FriendlyName"="Ma page d'accueil"


    »»»»»»»»»»»»»»»»»»»»»»»» IEDFix
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    IEDFix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri


    »»»»»»»»»»»»»»»»»»»»»»»» VACFix
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    VACFix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri


    »»»»»»»»»»»»»»»»»»»»»»»» 404Fix
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    404Fix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri


    »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    SrchSTS.exe by S!Ri
    Search SharedTaskScheduler's .dll

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
    "{05a91164-3c96-47d6-aa74-2c855791b2d0}"="incaged"



    »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
    "AppInit_DLLs"=""


    »»»»»»»»»»»»»»»»»»»»»»»» Winlogon
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
    "Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"
    "System"=""


    »»»»»»»»»»»»»»»»»»»»»»»» Rustock



    »»»»»»»»»»»»»»»»»»»»»»»» DNS

    Description: Intel(R) PRO/100 VE Network Connection
    DNS Server Search Order: 192.162.0.101

    Description: Carte réseau virtuelle FreeBox USB
    DNS Server Search Order: 212.27.39.2
    DNS Server Search Order: 212.27.39.134

    Description: Carte réseau virtuelle FreeBox USB
    DNS Server Search Order: 212.27.54.252
    DNS Server Search Order: 212.27.53.252

    HKLM\SYSTEM\CCS\Services\Tcpip\..\{78001319-F9E0-4A41-834A-4FF0A8FE7B7F}: DhcpNameServer=212.27.39.2 212.27.39.134
    HKLM\SYSTEM\CCS\Services\Tcpip\..\{D54172BF-22F5-4839-BF9E-B43E9C9D0100}: DhcpNameServer=212.27.54.252 212.27.53.252
    HKLM\SYSTEM\CCS\Services\Tcpip\..\{D8BC072F-A077-4C4F-AC90-88EB09415E48}: NameServer=192.162.0.101
    HKLM\SYSTEM\CS1\Services\Tcpip\..\{78001319-F9E0-4A41-834A-4FF0A8FE7B7F}: DhcpNameServer=212.27.39.2 212.27.39.134
    HKLM\SYSTEM\CS1\Services\Tcpip\..\{D54172BF-22F5-4839-BF9E-B43E9C9D0100}: DhcpNameServer=212.27.54.252 212.27.53.252
    HKLM\SYSTEM\CS1\Services\Tcpip\..\{D8BC072F-A077-4C4F-AC90-88EB09415E48}: NameServer=192.162.0.101
    HKLM\SYSTEM\CS3\Services\Tcpip\..\{78001319-F9E0-4A41-834A-4FF0A8FE7B7F}: DhcpNameServer=212.27.39.2 212.27.39.134
    HKLM\SYSTEM\CS3\Services\Tcpip\..\{D54172BF-22F5-4839-BF9E-B43E9C9D0100}: DhcpNameServer=212.27.54.252 212.27.53.252
    HKLM\SYSTEM\CS3\Services\Tcpip\..\{D8BC072F-A077-4C4F-AC90-88EB09415E48}: NameServer=192.162.0.101
    HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=212.27.54.252 212.27.53.252
    HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=212.27.54.252 212.27.53.252
    HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=212.27.54.252 212.27.53.252


    »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll


    »»»»»»»»»»»»»»»»»»»»»»»» Fin

    27 Avril 2008 23:38:47

    Re,

    Redémarre en mode sans échec

    Lance SmitfraudFix.exe et choisis cette fois l'Option 2 et réponds oui à la ou les questions.
    Sauvegarde le rapport sur ton Bureau.

    Redémarre normalement.

    Poste le rapport généré par SmitfraudFix ainsi qu’un nouveau hijackthis.

    ;) 
    28 Avril 2008 00:02:38

    Merci pour votre aide un dimanche soir :) 

    SmitFraudFix v2.319

    Rapport fait à 23:48:13,14, 27/04/2008
    Executé à partir de C:\Documents and Settings\Pierre\Bureau\SmitfraudFix
    OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
    Le type du système de fichiers est NTFS
    Fix executé en mode sans echec

    »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    SrchSTS.exe by S!Ri
    Search SharedTaskScheduler's .dll

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
    "{05a91164-3c96-47d6-aa74-2c855791b2d0}"="incaged"


    »»»»»»»»»»»»»»»»»»»»»»»» Arret des processus


    »»»»»»»»»»»»»»»»»»»»»»»» hosts

    127.0.0.1 localhost

    »»»»»»»»»»»»»»»»»»»»»»»» VACFix

    VACFix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri


    »»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix

    S!Ri's WS2Fix: LSP not Found.


    »»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

    GenericRenosFix by S!Ri


    »»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés

    C:\WINDOWS\system32\ncompat.tlb supprimé
    C:\WINDOWS\system32\ot.ico supprimé
    C:\WINDOWS\system32\stdole3.tlb supprimé
    C:\WINDOWS\system32\ts.ico supprimé
    C:\WINDOWS\system32\1024\ supprimé
    C:\Program Files\eMedia Codec\ supprimé

    »»»»»»»»»»»»»»»»»»»»»»»» IEDFix

    IEDFix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri


    »»»»»»»»»»»»»»»»»»»»»»»» 404Fix

    404Fix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri


    »»»»»»»»»»»»»»»»»»»»»»»» DNS

    HKLM\SYSTEM\CCS\Services\Tcpip\..\{78001319-F9E0-4A41-834A-4FF0A8FE7B7F}: DhcpNameServer=212.27.39.2 212.27.39.134
    HKLM\SYSTEM\CCS\Services\Tcpip\..\{D54172BF-22F5-4839-BF9E-B43E9C9D0100}: DhcpNameServer=212.27.54.252 212.27.53.252
    HKLM\SYSTEM\CCS\Services\Tcpip\..\{D8BC072F-A077-4C4F-AC90-88EB09415E48}: NameServer=192.162.0.101
    HKLM\SYSTEM\CS1\Services\Tcpip\..\{78001319-F9E0-4A41-834A-4FF0A8FE7B7F}: DhcpNameServer=212.27.39.2 212.27.39.134
    HKLM\SYSTEM\CS1\Services\Tcpip\..\{D54172BF-22F5-4839-BF9E-B43E9C9D0100}: DhcpNameServer=212.27.54.252 212.27.53.252
    HKLM\SYSTEM\CS1\Services\Tcpip\..\{D8BC072F-A077-4C4F-AC90-88EB09415E48}: NameServer=192.162.0.101
    HKLM\SYSTEM\CS3\Services\Tcpip\..\{78001319-F9E0-4A41-834A-4FF0A8FE7B7F}: DhcpNameServer=212.27.39.2 212.27.39.134
    HKLM\SYSTEM\CS3\Services\Tcpip\..\{D54172BF-22F5-4839-BF9E-B43E9C9D0100}: DhcpNameServer=212.27.54.252 212.27.53.252
    HKLM\SYSTEM\CS3\Services\Tcpip\..\{D8BC072F-A077-4C4F-AC90-88EB09415E48}: NameServer=192.162.0.101
    HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=212.27.54.252 212.27.53.252
    HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=212.27.54.252 212.27.53.252
    HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=212.27.54.252 212.27.53.252


    »»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires


    »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
    "System"=""


    »»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre

    Nettoyage terminé.

    »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Après SmitFraudFix
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    SrchSTS.exe by S!Ri
    Search SharedTaskScheduler's .dll


    »»»»»»»»»»»»»»»»»»»»»»»» Fin



    rapport hijackthis:

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 00:00:24, on 28/04/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16640)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
    C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
    C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\Program Files\utilitaires\Anti-Blaxx 1.18\Anti-Blaxx.exe
    C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
    C:\Program Files\utilitaires\Winamp\winampa.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Winamp Remote\bin\OrbTray.exe
    C:\Program Files\SAGEM\SAGEM F@st 800-908\dslmon.exe
    C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\Winamp Remote\bin\Orb.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFre1.dll
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFre1.dll
    O2 - BHO: Winamp Toolbar BHO - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
    O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
    O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
    O3 - Toolbar: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFre1.dll
    O4 - HKLM\..\Run: [WinFixer 2005] C:\Program Files\WinFixer 2005\wfx5.exe
    O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
    O4 - HKLM\..\Run: [uhyzctgt] C:\WINDOWS\uhyzctgt.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
    O4 - HKLM\..\Run: [SpySpotter System Defender] C:\Program Files\SpySpotter3\Defender.exe -startup
    O4 - HKLM\..\Run: [Servicio Local] svhost.exe
    O4 - HKLM\..\Run: [SdCheckOBBH] rundll32.exe C:\WINDOWS\lfd4_tmp.#32,Ini
    O4 - HKLM\..\Run: [rybinyf] C:\WINDOWS\rybinyf.exe
    O4 - HKLM\..\Run: [Norton Antivirus AV] C:\WINDOWS\FVProtect.exe
    O4 - HKLM\..\Run: [mediamotor.exe] C:\WINDOWS\mmups.exe
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
    O4 - HKLM\..\Run: [Anti-Blaxx Manager] C:\Program Files\utilitaires\Anti-Blaxx 1.18\Anti-Blaxx.exe
    O4 - HKLM\..\Run: [ALTER DATA] c:\windows\system32\ccdew\repcale.exe c:\windows\system32\ccdew\beird.exe
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
    O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\utilitaires\Winamp\winampa.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\RunServices: [Servicio Local] svhost.exe
    O4 - HKLM\..\RunServices: [ALTER DATA] c:\windows\system32\ccdew\repcale.exe c:\windows\system32\ccdew\beird.exe
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [Orb] "C:\Program Files\Winamp Remote\bin\OrbTray.exe" /background
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\S-1-5-18\..\Run: [Start Upping] svchostings.exe (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
    O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-908\dslmon.exe
    O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Bureautique\crosoftoffice\Office10\OSA.EXE
    O8 - Extra context menu item: &Winamp Toolbar Search - C:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\BUREAU~1\CROSOF~1\Office10\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\utilitaires\WinHTTrack\WinHTTrackIEBar.dll (file missing)
    O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\utilitaires\WinHTTrack\WinHTTrackIEBar.dll (file missing)
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
    O14 - IERESET.INF: START_PAGE_URL=http://freebox.free.fr/
    O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab312...
    O16 - DPF: {2D2BEE6E-3C9A-4D58-B9EC-458EDB28D0F6} - http://cdn.drivecleaner.com/installdrivecleanerstart_fr...
    O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall...
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClie...
    O16 - DPF: {B64F4A7C-97C9-11DA-8BDE-F66BAD1E3F3A} - http://download.cdn.winsoftware.com/files/installers/ca...
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/fl...
    O17 - HKLM\System\CCS\Services\Tcpip\..\{D8BC072F-A077-4C4F-AC90-88EB09415E48}: NameServer = 192.162.0.101
    O18 - Filter hijack: text/html - (no CLSID) - (no file)
    O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
    O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
    O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

    --
    End of file - 9115 bytes



    note:
    mon fond d'écran a disparu après le redémarrage normal :( 
    28 Avril 2008 11:49:52

    Re,

    Télécharge MalwareByte's Anti-Malware sur ton Bureau.
    Installe-le en double-cliquant sur le fichier Download_mbam-setup.exe.

    Une fois l'installation et la mise à jour effectuées, redémarre en mode sans échec.
    AIDE : Redémarrer en mode sans échec

  • Exécute maintenant MalwareByte's Anti-Malware. Si cela n'est pas déjà fait, sélectionne "Exécuter un examen complet".
  • Afin de lancer la recherche, clic sur"Rechercher".
  • Une fois le scan terminé, une fenêtre s'ouvre, clic sur OK. Deux possibilités s'offrent à toi :
    -- si le programme n'a rien trouvé, appuie sur OK. Un rapport va apparaître, ferme-le.
    -- si des infections sont présentes, clic sur "Afficher les résultats" puis sur "Supprimer la sélection". Enregistre le rapport sur ton Bureau afin de le poster dans ta prochaine réponse.
    [#ff0000]REMARQUE : Si MalwareByte's Anti-Malware a besoin de redémarrer pour terminer la suppression, accepte en cliquant sur Ok.[/#f]

    AIDE : Tuto en images sur MBAM

    ;) 
    28 Avril 2008 20:24:29

    rapport mbam :
    Malwarebytes' Anti-Malware 1.11
    Version de la base de données: 692

    Type de recherche: Examen complet (A:\|C:\|E:\|F:\|)
    Eléments examinés: 256056
    Temps écoulé: 7 hour(s), 33 minute(s), 19 second(s)

    Processus mémoire infecté(s): 0
    Module(s) mémoire infecté(s): 0
    Clé(s) du Registre infectée(s): 4
    Valeur(s) du Registre infectée(s): 0
    Elément(s) de données du Registre infecté(s): 0
    Dossier(s) infecté(s): 1
    Fichier(s) infecté(s): 6

    Processus mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Module(s) mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Clé(s) du Registre infectée(s):
    HKEY_CLASSES_ROOT\Interface\{8654592e-952a-4e7c-a960-304763b35fa6} (Adware.Hotbar) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{b64f4a7c-97c9-11da-8bde-f66bad1e3f3a} (Rogue.WinAntivirus) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{2d2bee6e-3c9a-4d58-b9ec-458edb28d0f6} (Rogue.DriveCleaner) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\180ax (Adware.180Solutions) -> Quarantined and deleted successfully.

    Valeur(s) du Registre infectée(s):
    (Aucun élément nuisible détecté)

    Elément(s) de données du Registre infecté(s):
    (Aucun élément nuisible détecté)

    Dossier(s) infecté(s):
    C:\Program Files\WinAntiSpyware 2006 Scanner (Rogue.WinAntiSpyware) -> Quarantined and deleted successfully.

    Fichier(s) infecté(s):
    C:\Program Files\utilitaires\mIRC\mirc.exe (Backdoor.Bot) -> Quarantined and deleted successfully.
    C:\System Volume Information\_restore{75BE3631-BF92-4A65-B135-DA298D6CBE1F}\RP669\A0145294.dll (Adware.Hotbar) -> Quarantined and deleted successfully.
    C:\System Volume Information\_restore{75BE3631-BF92-4A65-B135-DA298D6CBE1F}\RP669\A0145297.dll (Adware.Hotbar) -> Quarantined and deleted successfully.
    C:\System Volume Information\_restore{75BE3631-BF92-4A65-B135-DA298D6CBE1F}\RP669\A0145298.dll (Adware.Hotbar) -> Quarantined and deleted successfully.
    C:\System Volume Information\_restore{75BE3631-BF92-4A65-B135-DA298D6CBE1F}\RP669\A0145299.dll (Adware.Hotbar) -> Quarantined and deleted successfully.
    C:\Program Files\WinAntiSpyware 2006 Scanner\uwasffNT.exe (Rogue.WinAntiSpyware) -> Quarantined and deleted successfully.




    en bonus un nouveau rapport hijackthis :


    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 20:21:44, on 28/04/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16640)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\Program Files\utilitaires\Anti-Blaxx 1.18\Anti-Blaxx.exe
    C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
    C:\Program Files\utilitaires\Winamp\winampa.exe
    C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
    C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Winamp Remote\bin\OrbTray.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
    C:\Program Files\SAGEM\SAGEM F@st 800-908\dslmon.exe
    C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\Program Files\Winamp Remote\bin\Orb.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFre1.dll
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFre1.dll
    O2 - BHO: Winamp Toolbar BHO - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
    O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
    O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
    O3 - Toolbar: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFre1.dll
    O4 - HKLM\..\Run: [WinFixer 2005] C:\Program Files\WinFixer 2005\wfx5.exe
    O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
    O4 - HKLM\..\Run: [uhyzctgt] C:\WINDOWS\uhyzctgt.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
    O4 - HKLM\..\Run: [SpySpotter System Defender] C:\Program Files\SpySpotter3\Defender.exe -startup
    O4 - HKLM\..\Run: [Servicio Local] svhost.exe
    O4 - HKLM\..\Run: [SdCheckOBBH] rundll32.exe C:\WINDOWS\lfd4_tmp.#32,Ini
    O4 - HKLM\..\Run: [rybinyf] C:\WINDOWS\rybinyf.exe
    O4 - HKLM\..\Run: [Norton Antivirus AV] C:\WINDOWS\FVProtect.exe
    O4 - HKLM\..\Run: [mediamotor.exe] C:\WINDOWS\mmups.exe
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
    O4 - HKLM\..\Run: [Anti-Blaxx Manager] C:\Program Files\utilitaires\Anti-Blaxx 1.18\Anti-Blaxx.exe
    O4 - HKLM\..\Run: [ALTER DATA] c:\windows\system32\ccdew\repcale.exe c:\windows\system32\ccdew\beird.exe
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
    O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\utilitaires\Winamp\winampa.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\RunServices: [Servicio Local] svhost.exe
    O4 - HKLM\..\RunServices: [ALTER DATA] c:\windows\system32\ccdew\repcale.exe c:\windows\system32\ccdew\beird.exe
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [Orb] "C:\Program Files\Winamp Remote\bin\OrbTray.exe" /background
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\S-1-5-18\..\Run: [Start Upping] svchostings.exe (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
    O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-908\dslmon.exe
    O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Bureautique\crosoftoffice\Office10\OSA.EXE
    O8 - Extra context menu item: &Winamp Toolbar Search - C:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\BUREAU~1\CROSOF~1\Office10\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\utilitaires\WinHTTrack\WinHTTrackIEBar.dll (file missing)
    O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\utilitaires\WinHTTrack\WinHTTrackIEBar.dll (file missing)
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
    O14 - IERESET.INF: START_PAGE_URL=http://freebox.free.fr/
    O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab312...
    O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall...
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClie...
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/fl...
    O17 - HKLM\System\CCS\Services\Tcpip\..\{D8BC072F-A077-4C4F-AC90-88EB09415E48}: NameServer = 192.162.0.101
    O18 - Filter hijack: text/html - (no CLSID) - (no file)
    O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
    O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
    O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

    --
    End of file - 8854 bytes
    28 Avril 2008 22:29:33

    :hello: 

    1) [~] Aller dans poste de travail/outils/option des dossiers/affichage/afficher les fichiers et dossiers cachés/Appliquer - - > OK
    [~] Aller dans poste de travail/outils/option des dossiers/affichage/décocher masquer les fichiers protégés du système d'exploitation./Appliquer - - > OK

    Tu recocheras après.


    - Poste de travail/outils/option des dossiers/affichage/décocher masquer les extensions dont le type est connu./Appliquer - - > OK

    2) Désactive toute protection résidente ( antivirus…) !
    Déconnecte-toi d’internet, ferme tous les programmes en cours et laisse combofix travailler : ne fais donc pas autre chose en même temps !


    Télécharge Combofix de sUBs
    Sauvegarde le sur ton bureau et pas ailleurs !
    Redémarre en mode sans échecs : aide ici >>>
    http://forum.telecharger.01net.com/telecharger/virus_et...
    /!\ Ne jamais redémarrer en mode sans échec via msconfig ! /!\

    Double-clic sur combofix, Il va te poser une question, réponds par la touche 1 et entrée pour valider, laisse toi guider.
    Attends que combofix ait terminé, un rapport sera créé. Poste le rapport. Il se trouve ici : C:\Combofix.txt

    3) Copie/colle un nouveau rapport HiJackThis avec.

    Bonne soirée :hello: 
    28 Avril 2008 22:55:35

    "protection résidente"?
    comment faire ? j'ai antivir et rien d'autre... je pense...
    je suis désolé, je ne suis pas très fort en informatique. Pour internet il suffit de débrancher la prise ?
    "Ne jamais redémarrer en mode sans échec via msconfig ! "
    qu'est ce qu'msconfig ?
    29 Avril 2008 09:39:19

    ComboFix 08-04-27.3 - Pierre 2008-04-29 9:20:50.1 - NTFSx86 MINIMAL
    Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.816 [GMT 2:00]
    Endroit: C:\Documents and Settings\Pierre\Bureau\ComboFix.exe

    AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!
    .

    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
    .

    C:\Documents and Settings\L93112\Application Data\SpamBlocker
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\SpamBlockerUtility.log
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\1.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\1055531.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\1383356.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\1384147.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\1386960.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\183016.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\2318660.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\2348251.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\276032.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\2884323.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\2885069.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\2896152.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\2899659.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\290977.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\3251993.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\3265332.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\3423454.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\3442551.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\3442556.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\35190.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\3730731.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\3852962.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\48657.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\720992.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\804638.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\805478.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\877979.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\ASPL1.dat
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\domains.txt
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\hstat\3534.dat
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000003674
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000013401
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000021497
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000023749
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000023775
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000024237
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000024721
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000024991
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000025023
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000025295
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000025311
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000025374
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000025447
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000025722
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000025780
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000025782
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000025802
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000026075
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000026083
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000026085
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000026235
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000026367
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000026369
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000026427
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000026567
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000026693
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000026859
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000026870
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000026952
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000026957
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000027266
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000027306
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000027537
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000027598
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000027617
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000027908
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000027936
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000028063
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000037409
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000037571
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000037593
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000037634
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000047513
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000047604
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000047757
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000048114
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000048305
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000052018
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000052293
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000052617
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000055165
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1058
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1085
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\127887
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\13562
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1369
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1424
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1521
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\17025
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\18721
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\190995
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\19650
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\20299
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\20478
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\20501
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\20517
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\20570
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\21030
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\23901
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\244601
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\25063
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\258537
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\26664
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\27503
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\30301
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\32415
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\3338
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\33697
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\33912
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\33915
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\33916
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\34123
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\37122
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\42916
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\4385
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\43907
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\44293
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\44323
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\45833
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\51233
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\52335
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\528235
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\52968
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\53933
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\540999
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\54473
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\56815
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\577975
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\578150
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\57973
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\595235
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\611476
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\61779
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\625641
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\628262
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\641647
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\66274
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\66836
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\67226
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\6725
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\683048
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\6873
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\690626
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\703600
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\704983
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\705021
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\705060
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\705124
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\705125
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\705127
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\705129
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\705133
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\705139
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\705142
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\705150
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\705153
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\705156
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\705170
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\705226
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\705395
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\705450
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\705461
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\705495
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\707408
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\708369
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\708496
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\708643
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\70907
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\710839
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\711372
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\711415
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\711772
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\716588
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\751223
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\751225
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\7518
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\7521
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\79977
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\79989
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\82292
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\83216
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\86379
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\87385
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\92573
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\94407
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\95704
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\95825
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\97499
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\97741
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\99961
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\ustat\343f.dat
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\ustat\344a.dat
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\ustat\3461.dat
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\ustat\3487.dat
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\ustat\3489.dat
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\ustat\349b.dat
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\ustat\34e5.dat
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\ustat\34f3.dat
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\ustat\34ff.dat
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\ustat\352e.dat
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\ustat\3534.dat
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\ustat\3540.dat
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\ustat\3543.dat
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\ustat\3560.dat
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\ads.cdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\btntrans.idx
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\btntrans1.dat
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\business_promo.htm
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\buttondir.txt
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\components.cdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\cursors.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_1000.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_2000.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_3000.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_bar.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_bbar1.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_logos.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_other.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_weather.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\default.cdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz1.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz10.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz11.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz12.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz13.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz14.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz15.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz16.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz17.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz18.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz19.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz2.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz20.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz3.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz4.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz5.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz6.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz7.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz8.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz9.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_categorize.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_comparison.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_em_PROFL_CA_flow_b_IEB.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_explorer-Mails.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_explorer-people.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_fastutilities.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_favorites.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_flowers.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_Games.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_greencard.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_Hide.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_hotbarcom.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_Hotmail.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_hsskin.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_jemster.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_jemsterie.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_jemsteruk.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_jobsearch.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_Mails.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_new.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_premium.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_reun.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_ringtones.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_SearchBoxTrapper.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_searchfor.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_searchgo.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_tax.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_taxes.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_weather.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_yellowpages.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\editblbuttons.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\email-def-511724-9595.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\email-t1-bg.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\hb_ie_menu.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\hotbar-premium-hotbar-premium.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\hotbar-premium.cdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\hotbar_promo.htm
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\icons2.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\ie_games_icon.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\ie_video.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\keywords.idx
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\keywords1.dat
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\layout.cdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\linkpathlegal.txt
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\progress.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\s_icons_buttons.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\sales_buttons.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\sbu_icon.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\sbuwallpaper.exe
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\sdfmodifier.xml
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\t2_bg.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\theweb.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\top7.cdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Top7_theweb.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\tsd_bg.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\weathericon.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\ads.cdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\btntrans.idx
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\btntrans1.dat
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\business_promo.htm
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\buttondir.txt
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\components.cdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\cursors.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_1000.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_2000.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_3000.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_bar.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_bbar1.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_logos.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_other.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_weather.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\default.cdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz1.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz10.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz11.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz12.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz13.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz14.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz15.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz16.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz17.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz18.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz19.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz2.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz20.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz3.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz4.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz5.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz6.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz7.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz8.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz9.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bingo.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_categorize.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_comparison.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_em_PROFL_CA_flow_b_IEB.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_explorer-Mails.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_explorer-people.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_fastutilities.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_favorites.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_flowers.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_Games.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_greencard.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_Hide.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_hotbarcom.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_Hotmail.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_hsskin.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_jemster.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_jemsterie.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_jemsteruk.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_jobsearch.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_Mails.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_new.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_premium.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_reun.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_ringtones.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_SearchBoxTrapper.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_searchfor.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_searchgo.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_tax.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_weather.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_yellowpages.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\editblbuttons.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\email-def-511724-9595.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\email-t1-bg.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\hb_ie_menu.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\hotbar-premium-hotbar-premium.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\hotbar-premium.cdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\hotbar_promo.htm
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\icons2.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\ie_games_icon.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\ie_video.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\keywords.idx
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\keywords1.dat
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\layout.cdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\linkpathlegal.txt
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\progress.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\s_icons_buttons.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\sales_buttons.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\sbu_icon.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\sbuwallpaper.exe
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\sdfmodifier.xml
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\t2_bg.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\theweb.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\top7.cdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Top7_theweb.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\tsd_bg.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\weathericon.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\ads.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\BtnTrans.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\BtnTrans1.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\business_promo.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\buttondir.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\cursors.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_1000.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_2000.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_3000.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_bar.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_bbar1.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_logos.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_other.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_weather.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\default.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\editblbuttons.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\email-t1-bg.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\hb_ie_menu.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\hotbar-premium.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\hotbar_promo.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\icons2.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\ie_games_icon.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\ie_video.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\keywords.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\keywords1.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\layout.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\linkpathlegal.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\progress.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\s_icons_buttons.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\sales_buttons.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\samplegroups2.txt
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\samplegroups2.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\sbu_icon.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\sbuwallpaper.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\sdfmodifier.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\t2_bg.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\top7.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\tsd_bg.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\weathericon.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\SpamBlockerUtility.log
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\BtnTrans.idx
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\BtnTrans.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\business_promo.htm
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\business_promo.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\buttondir.txt
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\buttondir.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\cursors.res
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\cursors.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_1000.res
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_1000.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_2000.res
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_2000.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_3000.res
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_3000.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_bar.res
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_bar.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_bbar1.res
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_bbar1.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_logos.res
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_logos.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_other.res
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_other.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_weather.res
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_weather.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\email-t1-bg.res
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\email-t1-bg.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\hotbar_promo.htm
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\hotbar_promo.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\ie_games_icon.res
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\ie_games_icon.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\ie_video.res
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\ie_video.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\keywords.idx
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\keywords.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\keywords1.dat
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\keywords1.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\layout.cdf
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\layout.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\linkpathlegal.txt
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\linkpathlegal.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\progress.res
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\progress.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\s_icons_buttons.res
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\s_icons_buttons.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\sales_buttons.res
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\sales_buttons.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\samplegroups2.txt
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\samplegroups2.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\sbu_icon.res
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\sbu_icon.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\t2_bg.res
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\t2_bg.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\tsd_bg.res
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\tsd_bg.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\weathericon.res
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\weathericon.xip
    C:\Documents and Settings\Pierre\Bureau\Installer WinAntiSpyware 2006 .lnk
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\SpamBlockerUtility.log
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\1.sdf
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\1383356.sdf
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\1387343.sdf
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\1387548.sdf
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\1387864.sdf
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\183016.sdf
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\3251993.sdf
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\819382.sdf
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\972425.sdf
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\ASPL1.dat
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\domains.txt
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\hstat\34cb.dat
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\hstat\34ed.dat
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000024721
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000025311
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000025540
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000026952
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000027974
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000028899
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000029230
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000037233
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000052565
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000052915
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\12457
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\17040
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\19650
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\22657
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\247895
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\303622
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\374830
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\4382
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\44878
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\49442
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\52968
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\628262
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\64517
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\658110
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\703600
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\705060
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\705150
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\705170
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\705226
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\705461
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\748957
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\94407
    C:\Documents and Settings\Sylvie\Ap
    29 Avril 2008 09:41:16

    Bonjour,
    et voici le rapport hijackthis
    dois-je rebrancher l'antivirus ?

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 09:39:54, on 29/04/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16640)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
    C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
    C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
    C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\Program Files\utilitaires\Anti-Blaxx 1.18\Anti-Blaxx.exe
    C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
    C:\Program Files\utilitaires\Winamp\winampa.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Winamp Remote\bin\OrbTray.exe
    C:\Program Files\SAGEM\SAGEM F@st 800-908\dslmon.exe
    C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    C:\Program Files\Winamp Remote\bin\Orb.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFre1.dll
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFre1.dll
    O2 - BHO: Winamp Toolbar BHO - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
    O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
    O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
    O3 - Toolbar: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFre1.dll
    O4 - HKLM\..\Run: [WinFixer 2005] C:\Program Files\WinFixer 2005\wfx5.exe
    O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
    O4 - HKLM\..\Run: [uhyzctgt] C:\WINDOWS\uhyzctgt.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
    O4 - HKLM\..\Run: [SpySpotter System Defender] C:\Program Files\SpySpotter3\Defender.exe -startup
    O4 - HKLM\..\Run: [Servicio Local] svhost.exe
    O4 - HKLM\..\Run: [SdCheckOBBH] rundll32.exe C:\WINDOWS\lfd4_tmp.#32,Ini
    O4 - HKLM\..\Run: [rybinyf] C:\WINDOWS\rybinyf.exe
    O4 - HKLM\..\Run: [Norton Antivirus AV] C:\WINDOWS\FVProtect.exe
    O4 - HKLM\..\Run: [mediamotor.exe] C:\WINDOWS\mmups.exe
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
    O4 - HKLM\..\Run: [Anti-Blaxx Manager] C:\Program Files\utilitaires\Anti-Blaxx 1.18\Anti-Blaxx.exe
    O4 - HKLM\..\Run: [ALTER DATA] c:\windows\system32\ccdew\repcale.exe c:\windows\system32\ccdew\beird.exe
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
    O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\utilitaires\Winamp\winampa.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\RunServices: [Servicio Local] svhost.exe
    O4 - HKLM\..\RunServices: [ALTER DATA] c:\windows\system32\ccdew\repcale.exe c:\windows\system32\ccdew\beird.exe
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [Orb] "C:\Program Files\Winamp Remote\bin\OrbTray.exe" /background
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\S-1-5-18\..\Run: [Start Upping] svchostings.exe (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
    O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-908\dslmon.exe
    O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Bureautique\crosoftoffice\Office10\OSA.EXE
    O8 - Extra context menu item: &Winamp Toolbar Search - C:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\BUREAU~1\CROSOF~1\Office10\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\utilitaires\WinHTTrack\WinHTTrackIEBar.dll (file missing)
    O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\utilitaires\WinHTTrack\WinHTTrackIEBar.dll (file missing)
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
    O14 - IERESET.INF: START_PAGE_URL=http://freebox.free.fr/
    O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab312...
    O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall...
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClie...
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/fl...
    O17 - HKLM\System\CCS\Services\Tcpip\..\{D8BC072F-A077-4C4F-AC90-88EB09415E48}: NameServer = 192.162.0.101
    O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
    O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
    O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

    --
    End of file - 9145 bytes
    29 Avril 2008 15:12:46

    :hello:  Bonjour,

    Le rapport de combofix est incomplet car il ne tient pas en un message. Poste-moi l'intégralité du rapport, en autant de messages que nécessaire.

    :D 
    29 Avril 2008 17:35:06

    je suis désolé j'avais pourtant cliqué sur "sélectionner tout" :( 

    voila le rapport:

    ComboFix 08-04-27.3 - Pierre 2008-04-29 9:20:50.1 - NTFSx86 MINIMAL
    Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.816 [GMT 2:00]
    Endroit: C:\Documents and Settings\Pierre\Bureau\ComboFix.exe

    AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!
    .

    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    29 Avril 2008 17:38:12


    C:\Documents and Settings\L93112\Application Data\SpamBlocker
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\SpamBlockerUtility.log
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\1.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\1055531.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\1383356.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\1384147.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\1386960.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\183016.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\2318660.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\2348251.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\276032.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\2884323.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\2885069.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\2896152.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\2899659.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\290977.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\3251993.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\3265332.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\3423454.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\3442551.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\3442556.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\35190.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\3730731.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\3852962.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\48657.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\720992.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\804638.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\805478.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\877979.sdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\ASPL1.dat
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\domains.txt
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\hstat\3534.dat
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000003674
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000013401
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000021497
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000023749
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000023775
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000024237
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000024721
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000024991
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000025023
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000025295
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000025311
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000025374
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000025447
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000025722
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000025780
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000025782
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000025802
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000026075
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000026083
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000026085
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000026235
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000026367
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000026369
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000026427
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000026567
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000026693
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000026859
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000026870
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000026952
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000026957
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000027266
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000027306
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000027537
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000027598
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000027617
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000027908
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000027936
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000028063
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000037409
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000037571
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000037593
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000037634
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000047513
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000047604
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000047757
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000048114
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000048305
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000052018
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000052293
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000052617
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000055165
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1058
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1085
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\127887
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\13562
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1369
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1424
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1521
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\17025
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\18721
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\190995
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\19650
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\20299
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\20478
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\20501
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\20517
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\20570
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\21030
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\23901
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\244601
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\25063
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\258537
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\26664
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\27503
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\30301
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\32415
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\3338
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\33697
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\33912
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\33915
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\33916
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\34123
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\37122
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\42916
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\4385
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\43907
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\44293
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\44323
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\45833
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\51233
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\52335
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\528235
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\52968
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\53933
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\540999
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\54473
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\56815
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\577975
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\578150
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\57973
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\595235
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\611476
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\61779
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\625641
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\628262
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\641647
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\66274
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\66836
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\67226
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\6725
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\683048
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\6873
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\690626
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\703600
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\704983
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\705021
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\705060
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\705124
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\705125
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\705127
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\705129
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\705133
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\705139
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\705142
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\705150
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\705153
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\705156
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\705170
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\705226
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\705395
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\705450
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\705461
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\705495
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\707408
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\708369
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\708496
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\708643
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\70907
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\710839
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\711372
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\711415
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\711772
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\716588
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\751223
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\751225
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\7518
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\7521
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\79977
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\79989
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\82292
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\83216
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\86379
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\87385
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\92573
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\94407
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\95704
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\95825
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\97499
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\97741
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\99961
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\ustat\343f.dat
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\ustat\344a.dat
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\ustat\3461.dat
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\ustat\3487.dat
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\ustat\3489.dat
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\ustat\349b.dat
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\ustat\34e5.dat
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\ustat\34f3.dat
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\ustat\34ff.dat
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\ustat\352e.dat
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\ustat\3534.dat
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\ustat\3540.dat
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\ustat\3543.dat
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\ustat\3560.dat
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\ads.cdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\btntrans.idx
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\btntrans1.dat
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\business_promo.htm
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\buttondir.txt
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\components.cdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\cursors.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_1000.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_2000.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_3000.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_bar.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_bbar1.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_logos.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_other.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_weather.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\default.cdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz1.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz10.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz11.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz12.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz13.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz14.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz15.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz16.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz17.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz18.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz19.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz2.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz20.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz3.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz4.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz5.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz6.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz7.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz8.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz9.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_categorize.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_comparison.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_em_PROFL_CA_flow_b_IEB.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_explorer-Mails.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_explorer-people.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_fastutilities.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_favorites.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_flowers.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_Games.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_greencard.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_Hide.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_hotbarcom.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_Hotmail.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_hsskin.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_jemster.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_jemsterie.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_jemsteruk.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_jobsearch.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_Mails.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_new.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_premium.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_reun.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_ringtones.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_SearchBoxTrapper.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_searchfor.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_searchgo.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_tax.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_taxes.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_weather.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_yellowpages.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\editblbuttons.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\email-def-511724-9595.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\email-t1-bg.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\hb_ie_menu.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\hotbar-premium-hotbar-premium.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\hotbar-premium.cdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\hotbar_promo.htm
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\icons2.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\ie_games_icon.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\ie_video.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\keywords.idx
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\keywords1.dat
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\layout.cdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\linkpathlegal.txt
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\progress.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\s_icons_buttons.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\sales_buttons.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\sbu_icon.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\sbuwallpaper.exe
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\sdfmodifier.xml
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\t2_bg.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\theweb.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\top7.cdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Top7_theweb.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\tsd_bg.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\weathericon.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\ads.cdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\btntrans.idx
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\btntrans1.dat
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\business_promo.htm
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\buttondir.txt
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\components.cdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\cursors.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_1000.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_2000.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_3000.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_bar.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_bbar1.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_logos.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_other.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_weather.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\default.cdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz1.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz10.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz11.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz12.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz13.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz14.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz15.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz16.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz17.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz18.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz19.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz2.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz20.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz3.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz4.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz5.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz6.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz7.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz8.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz9.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bingo.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_categorize.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_comparison.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_em_PROFL_CA_flow_b_IEB.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_explorer-Mails.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_explorer-people.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_fastutilities.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_favorites.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_flowers.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_Games.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_greencard.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_Hide.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_hotbarcom.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_Hotmail.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_hsskin.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_jemster.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_jemsterie.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_jemsteruk.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_jobsearch.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_Mails.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_new.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_premium.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_reun.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_ringtones.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_SearchBoxTrapper.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_searchfor.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_searchgo.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_tax.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_weather.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_yellowpages.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\editblbuttons.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\email-def-511724-9595.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\email-t1-bg.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\hb_ie_menu.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\hotbar-premium-hotbar-premium.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\hotbar-premium.cdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\hotbar_promo.htm
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\icons2.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\ie_games_icon.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\ie_video.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\keywords.idx
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\keywords1.dat
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\layout.cdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\linkpathlegal.txt
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\progress.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\s_icons_buttons.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\sales_buttons.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\sbu_icon.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\sbuwallpaper.exe
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\sdfmodifier.xml
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\t2_bg.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\theweb.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\top7.cdf
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Top7_theweb.mnu
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\tsd_bg.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\weathericon.res
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\ads.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\BtnTrans.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\BtnTrans1.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\business_promo.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\buttondir.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\cursors.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_1000.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_2000.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_3000.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_bar.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_bbar1.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_logos.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_other.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_weather.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\default.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\editblbuttons.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\email-t1-bg.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\hb_ie_menu.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\hotbar-premium.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\hotbar_promo.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\icons2.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\ie_games_icon.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\ie_video.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\keywords.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\keywords1.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\layout.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\linkpathlegal.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\progress.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\s_icons_buttons.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\sales_buttons.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\samplegroups2.txt
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\samplegroups2.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\sbu_icon.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\sbuwallpaper.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\sdfmodifier.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\t2_bg.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\top7.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\tsd_bg.xip
    C:\Documents and Settings\L93112\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\weathericon.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility
    29 Avril 2008 17:40:45

    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\SpamBlockerUtility.log
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\BtnTrans.idx
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\BtnTrans.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\business_promo.htm
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\business_promo.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\buttondir.txt
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\buttondir.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\cursors.res
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\cursors.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_1000.res
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_1000.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_2000.res
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_2000.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_3000.res
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_3000.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_bar.res
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_bar.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_bbar1.res
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_bbar1.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_logos.res
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_logos.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_other.res
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_other.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_weather.res
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_weather.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\email-t1-bg.res
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\email-t1-bg.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\hotbar_promo.htm
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\hotbar_promo.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\ie_games_icon.res
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\ie_games_icon.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\ie_video.res
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\ie_video.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\keywords.idx
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\keywords.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\keywords1.dat
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\keywords1.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\layout.cdf
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\layout.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\linkpathlegal.txt
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\linkpathlegal.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\progress.res
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\progress.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\s_icons_buttons.res
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\s_icons_buttons.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\sales_buttons.res
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\sales_buttons.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\samplegroups2.txt
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\samplegroups2.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\sbu_icon.res
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\sbu_icon.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\t2_bg.res
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\t2_bg.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\tsd_bg.res
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\tsd_bg.xip
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\weathericon.res
    C:\Documents and Settings\Louis\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\weathericon.xip
    C:\Documents and Settings\Pierre\Bureau\Installer WinAntiSpyware 2006 .lnk
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\SpamBlockerUtility.log
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\1.sdf
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\1383356.sdf
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\1387343.sdf
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\1387548.sdf
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\1387864.sdf
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\183016.sdf
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\3251993.sdf
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\819382.sdf
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\972425.sdf
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\ASPL1.dat
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\domains.txt
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\hstat\34cb.dat
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\hstat\34ed.dat
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000024721
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000025311
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000025540
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000026952
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000027974
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000028899
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000029230
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000037233
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000052565
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\1000052915
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\12457
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\17040
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\19650
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\22657
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\247895
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\303622
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\374830
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\4382
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\44878
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\49442
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\52968
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\628262
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\64517
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\658110
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\703600
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\705060
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\705150
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\705170
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\705226
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\705461
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\748957
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\TooltipXML\94407
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\ustat\34cb.dat
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\ustat\34ed.dat
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\ustat\352e.dat
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\ustat\3578.dat
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\dynamic\ustat\3693.dat
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\ads.cdf
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\btntrans.idx
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\btntrans1.dat
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\business_promo.htm
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\buttondir.txt
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\components.cdf
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\cursors.res
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_1000.res
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_2000.res
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_3000.res
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_bar.res
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_bbar1.res
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_logos.res
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_other.res
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_weather.res
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\default.cdf
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz1.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz10.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz11.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz12.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz13.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz14.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz15.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz16.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz17.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz18.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz19.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz2.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz20.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz3.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz4.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz5.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz6.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz7.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz8.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_bidz9.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_categorize.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_comparison.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_em_PROFL_CA_flow_b_IEB.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_explorer-Mails.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_explorer-people.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_fastutilities.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_favorites.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_Games.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_Hide.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_hotbarcom.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_Hotmail.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_hsskin.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_jemster.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_jemsterie.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_jemsteruk.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_jobsearch.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_Mails.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_new.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_premium.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_reun.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_ringtones.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_SearchBoxTrapper.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_searchfor.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_searchgo.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_weather.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_yellowpages.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\email-def-511724-9595.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\email-t1-bg.res
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\hb_ie_menu.res
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\hotbar-premium-hotbar-premium.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\hotbar-premium.cdf
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\hotbar_promo.htm
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\icons2.res
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\ie_games_icon.res
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\ie_video.res
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\keywords.idx
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\keywords1.dat
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\layout.cdf
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\linkpathlegal.txt
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\progress.res
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\s_icons_buttons.res
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\sales_buttons.res
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\sbu_icon.res
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\t2_bg.res
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\theweb.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\top7.cdf
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Top7_theweb.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\tsd_bg.res
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\weathericon.res
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\ads.cdf
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\btntrans.idx
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\btntrans1.dat
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\business_promo.htm
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\buttondir.txt
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\components.cdf
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\cursors.res
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_1000.res
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_2000.res
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_3000.res
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_bar.res
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_bbar1.res
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_logos.res
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_other.res
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_weather.res
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\default.cdf
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz1.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz10.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz11.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz12.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz13.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz14.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz15.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz16.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz17.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz18.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz19.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz2.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz20.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz3.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz4.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz5.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz6.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz7.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz8.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_bidz9.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_categorize.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_comparison.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_em_PROFL_CA_flow_b_IEB.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_explorer-Mails.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_explorer-people.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_fastutilities.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_favorites.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_Games.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_Hide.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_hotbarcom.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_Hotmail.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_hsskin.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_jemster.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_jemsterie.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_jemsteruk.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_jobsearch.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_Mails.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_new.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_premium.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_reun.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_ringtones.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_SearchBoxTrapper.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_searchfor.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_searchgo.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_weather.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_yellowpages.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\email-def-511724-9595.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\email-t1-bg.res
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\hb_ie_menu.res
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\hotbar-premium-hotbar-premium.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\hotbar-premium.cdf
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\hotbar_promo.htm
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\icons2.res
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\ie_games_icon.res
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\ie_video.res
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\keywords.idx
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\keywords1.dat
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\layout.cdf
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\linkpathlegal.txt
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\progress.res
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\s_icons_buttons.res
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\sales_buttons.res
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\sbu_icon.res
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\t2_bg.res
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\theweb.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\top7.cdf
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Top7_theweb.mnu
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\tsd_bg.res
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\weathericon.res
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\ads.xip
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\BtnTrans.xip
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\BtnTrans1.xip
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\business_promo.xip
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\buttondir.xip
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\cursors.xip
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_1000.xip
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_2000.xip
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_3000.xip
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_bar.xip
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_bbar1.xip
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_logos.xip
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_other.xip
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_weather.xip
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\default.xip
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\email-t1-bg.xip
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\hb_ie_menu.xip
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\hotbar-premium.xip
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\hotbar_promo.xip
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\icons2.xip
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\ie_games_icon.xip
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\ie_video.xip
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\keywords.xip
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\keywords1.xip
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\layout.xip
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\linkpathlegal.xip
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\progress.xip
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\s_icons_buttons.xip
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\sales_buttons.xip
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\samplegroups2.txt
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\samplegroups2.xip
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\sbu_icon.xip
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\t2_bg.xip
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\top7.xip
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\tsd_bg.xip
    C:\Documents and Settings\Sylvie\Application Data\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\weathericon.xip
    C:\Program Files\Fichiers communs\WinSoftware

    .
    29 Avril 2008 17:59:53

    ((((((((((((((((((((((((((((( Fichiers créés 2008-03-28 to 2008-04-29 ))))))))))))))))))))))))))))))))))))
    .

    2008-04-28 12:24 . 2008-04-28 12:24 <REP> d-------- C:\Program Files\Malwarebytes' Anti-Malware
    2008-04-28 12:24 . 2008-04-28 12:24 <REP> d-------- C:\Documents and Settings\Pierre\Application Data\Malwarebytes
    2008-04-28 12:24 . 2008-04-28 12:24 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
    2008-04-28 00:23 . 2008-04-28 00:23 <REP> d-------- C:\Program Files\CCleaner
    2008-04-27 23:27 . 2008-04-27 23:48 3,692 --a------ C:\WINDOWS\system32\tmp.reg
    2008-04-27 23:21 . 2008-04-27 23:23 <REP> d-a------ C:\MSNFix
    2008-04-27 22:23 . 2008-04-27 22:23 <REP> d-------- C:\WINDOWS\ERUNT
    2008-04-27 22:20 . 2004-11-20 20:55 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage réseau
    2008-04-27 22:20 . 2004-11-20 20:55 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage d'impression
    2008-04-27 22:20 . 2005-11-09 07:38 <REP> d--h----- C:\Documents and Settings\Administrateur\Modèles
    2008-04-27 22:20 . 2004-11-20 20:55 <REP> d-------- C:\Documents and Settings\Administrateur\Mes documents
    2008-04-27 22:20 . 2004-11-20 20:55 <REP> dr------- C:\Documents and Settings\Administrateur\Menu Démarrer
    2008-04-27 22:20 . 2004-11-20 20:55 <REP> d-------- C:\Documents and Settings\Administrateur\Favoris
    2008-04-27 22:20 . 2008-04-29 09:32 <REP> d-------- C:\Documents and Settings\Administrateur\Bureau
    2008-04-27 22:20 . 2008-04-27 22:20 <REP> d-------- C:\Documents and Settings\Administrateur
    2008-04-27 22:20 . 2008-04-29 09:20 1,024 --ah----- C:\Documents and Settings\Administrateur\NTUSER.dat.LOG
    2008-04-27 22:13 . 2008-04-27 22:53 <REP> d-------- C:\SDFix
    2008-04-27 19:58 . 2008-04-27 19:58 <REP> d-------- C:\Program Files\Trend Micro
    2008-04-27 11:57 . 2008-04-27 11:57 <REP> d-------- C:\Program Files\Fichiers communs\xing shared
    2008-04-27 09:38 . 2008-04-02 22:28 8,839,273 --------- C:\WINDOWS\CHRONO~1.CAB
    2008-04-27 09:38 . 2008-04-27 09:38 74,752 --a------ C:\WINDOWS\ST6UNST.EXE
    2008-04-27 09:38 . 2008-04-27 09:38 945 --a------ C:\WINDOWS\ST6UNST.000
    2008-04-03 09:28 . 2008-04-03 09:28 <REP> d-------- C:\Documents and Settings\L93112\batclient

    .
    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2008-04-28 09:16 --------- d-----w C:\Program Files\Winamp Remote
    2008-04-27 09:57 499,712 ----a-w C:\WINDOWS\system32\msvcp71.dll
    2008-04-27 09:57 348,160 ----a-w C:\WINDOWS\system32\msvcr71.dll
    2008-04-27 09:57 --------- d-----w C:\Program Files\Fichiers communs\Real
    2008-04-12 01:06 --------- d-----w C:\Documents and Settings\L93112\Application Data\Azureus
    2008-04-08 08:33 --------- d-----w C:\Documents and Settings\Pierre\Application Data\vlc
    2008-04-06 15:48 --------- d-----w C:\Program Files\jeux
    2008-04-02 09:38 --------- d-----w C:\Documents and Settings\Sylvie\Application Data\Apple Computer
    2008-03-28 18:20 --------- d-----w C:\Documents and Settings\Pierre\Application Data\Apple Computer
    2008-03-28 18:18 --------- d-----w C:\Program Files\Safari
    2008-03-20 16:28 --------- d-----w C:\Program Files\Freecorder
    2008-03-20 08:09 1,845,376 ----a-w C:\WINDOWS\system32\win32k.sys
    2008-03-19 19:27 --------- d-----w C:\Program Files\Freecorder Toolbar
    2008-03-14 18:15 --------- d-----w C:\Program Files\iTunes
    2008-03-14 18:15 --------- d-----w C:\Program Files\iPod
    2008-03-14 18:14 --------- d-----w C:\Program Files\QuickTime
    2008-03-11 16:37 --------- d-----w C:\Documents and Settings\Pierre\Application Data\Xfire
    2008-03-11 16:37 --------- d-----w C:\Documents and Settings\All Users\Application Data\Outspark
    2008-03-08 07:31 --------- d-----w C:\Program Files\Java
    2008-03-04 02:01 --------- d-----w C:\Program Files\Microsoft CAPICOM 2.1.0.2
    2008-03-02 19:13 --------- d-----w C:\Program Files\Windows Live
    2008-03-02 19:11 --------- dcsh--w C:\Program Files\Fichiers communs\WindowsLiveInstaller
    2008-03-02 19:10 --------- d-----w C:\Documents and Settings\All Users\Application Data\WLInstaller
    2008-03-01 12:58 826,368 ----a-w C:\WINDOWS\system32\wininet.dll
    2008-02-20 06:51 282,624 ----a-w C:\WINDOWS\system32\gdi32.dll
    2008-02-20 05:35 45,568 ----a-w C:\WINDOWS\system32\dnsrslvr.dll
    2008-02-03 21:34 0 ----a-r C:\logwmemory.bin
    2007-09-13 18:52 28,848 ----a-w C:\Documents and Settings\Pierre\Application Data\GDIPFONTCACHEV1.DAT
    2007-06-10 19:18 28,848 ----a-w C:\Documents and Settings\Sylvie\Application Data\GDIPFONTCACHEV1.DAT
    2007-04-21 12:03 25,040 ----a-w C:\Documents and Settings\L93112\Application Data\GDIPFONTCACHEV1.DAT
    2006-12-05 17:53 1 ----a-w C:\Documents and Settings\Pierre\SI.bin
    2006-05-08 07:39 252 ----a-w C:\Program Files\Fichiers communs\vfp8rerr.log
    2006-02-12 08:27 4 ----a-w C:\Documents and Settings\L93112\lock.dat
    2006-02-01 18:49 4 ----a-w C:\Documents and Settings\Pierre\lock.dat
    2006-01-31 19:17 4 ----a-w C:\Documents and Settings\Sylvie\lock.dat
    2004-11-23 20:26 316 ----a-w C:\Documents and Settings\L93112\dddf.exe
    2003-09-25 21:24 1,187,840 ----a-w C:\Program Files\Fichiers communs\vfp8rfra.dll
    2003-09-25 18:36 4,300,800 ----a-w C:\Program Files\Fichiers communs\vfp8r.dll
    2003-09-25 17:47 1,150,976 ----a-w C:\Program Files\Fichiers communs\VFP8RENU.DLL
    2001-09-06 04:00 1,700,352 ----a-w C:\Program Files\Fichiers communs\gdiplus.dll
    2006-05-29 14:40 7,296,000 ----a-w C:\Program Files\mozilla firefox\plugins\libvlc.dll
    .

    ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    REGEDIT4
    *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{1392b8d2-5c05-419f-a8f6-b9f15a596612}]
    2008-03-20 18:29 1470488 --a------ C:\Program Files\Freecorder\tbFre1.dll

    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{25CEE8EC-5730-41bc-8B58-22DDC8AB8C20}]
    2007-10-04 22:06 1135968 --a------ C:\Program Files\Winamp Toolbar\winamptb.dll

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
    "{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}"= "C:\Program Files\Winamp Toolbar\winamptb.dll" [2007-10-04 22:06 1135968]
    "{1392B8D2-5C05-419F-A8F6-B9F15A596612}"= "C:\Program Files\Freecorder\tbFre1.dll" [2008-03-20 18:29 1470488]

    [HKEY_CLASSES_ROOT\clsid\{ebf2ba02-9094-4c5a-858b-bb198f3d8de2}]
    [HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand.1]
    [HKEY_CLASSES_ROOT\TypeLib\{538CD77C-BFDD-49b0-9562-77419CAB89D1}]
    [HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand]

    [HKEY_CLASSES_ROOT\clsid\{1392b8d2-5c05-419f-a8f6-b9f15a596612}]

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
    "{1392B8D2-5C05-419F-A8F6-B9F15A596612}"= C:\Program Files\Freecorder\tbFre1.dll [2008-03-20 18:29 1470488]

    [HKEY_CLASSES_ROOT\clsid\{1392b8d2-5c05-419f-a8f6-b9f15a596612}]

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-20 01:09 15360]
    "Orb"="C:\Program Files\Winamp Remote\bin\OrbTray.exe" [2008-01-07 22:02 495616]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "WinFixer 2005"="C:\Program Files\WinFixer 2005\wfx5.exe" [ ]
    "UpdReg"="C:\WINDOWS\UpdReg.EXE" [2000-05-11 02:00 90112]
    "uhyzctgt"="C:\WINDOWS\uhyzctgt.exe" [ ]
    "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 05:25 144784]
    "SpySpotter System Defender"="C:\Program Files\SpySpotter3\Defender.exe" [ ]
    "Servicio Local"="svhost.exe" []
    "SdCheckOBBH"="C:\WINDOWS\lfd4_tmp.#32" [2005-04-01 19:59 2634]
    "rybinyf"="C:\WINDOWS\rybinyf.exe" [ ]
    "Norton Antivirus AV"="C:\WINDOWS\FVProtect.exe" [ ]
    "mediamotor.exe"="C:\WINDOWS\mmups.exe" [ ]
    "ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2003-02-20 22:00 315392]
    "ATICCC"="C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" [2006-01-02 17:41 45056]
    "Anti-Blaxx Manager"="C:\Program Files\utilitaires\Anti-Blaxx 1.18\Anti-Blaxx.exe" [2005-10-26 17:35 225280]
    "ALTER DATA"="c:\windows\system32\ccdew\repcale.exe" [ ]
    "AfterSkSecretary"="" []
    "avgnt"="C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" [2008-04-17 13:25 262401]
    "WinampAgent"="C:\Program Files\utilitaires\Winamp\winampa.exe" [2008-01-16 00:54 37376]
    "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2008-02-01 00:13 385024]
    "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-02-19 14:10 267048]
    "TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2008-04-27 11:57 185896]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices]
    "Servicio Local"="svhost.exe" []
    "ALTER DATA"="c:\windows\system32\ccdew\repcale.exe" [ ]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
    "CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2004-08-20 01:09 15360]
    "Windows Compliant"="ncbbpj.exe" []
    "Servicio Local"="svhost.exe" []
    "Start Upping"="svchostings.exe" []

    C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
    DSLMON.lnk - C:\Program Files\SAGEM\SAGEM F@st 800-908\dslmon.exe [2004-11-23 20:37:02 962663]
    Lancement rapide d'Adobe Reader.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-09-23 23:05:26 29696]
    Microsoft Office.lnk - C:\Program Files\Bureautique\crosoftoffice\Office10\OSA.EXE [2001-02-13 10:01:04 83360]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
    "AllowLegacyWebView"= 1 (0x1)
    "AllowUnhashedWebView"= 1 (0x1)

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe"=
    "C:\\WINDOWS\\system32\\javaw.exe"=
    "C:\\Program Files\\utilitaires\\Phone\\Skype.exe"=
    "C:\\Program Files\\jeux\\Freeciv-1.14.0\\civserver.exe"=
    "C:\\Program Files\\utilitaires\\Maple 9.5\\bin.win\\mserver.exe"=
    "C:\\Program Files\\utilitaires\\Maple 9.5\\jre\\bin\\java.exe"=
    "C:\\WINDOWS\\system32\\dpnsvr.exe"=
    "C:\\Program Files\\JVTorrent\\btdownloadgui.exe"=
    "C:\\Program Files\\utilitaires\\xchat\\xchat.exe"=
    "C:\\Program Files\\Real\\RealPlayer\\realplay.exe"=
    "C:\\torrent\\xevil\\xevil.exe"=
    "C:\\Program Files\\Utilitaires poste\\Nouveau dossier\\firefox.exe"=
    "C:\\Program Files\\Windows Media Player\\wmplayer.exe"=
    "C:\\Program Files\\jeux\\CrackAttack\\bin\\crackattack.exe"=
    "C:\\Program Files\\Crack-Attack\\bin\\crack-attack.exe"=
    "C:\\Program Files\\jeux\\Atari\\Neverwinter Nights 2\\nwn2main.exe"=
    "C:\\Program Files\\jeux\\Atari\\Neverwinter Nights 2\\nwn2main_amdxp.exe"=
    "C:\\Program Files\\jeux\\Atari\\Neverwinter Nights 2\\nwupdate.exe"=
    "C:\\Program Files\\jeux\\Atari\\Neverwinter Nights 2\\nwn2server.exe"=
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
    "C:\\Program Files\\utilitaires\\Freeplayer\\vlc\\vlc.exe"=
    "C:\\Program Files\\utilitaires\\VideoLAN\\VLC\\vlc.exe"=
    "C:\\Program Files\\Mozilla Firefox\\firefox.exe"=
    "C:\\Program Files\\Winamp Remote\\bin\\Orb.exe"=
    "C:\\Program Files\\Winamp Remote\\bin\\OrbTray.exe"=
    "C:\\Program Files\\Winamp Remote\\bin\\OrbStreamerClient.exe"=
    "C:\\Program Files\\jeux\\Soldat\\Soldat.exe"=
    "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
    "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
    "C:\\Program Files\\iTunes\\iTunes.exe"=

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
    "1723:TCP"= 1723:TCP:@xpsp2res.dll,-22015
    "1701:UDP"= 1701:UDP:@xpsp2res.dll,-22016
    "500:UDP"= 500:UDP:@xpsp2res.dll,-22017

    S3 adiusbae;USB ADSL LAN Adapter;C:\WINDOWS\system32\DRIVERS\adiusbae.sys [2003-09-29 14:46]
    S3 fbxusb;Carte réseau virtuelle FreeBox USB;C:\WINDOWS\system32\DRIVERS\fbxusb32.sys [2004-10-20 17:23]
    S3 MBAMCatchMe;MBAMCatchMe;C:\Program Files\Malwarebytes' Anti-Malware\catchme.sys [2008-04-07 20:17]
    S3 XDva015;XDva015;C:\WINDOWS\system32\XDva015.sys []
    S3 XDva098;XDva098;C:\WINDOWS\system32\XDva098.sys []

    .
    Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
    "2008-04-25 16:46:18 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
    - C:\Program Files\Apple Software Update\SoftwareUpdate.exe
    "2005-02-01 10:40:00 C:\WINDOWS\Tasks\Azureus.job"
    - C:\Program Files\utilitaires\Azureus\Azureus.exe
    .
    **************************************************************************

    catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-04-29 09:32:14
    Windows 5.1.2600 Service Pack 2 NTFS

    Balayage processus cachés ...

    Balayage caché autostart entries ...

    Balayage des fichiers cachés ...

    Scan terminé avec succès
    Les fichiers cachés: 30

    **************************************************************************
    .
    Temps d'accomplissement: 2008-04-29 9:34:14
    ComboFix-quarantined-files.txt 2008-04-29 07:33:56

    Pre-Run: 9,578,004,480 octets libres
    Post-Run: 13,269,336,064 octets libres

    951 --- E O F --- 2008-04-11 07:08:08

    voila :) 
    29 Avril 2008 19:50:57

    Re,

    Rends toi sur ce lien : Virus Total
  • Clique sur Parcourir
  • Rends toi jusque sur ce fichier si tu le trouves :

    C:\Documents and Settings\L93112\dddf.exe
    C:\WINDOWS\CHRONO~1.CAB

  • Clique sur Envoyer le fichier et laisse travailler tant que "Situation actuelle : en cours d'analyse" est affiché.
  • Il est possible que le fichier soit mis en file d'attente en raison d'un grand nombre de demandes d'analyses. En ce cas, il te faudra patienter sans actualiser la page.
  • Lorsque l'analyse est terminée ("Situation actuelle: terminé"), clique sur Formaté
  • Une nouvelle fenêtre de ton navigateur va apparaître
  • Clique alors sur cette image :
  • Fais un clic droit sur la page, et choisis Sélectionner tout, puis copier
  • Enfin colle le résultat dans ta prochaine réponse.
    Note : Peu importe le résultat, il est important de me communiquer le résultat de toute l'analyse.
    Il est possible que tes outils de sécurité réagissent à l'envoi du fichier, en ce cas il te faudra ignorer les alertes.

    ;) 
    29 Avril 2008 20:46:02

    re,
    premier fichier:

    Fichier dddf.exe reçu le 2008.04.29 20:27:44 (CET)
    Antivirus Version Dernière mise à jour Résultat
    AhnLab-V3 2008.4.30.0 2008.04.29 -
    AntiVir 7.8.0.10 2008.04.29 -
    Authentium 4.93.8 2008.04.27 -
    Avast 4.8.1169.0 2008.04.29 -
    AVG 7.5.0.516 2008.04.29 -
    BitDefender 7.2 2008.04.29 -
    CAT-QuickHeal 9.50 2008.04.29 -
    ClamAV 0.92.1 2008.04.29 -
    DrWeb 4.44.0.09170 2008.04.29 -
    eSafe 7.0.15.0 2008.04.28 -
    eTrust-Vet 31.3.5744 2008.04.29 -
    Ewido 4.0 2008.04.29 -
    F-Prot 4.4.2.54 2008.04.28 -
    F-Secure 6.70.13260.0 2008.04.29 -
    FileAdvisor 1 2008.04.29 -
    Fortinet 3.14.0.0 2008.04.29 -
    Ikarus T3.1.1.26 2008.04.29 -
    Kaspersky 7.0.0.125 2008.04.29 -
    McAfee 5284 2008.04.29 -
    Microsoft 1.3408 2008.04.22 -
    NOD32v2 3064 2008.04.29 -
    Norman 5.80.02 2008.04.29 -
    Panda 9.0.0.4 2008.04.29 -
    Rising 20.42.12.00 2008.04.29 -
    Sophos 4.28.0 2008.04.29 -
    Sunbelt 3.0.1056.0 2008.04.17 -
    Symantec 10 2008.04.29 -
    TheHacker 6.2.92.297 2008.04.29 -
    VBA32 3.12.6.5 2008.04.29 -
    VirusBuster 4.3.26:9 2008.04.29 -
    Webwasher-Gateway 6.6.2 2008.04.29 -
    Information additionnelle
    File size: 316 bytes
    MD5...: 91ad719a60ec9851e88e95d6ad9e291a
    SHA1..: 2f831158307083d62b7a00e7841478c9abfd69b6
    SHA256: 403be253b22eb778ac30c7c36dc4dc583e31b2b1f37e9dcff55081120077bc01
    SHA512: af4a2d839bc01c539aea61f9845122f2765c49f6aa6831411a239f3a3ae44350<br>27bd8473a17428855daf5455f70feed85f62529f992a339238f18caa038e44b5
    PEiD..: -
    PEInfo: -

    Antivirus Version Dernière mise à jour Résultat
    AhnLab-V3 2008.4.30.0 2008.04.29 -
    AntiVir 7.8.0.10 2008.04.29 -
    Authentium 4.93.8 2008.04.27 -
    Avast 4.8.1169.0 2008.04.29 -
    AVG 7.5.0.516 2008.04.29 -
    BitDefender 7.2 2008.04.29 -
    CAT-QuickHeal 9.50 2008.04.29 -
    ClamAV 0.92.1 2008.04.29 -
    DrWeb 4.44.0.09170 2008.04.29 -
    eSafe 7.0.15.0 2008.04.28 -
    eTrust-Vet 31.3.5744 2008.04.29 -
    Ewido 4.0 2008.04.29 -
    F-Prot 4.4.2.54 2008.04.28 -
    F-Secure 6.70.13260.0 2008.04.29 -
    FileAdvisor 1 2008.04.29 -
    Fortinet 3.14.0.0 2008.04.29 -
    Ikarus T3.1.1.26 2008.04.29 -
    Kaspersky 7.0.0.125 2008.04.29 -
    McAfee 5284 2008.04.29 -
    Microsoft 1.3408 2008.04.22 -
    NOD32v2 3064 2008.04.29 -
    Norman 5.80.02 2008.04.29 -
    Panda 9.0.0.4 2008.04.29 -
    Rising 20.42.12.00 2008.04.29 -
    Sophos 4.28.0 2008.04.29 -
    Sunbelt 3.0.1056.0 2008.04.17 -
    Symantec 10 2008.04.29 -
    TheHacker 6.2.92.297 2008.04.29 -
    VBA32 3.12.6.5 2008.04.29 -
    VirusBuster 4.3.26:9 2008.04.29 -
    Webwasher-Gateway 6.6.2 2008.04.29 -

    Information additionnelle
    File size: 316 bytes
    MD5...: 91ad719a60ec9851e88e95d6ad9e291a
    SHA1..: 2f831158307083d62b7a00e7841478c9abfd69b6
    SHA256: 403be253b22eb778ac30c7c36dc4dc583e31b2b1f37e9dcff55081120077bc01
    SHA512: af4a2d839bc01c539aea61f9845122f2765c49f6aa6831411a239f3a3ae44350<br>27bd8473a17428855daf5455f70feed85f62529f992a339238f18caa038e44b5
    PEiD..: -
    PEInfo: -
    29 Avril 2008 21:11:38


    Fichier CHRONO_1.CAB reçu le 2008.04.29 20:51:00 (CET)
    Antivirus Version Dernière mise à jour Résultat
    AhnLab-V3 2008.4.30.0 2008.04.29 -
    AntiVir 7.8.0.10 2008.04.29 -
    Authentium 4.93.8 2008.04.27 -
    Avast 4.8.1169.0 2008.04.29 -
    AVG 7.5.0.516 2008.04.29 -
    BitDefender 7.2 2008.04.29 -
    CAT-QuickHeal 9.50 2008.04.29 -
    ClamAV 0.92.1 2008.04.29 -
    DrWeb 4.44.0.09170 2008.04.29 -
    eSafe 7.0.15.0 2008.04.28 -
    eTrust-Vet 31.3.5744 2008.04.29 -
    Ewido 4.0 2008.04.29 -
    F-Prot 4.4.2.54 2008.04.28 -
    F-Secure 6.70.13260.0 2008.04.29 -
    FileAdvisor 1 2008.04.29 -
    Fortinet 3.14.0.0 2008.04.29 -
    Ikarus T3.1.1.26 2008.04.29 -
    Kaspersky 7.0.0.125 2008.04.29 -
    McAfee 5284 2008.04.29 -
    Microsoft 1.3408 2008.04.22 -
    NOD32v2 3064 2008.04.29 -
    Norman 5.80.02 2008.04.29 -
    Panda 9.0.0.4 2008.04.29 -
    Prevx1 V2 2008.04.29 -
    Rising 20.42.12.00 2008.04.29 -
    Sophos 4.28.0 2008.04.29 -
    Sunbelt 3.0.1056.0 2008.04.17 -
    Symantec 10 2008.04.29 -
    TheHacker 6.2.92.297 2008.04.29 -
    VBA32 3.12.6.5 2008.04.29 -
    VirusBuster 4.3.26:9 2008.04.29 -
    Webwasher-Gateway 6.6.2 2008.04.29 -
    Information additionnelle
    File size: 8839273 bytes
    MD5...: bc6466f94dd0bd95f8665015fc53c86e
    SHA1..: 0fe7e094e3bb3f705cc08592118e8d14470ec1f2
    SHA256: 6bebb19c08471fc891858614e9d4b5d9d13a2aadb1bc72645acc21887bb6de50
    SHA512: 74c49bf9e8315d2bdc64c5a9702a7ebb56e5b7f44b5acba6bbd67d02c34c1ded<br>59b600071430ba65233ad168bdb7faefeb1ccfcf8247cd170f2febfb0dbef53a
    PEiD..: -
    PEInfo: -

    Antivirus Version Dernière mise à jour Résultat
    AhnLab-V3 2008.4.30.0 2008.04.29 -
    AntiVir 7.8.0.10 2008.04.29 -
    Authentium 4.93.8 2008.04.27 -
    Avast 4.8.1169.0 2008.04.29 -
    AVG 7.5.0.516 2008.04.29 -
    BitDefender 7.2 2008.04.29 -
    CAT-QuickHeal 9.50 2008.04.29 -
    ClamAV 0.92.1 2008.04.29 -
    DrWeb 4.44.0.09170 2008.04.29 -
    eSafe 7.0.15.0 2008.04.28 -
    eTrust-Vet 31.3.5744 2008.04.29 -
    Ewido 4.0 2008.04.29 -
    F-Prot 4.4.2.54 2008.04.28 -
    F-Secure 6.70.13260.0 2008.04.29 -
    FileAdvisor 1 2008.04.29 -
    Fortinet 3.14.0.0 2008.04.29 -
    Ikarus T3.1.1.26 2008.04.29 -
    Kaspersky 7.0.0.125 2008.04.29 -
    McAfee 5284 2008.04.29 -
    Microsoft 1.3408 2008.04.22 -
    NOD32v2 3064 2008.04.29 -
    Norman 5.80.02 2008.04.29 -
    Panda 9.0.0.4 2008.04.29 -
    Prevx1 V2 2008.04.29 -
    Rising 20.42.12.00 2008.04.29 -
    Sophos 4.28.0 2008.04.29 -
    Sunbelt 3.0.1056.0 2008.04.17 -
    Symantec 10 2008.04.29 -
    TheHacker 6.2.92.297 2008.04.29 -
    VBA32 3.12.6.5 2008.04.29 -
    VirusBuster 4.3.26:9 2008.04.29 -
    Webwasher-Gateway 6.6.2 2008.04.29 -

    Information additionnelle
    File size: 8839273 bytes
    MD5...: bc6466f94dd0bd95f8665015fc53c86e
    SHA1..: 0fe7e094e3bb3f705cc08592118e8d14470ec1f2
    SHA256: 6bebb19c08471fc891858614e9d4b5d9d13a2aadb1bc72645acc21887bb6de50
    SHA512: 74c49bf9e8315d2bdc64c5a9702a7ebb56e5b7f44b5acba6bbd67d02c34c1ded<br>59b600071430ba65233ad168bdb7faefeb1ccfcf8247cd170f2febfb0dbef53a
    PEiD..: -
    PEInfo: -
    29 Avril 2008 22:32:03

    Re,

    Tu peux poster un nouveau rapport hijackthis ?

    ;) 
    29 Avril 2008 22:42:52

    re :)  ,
    La désinfection se déroule normalement ? :o 

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 22:39:59, on 29/04/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16640)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
    C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
    C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
    C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\Program Files\utilitaires\Anti-Blaxx 1.18\Anti-Blaxx.exe
    C:\Program Files\utilitaires\Winamp\winampa.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Winamp Remote\bin\OrbTray.exe
    C:\Program Files\SAGEM\SAGEM F@st 800-908\dslmon.exe
    C:\Program Files\Winamp Remote\bin\Orb.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\WINDOWS\system32\zstatus.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\Program Files\Windows Live\Messenger\usnsvc.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFre1.dll
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFre1.dll
    O2 - BHO: Winamp Toolbar BHO - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
    O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
    O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
    O3 - Toolbar: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFre1.dll
    O4 - HKLM\..\Run: [WinFixer 2005] C:\Program Files\WinFixer 2005\wfx5.exe
    O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
    O4 - HKLM\..\Run: [uhyzctgt] C:\WINDOWS\uhyzctgt.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
    O4 - HKLM\..\Run: [SpySpotter System Defender] C:\Program Files\SpySpotter3\Defender.exe -startup
    O4 - HKLM\..\Run: [Servicio Local] svhost.exe
    O4 - HKLM\..\Run: [SdCheckOBBH] rundll32.exe C:\WINDOWS\lfd4_tmp.#32,Ini
    O4 - HKLM\..\Run: [rybinyf] C:\WINDOWS\rybinyf.exe
    O4 - HKLM\..\Run: [Norton Antivirus AV] C:\WINDOWS\FVProtect.exe
    O4 - HKLM\..\Run: [mediamotor.exe] C:\WINDOWS\mmups.exe
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
    O4 - HKLM\..\Run: [Anti-Blaxx Manager] C:\Program Files\utilitaires\Anti-Blaxx 1.18\Anti-Blaxx.exe
    O4 - HKLM\..\Run: [ALTER DATA] c:\windows\system32\ccdew\repcale.exe c:\windows\system32\ccdew\beird.exe
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
    O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\utilitaires\Winamp\winampa.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\RunServices: [Servicio Local] svhost.exe
    O4 - HKLM\..\RunServices: [ALTER DATA] c:\windows\system32\ccdew\repcale.exe c:\windows\system32\ccdew\beird.exe
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [Orb] "C:\Program Files\Winamp Remote\bin\OrbTray.exe" /background
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\S-1-5-18\..\Run: [Start Upping] svchostings.exe (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
    O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-908\dslmon.exe
    O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Bureautique\crosoftoffice\Office10\OSA.EXE
    O8 - Extra context menu item: &Winamp Toolbar Search - C:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\BUREAU~1\CROSOF~1\Office10\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\utilitaires\WinHTTrack\WinHTTrackIEBar.dll (file missing)
    O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\utilitaires\WinHTTrack\WinHTTrackIEBar.dll (file missing)
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
    O14 - IERESET.INF: START_PAGE_URL=http://freebox.free.fr/
    O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab312...
    O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall...
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClie...
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/fl...
    O17 - HKLM\System\CCS\Services\Tcpip\..\{D8BC072F-A077-4C4F-AC90-88EB09415E48}: NameServer = 192.162.0.101
    O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
    O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
    O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

    --
    End of file - 9226 bytes


    Merci, bonne nuit.
    29 Avril 2008 22:45:06

    Re,

    Pourquoi une telle question ? :heink: 
    29 Avril 2008 22:49:03

    je ne sais pas, juste comme ça.
    C'est intéressant et compliqué, je ne comprend pas très bien ce que je fais alors je pose une petite question :) 
    29 Avril 2008 23:02:37

    Re,

    Ah oki ^^

    Tout va bien t'inquiète pas ;) 

    Je te poste une procédure soit en fin de soirée, soit demain.

    ;) 
    29 Avril 2008 23:14:18

    :hello: 

    Désactive toute protection résidente ( antivirus…) !

    Copie le texte se situant dans le cadre ci-dessous, sans le mot citation :

    Citation :
    Driver::
    XDva015
    XDva098

    Registry::
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "WinFixer 2005"=-
    "uhyzctgt"=-
    "SpySpotter System Defender"=-
    "Servicio Local"=-
    "SdCheckOBBH"=-
    "Norton Antivirus AV"=-
    "mediamotor.exe"=-
    "ALTER DATA"=-
    "AfterSkSecretary"=-
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices]
    "Servicio Local"=-
    "ALTER DATA"=-
    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
    "Windows Compliant"=-
    "Servicio Local"=-
    "Start Upping"=-

    File::
    C:\WINDOWS\lfd4_tmp.#32
    c:\windows\system32\ccdew\repcale.exe



    Ouvre le Bloc-Notes puis colle le texte copié.
    (Démarrer\Tous les programmes\Accessoires\Bloc notes.)
    Sauvegarde ce fichier sous le nom de CFScript.txt.

    Glisse maintenant le fichier ComboFix-Do.txt dans Combofix.exe comme ci-dessous :



    Cela va relancer Combofix, tape sur 1 puis valide. Après redémarrage, poste le contenu du rapport Combofix.txt accompagné d'un nouveau rapport Hijackthis.
    S'il n'y a pas de redémarrage, poste quand même les rapports.

    ;) 
    30 Avril 2008 15:39:57

    Bonjour,
    il y a eu un redémarrage.

    rapport combofix:

    ComboFix 08-04-27.3 - Pierre 2008-04-30 15:23:18.2 - NTFSx86
    Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.526 [GMT 2:00]
    Endroit: C:\Documents and Settings\Pierre\Bureau\ComboFix.exe
    Command switches used :: C:\Documents and Settings\Pierre\Bureau\CFScript.txt
    * Création d'un nouveau point de restauration

    AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!

    FILE ::
    C:\WINDOWS\lfd4_tmp.#32
    c:\windows\system32\ccdew\repcale.exe
    .

    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
    .

    C:\WINDOWS\lfd4_tmp.#32

    .
    ((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    -------\Legacy_XDVA015
    -------\Legacy_XDVA098
    -------\Service_XDva015
    -------\Service_XDva098


    ((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-03-28 to 2008-04-30 ))))))))))))))))))))))))))))))))))))
    .

    2008-04-28 12:24 . 2008-04-28 12:24 <REP> d-------- C:\Program Files\Malwarebytes' Anti-Malware
    2008-04-28 12:24 . 2008-04-28 12:24 <REP> d-------- C:\Documents and Settings\Pierre\Application Data\Malwarebytes
    2008-04-28 12:24 . 2008-04-28 12:24 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
    2008-04-28 00:23 . 2008-04-28 00:23 <REP> d-------- C:\Program Files\CCleaner
    2008-04-27 23:27 . 2008-04-27 23:48 3,692 --a------ C:\WINDOWS\system32\tmp.reg
    2008-04-27 23:21 . 2008-04-27 23:23 <REP> d-a------ C:\MSNFix
    2008-04-27 22:23 . 2008-04-27 22:23 <REP> d-------- C:\WINDOWS\ERUNT
    2008-04-27 22:20 . 2004-11-20 20:55 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage r‚seau
    2008-04-27 22:20 . 2004-11-20 20:55 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage d'impression
    2008-04-27 22:20 . 2005-11-09 07:38 <REP> d--h----- C:\Documents and Settings\Administrateur\ModŠles
    2008-04-27 22:20 . 2004-11-20 20:55 <REP> d-------- C:\Documents and Settings\Administrateur\Mes documents
    2008-04-27 22:20 . 2004-11-20 20:55 <REP> dr------- C:\Documents and Settings\Administrateur\Menu D‚marrer
    2008-04-27 22:20 . 2004-11-20 20:55 <REP> d-------- C:\Documents and Settings\Administrateur\Favoris
    2008-04-27 22:20 . 2008-04-29 09:32 <REP> d-------- C:\Documents and Settings\Administrateur\Bureau
    2008-04-27 22:20 . 2008-04-27 22:20 <REP> d-------- C:\Documents and Settings\Administrateur
    2008-04-27 22:20 . 2008-04-30 09:36 1,024 --ah----- C:\Documents and Settings\Administrateur\NTUSER.dat.LOG
    2008-04-27 22:13 . 2008-04-27 22:53 <REP> d-------- C:\SDFix
    2008-04-27 19:58 . 2008-04-27 19:58 <REP> d-------- C:\Program Files\Trend Micro
    2008-04-27 11:57 . 2008-04-27 11:57 <REP> d-------- C:\Program Files\Fichiers communs\xing shared
    2008-04-27 09:38 . 2008-04-02 22:28 8,839,273 --------- C:\WINDOWS\CHRONO~1.CAB
    2008-04-27 09:38 . 2008-04-27 09:38 74,752 --a------ C:\WINDOWS\ST6UNST.EXE
    2008-04-27 09:38 . 2008-04-27 09:38 945 --a------ C:\WINDOWS\ST6UNST.000
    2008-04-03 09:28 . 2008-04-03 09:28 <REP> d-------- C:\Documents and Settings\L93112\batclient
    2008-03-28 20:18 . 2008-03-28 20:18 <REP> d-------- C:\Program Files\Safari
    2008-03-19 21:28 . 2008-03-20 18:28 <REP> d-------- C:\Program Files\Freecorder
    2008-03-19 21:27 . 2008-03-19 21:27 <REP> d-------- C:\WINDOWS\Freecorder Toolbar
    2008-03-19 21:27 . 2008-03-19 21:27 <REP> d-------- C:\Program Files\Freecorder Toolbar
    2008-03-14 20:16 . 2008-04-30 15:13 54,156 --ah----- C:\WINDOWS\QTFont.qfn
    2008-03-14 20:16 . 2008-03-14 20:16 1,409 --a------ C:\WINDOWS\QTFont.for
    2008-03-14 20:15 . 2008-03-14 20:15 <REP> d-------- C:\Program Files\iTunes
    2008-03-14 20:15 . 2008-03-14 20:15 <REP> d-------- C:\Program Files\iPod
    2008-03-11 18:21 . 2008-03-11 18:21 <REP> d-------- C:\Documents and Settings\Pierre\Builds
    2008-03-11 18:11 . 2008-03-11 18:37 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Outspark
    2008-03-04 04:01 . 2008-03-04 04:01 <REP> d-------- C:\Program Files\Microsoft CAPICOM 2.1.0.2
    2008-03-03 15:18 . 2007-07-30 20:19 271,224 --a------ C:\WINDOWS\system32\mucltui.dll
    2008-03-03 15:18 . 2007-07-30 20:19 207,736 --a------ C:\WINDOWS\system32\muweb.dll
    2008-03-03 15:18 . 2007-07-30 20:18 30,072 --a------ C:\WINDOWS\system32\mucltui.dll.mui
    2008-03-02 21:10 . 2008-03-02 21:13 <REP> d-------- C:\Program Files\Windows Live
    2008-03-02 21:10 . 2008-03-02 21:11 <REP> d--hsc--- C:\Program Files\Fichiers communs\WindowsLiveInstaller
    2008-03-02 21:10 . 2008-03-02 21:10 <REP> d-------- C:\Documents and Settings\All Users\Application Data\WLInstaller

    .
    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2008-04-30 13:13 --------- d-----w C:\Program Files\Winamp Remote
    2008-04-27 09:57 499,712 ----a-w C:\WINDOWS\system32\msvcp71.dll
    2008-04-27 09:57 348,160 ----a-w C:\WINDOWS\system32\msvcr71.dll
    2008-04-27 09:57 --------- d-----w C:\Program Files\Fichiers communs\Real
    2008-04-12 01:06 --------- d-----w C:\Documents and Settings\L93112\Application Data\Azureus
    2008-04-08 08:33 --------- d-----w C:\Documents and Settings\Pierre\Application Data\vlc
    2008-04-06 15:48 --------- d-----w C:\Program Files\jeux
    2008-04-02 09:38 --------- d-----w C:\Documents and Settings\Sylvie\Application Data\Apple Computer
    2008-03-28 18:20 --------- d-----w C:\Documents and Settings\Pierre\Application Data\Apple Computer
    2008-03-20 08:09 1,845,376 ----a-w C:\WINDOWS\system32\win32k.sys
    2008-03-14 18:14 --------- d-----w C:\Program Files\QuickTime
    2008-03-11 16:37 --------- d-----w C:\Documents and Settings\Pierre\Application Data\Xfire
    2008-03-08 07:31 --------- d-----w C:\Program Files\Java
    2008-03-01 12:58 826,368 ----a-w C:\WINDOWS\system32\wininet.dll
    2008-02-20 06:51 282,624 ----a-w C:\WINDOWS\system32\gdi32.dll
    2008-02-20 05:35 45,568 ----a-w C:\WINDOWS\system32\dnsrslvr.dll
    2008-02-03 21:34 0 ----a-r C:\logwmemory.bin
    2008-01-18 22:35 1,386,496 ----a-w C:\WINDOWS\system32\msvbvm60.dll
    2007-09-13 18:52 28,848 ----a-w C:\Documents and Settings\Pierre\Application Data\GDIPFONTCACHEV1.DAT
    2007-06-10 19:18 28,848 ----a-w C:\Documents and Settings\Sylvie\Application Data\GDIPFONTCACHEV1.DAT
    2007-04-21 12:03 25,040 ----a-w C:\Documents and Settings\L93112\Application Data\GDIPFONTCACHEV1.DAT
    2006-12-05 17:53 1 ----a-w C:\Documents and Settings\Pierre\SI.bin
    2006-05-08 07:39 252 ----a-w C:\Program Files\Fichiers communs\vfp8rerr.log
    2006-02-12 08:27 4 ----a-w C:\Documents and Settings\L93112\lock.dat
    2006-02-01 18:49 4 ----a-w C:\Documents and Settings\Pierre\lock.dat
    2006-01-31 19:17 4 ----a-w C:\Documents and Settings\Sylvie\lock.dat
    2004-11-23 20:26 316 ----a-w C:\Documents and Settings\L93112\dddf.exe
    2003-09-25 21:24 1,187,840 ----a-w C:\Program Files\Fichiers communs\vfp8rfra.dll
    2003-09-25 18:36 4,300,800 ----a-w C:\Program Files\Fichiers communs\vfp8r.dll
    2003-09-25 17:47 1,150,976 ----a-w C:\Program Files\Fichiers communs\VFP8RENU.DLL
    2001-09-06 04:00 1,700,352 ----a-w C:\Program Files\Fichiers communs\gdiplus.dll
    2006-05-29 14:40 7,296,000 ----a-w C:\Program Files\mozilla firefox\plugins\libvlc.dll
    .

    ((((((((((((((((((((((((((((( snapshot@2008-04-29_ 9.33.39,53 )))))))))))))))))))))))))))))))))))))))))
    .
    - 2008-04-29 07:18:28 2,048 --s-a-w C:\WINDOWS\bootstat.dat
    + 2008-04-30 13:29:19 2,048 --s-a-w C:\WINDOWS\bootstat.dat
    + 2005-10-20 18:02:28 163,328 ----a-w C:\WINDOWS\erdnt\subs\ERDNT.EXE
    .
    ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    REGEDIT4
    *Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{1392b8d2-5c05-419f-a8f6-b9f15a596612}]
    2008-03-20 18:29 1470488 --a------ C:\Program Files\Freecorder\tbFre1.dll

    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{25CEE8EC-5730-41bc-8B58-22DDC8AB8C20}]
    2007-10-04 22:06 1135968 --a------ C:\Program Files\Winamp Toolbar\winamptb.dll

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
    "{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}"= "C:\Program Files\Winamp Toolbar\winamptb.dll" [2007-10-04 22:06 1135968]
    "{1392B8D2-5C05-419F-A8F6-B9F15A596612}"= "C:\Program Files\Freecorder\tbFre1.dll" [2008-03-20 18:29 1470488]

    [HKEY_CLASSES_ROOT\clsid\{ebf2ba02-9094-4c5a-858b-bb198f3d8de2}]
    [HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand.1]
    [HKEY_CLASSES_ROOT\TypeLib\{538CD77C-BFDD-49b0-9562-77419CAB89D1}]
    [HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand]

    [HKEY_CLASSES_ROOT\clsid\{1392b8d2-5c05-419f-a8f6-b9f15a596612}]

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
    "{1392B8D2-5C05-419F-A8F6-B9F15A596612}"= C:\Program Files\Freecorder\tbFre1.dll [2008-03-20 18:29 1470488]

    [HKEY_CLASSES_ROOT\clsid\{1392b8d2-5c05-419f-a8f6-b9f15a596612}]

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-20 01:09 15360]
    "Orb"="C:\Program Files\Winamp Remote\bin\OrbTray.exe" [2008-01-07 22:02 495616]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "UpdReg"="C:\WINDOWS\UpdReg.EXE" [2000-05-11 02:00 90112]
    "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 05:25 144784]
    "rybinyf"="C:\WINDOWS\rybinyf.exe" [ ]
    "ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2003-02-20 22:00 315392]
    "ATICCC"="C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" [2006-01-02 17:41 45056]
    "Anti-Blaxx Manager"="C:\Program Files\utilitaires\Anti-Blaxx 1.18\Anti-Blaxx.exe" [2005-10-26 17:35 225280]
    "avgnt"="C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" [2008-04-17 13:25 262401]
    "WinampAgent"="C:\Program Files\utilitaires\Winamp\winampa.exe" [2008-01-16 00:54 37376]
    "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2008-02-01 00:13 385024]
    "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-02-19 14:10 267048]
    "TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2008-04-27 11:57 185896]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
    "CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2004-08-20 01:09 15360]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
    "AllowLegacyWebView"= 1 (0x1)
    "AllowUnhashedWebView"= 1 (0x1)

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe"=
    "C:\\WINDOWS\\system32\\javaw.exe"=
    "C:\\Program Files\\utilitaires\\Phone\\Skype.exe"=
    "C:\\Program Files\\jeux\\Freeciv-1.14.0\\civserver.exe"=
    "C:\\Program Files\\utilitaires\\Maple 9.5\\bin.win\\mserver.exe"=
    "C:\\Program Files\\utilitaires\\Maple 9.5\\jre\\bin\\java.exe"=
    "C:\\WINDOWS\\system32\\dpnsvr.exe"=
    "C:\\Program Files\\JVTorrent\\btdownloadgui.exe"=
    "C:\\Program Files\\utilitaires\\xchat\\xchat.exe"=
    "C:\\Program Files\\Real\\RealPlayer\\realplay.exe"=
    "C:\\torrent\\xevil\\xevil.exe"=
    "C:\\Program Files\\Utilitaires poste\\Nouveau dossier\\firefox.exe"=
    "C:\\Program Files\\Windows Media Player\\wmplayer.exe"=
    "C:\\Program Files\\jeux\\CrackAttack\\bin\\crackattack.exe"=
    "C:\\Program Files\\Crack-Attack\\bin\\crack-attack.exe"=
    "C:\\Program Files\\jeux\\Atari\\Neverwinter Nights 2\\nwn2main.exe"=
    "C:\\Program Files\\jeux\\Atari\\Neverwinter Nights 2\\nwn2main_amdxp.exe"=
    "C:\\Program Files\\jeux\\Atari\\Neverwinter Nights 2\\nwupdate.exe"=
    "C:\\Program Files\\jeux\\Atari\\Neverwinter Nights 2\\nwn2server.exe"=
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
    "C:\\Program Files\\utilitaires\\Freeplayer\\vlc\\vlc.exe"=
    "C:\\Program Files\\utilitaires\\VideoLAN\\VLC\\vlc.exe"=
    "C:\\Program Files\\Mozilla Firefox\\firefox.exe"=
    "C:\\Program Files\\Winamp Remote\\bin\\Orb.exe"=
    "C:\\Program Files\\Winamp Remote\\bin\\OrbTray.exe"=
    "C:\\Program Files\\Winamp Remote\\bin\\OrbStreamerClient.exe"=
    "C:\\Program Files\\jeux\\Soldat\\Soldat.exe"=
    "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
    "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
    "C:\\Program Files\\iTunes\\iTunes.exe"=

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
    "1723:TCP"= 1723:TCP:@xpsp2res.dll,-22015
    "1701:UDP"= 1701:UDP:@xpsp2res.dll,-22016
    "500:UDP"= 500:UDP:@xpsp2res.dll,-22017

    R3 fbxusb;Carte réseau virtuelle FreeBox USB;C:\WINDOWS\system32\DRIVERS\fbxusb32.sys [2004-10-20 17:23]
    S3 adiusbae;USB ADSL LAN Adapter;C:\WINDOWS\system32\DRIVERS\adiusbae.sys [2003-09-29 14:46]
    S3 MBAMCatchMe;MBAMCatchMe;C:\Program Files\Malwarebytes' Anti-Malware\catchme.sys [2008-04-07 20:17]

    .
    Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es'
    "2008-04-25 16:46:18 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
    - C:\Program Files\Apple Software Update\SoftwareUpdate.exe
    "2005-02-01 10:40:00 C:\WINDOWS\Tasks\Azureus.job"
    - C:\Program Files\utilitaires\Azureus\Azureus.exe
    .
    **************************************************************************

    catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-04-30 15:29:41
    Windows 5.1.2600 Service Pack 2 NTFS

    Balayage processus cach‚s ...

    Balayage cach‚ autostart entries ...

    Balayage des fichiers cach‚s ...

    Scan termin‚ avec succŠs
    Les fichiers cach‚s: 30

    **************************************************************************
    .
    ------------------------ Other Running Processes ------------------------
    .
    C:\WINDOWS\system32\ati2evxx.exe
    C:\WINDOWS\system32\ati2evxx.exe
    C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
    C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
    C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
    C:\Program Files\SAGEM\SAGEM F@st 800-908\dslmon.exe
    C:\Program Files\Winamp Remote\bin\Orb.exe
    C:\Program Files\iPod\bin\iPodService.exe
    .
    **************************************************************************
    .
    Temps d'accomplissement: 2008-04-30 15:37:27 - machine was rebooted
    ComboFix-quarantined-files.txt 2008-04-30 13:37:23
    ComboFix2.txt 2008-04-29 07:34:15

    Pre-Run: 13,298,900,992 octets libres
    Post-Run: 13,231,415,296 octets libres

    219 --- E O F --- 2008-04-11 07:08:08
    30 Avril 2008 15:40:38

    rapport hijackthis :

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 15:40:15, on 30/04/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16640)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
    C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
    C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
    C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\Program Files\utilitaires\Anti-Blaxx 1.18\Anti-Blaxx.exe
    C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
    C:\Program Files\utilitaires\Winamp\winampa.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Winamp Remote\bin\OrbTray.exe
    C:\Program Files\SAGEM\SAGEM F@st 800-908\dslmon.exe
    C:\Program Files\Winamp Remote\bin\Orb.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\WINDOWS\explorer.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFre1.dll
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFre1.dll
    O2 - BHO: Winamp Toolbar BHO - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
    O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
    O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
    O3 - Toolbar: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFre1.dll
    O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
    O4 - HKLM\..\Run: [rybinyf] C:\WINDOWS\rybinyf.exe
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
    O4 - HKLM\..\Run: [Anti-Blaxx Manager] C:\Program Files\utilitaires\Anti-Blaxx 1.18\Anti-Blaxx.exe
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
    O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\utilitaires\Winamp\winampa.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [Orb] "C:\Program Files\Winamp Remote\bin\OrbTray.exe" /background
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
    O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-908\dslmon.exe
    O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Bureautique\crosoftoffice\Office10\OSA.EXE
    O8 - Extra context menu item: &Winamp Toolbar Search - C:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\BUREAU~1\CROSOF~1\Office10\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\utilitaires\WinHTTrack\WinHTTrackIEBar.dll (file missing)
    O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\utilitaires\WinHTTrack\WinHTTrackIEBar.dll (file missing)
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
    O14 - IERESET.INF: START_PAGE_URL=http://freebox.free.fr/
    O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab312...
    O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall...
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClie...
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/fl...
    O17 - HKLM\System\CCS\Services\Tcpip\..\{D8BC072F-A077-4C4F-AC90-88EB09415E48}: NameServer = 192.162.0.101
    O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
    O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
    O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

    --
    End of file - 8233 bytes
    30 Avril 2008 17:02:54

    Re,

    Fais un scan en linge avec BitDefender, avec internet explorer ! Sauvegarde tes musiques et photos, il arrive que BitDefender les supprime ;) 

    http://www.bitdefender.fr/
    et copie colle le résultat ici
    * En bas, à gauche de la fenêtre, clique sur BitDefender SCAN ONLINE
    * Dans la nouvelle fenêtre, clique sur I agree
    * La fenêtre change encore, clique sur Click here to scan
    * Les signatures se chargent, etc.

    Tutorial en image : http://forum.pcastuces.com/sujet.asp?f=25&s=31584

    Poste-moi le rapport en entier ;) 
    1 Mai 2008 13:30:06



    BitDefender Online Scanner







    Rapport d'analyse généré à: Thu, May 01, 2008 - 13:00:18









    Voie d'analyse: A:\;C:\;E:\;F:\;















    Statistiques

    Temps


    01:32:41

    Fichiers


    111556

    Directoires


    17895

    Secteurs de boot


    3

    Archives


    1496

    Paquets programmes


    10650







    Résultats

    Virus identifiés


    23

    Fichiers infectés


    35

    Fichiers suspects


    0

    Avertissements


    0

    Désinfectés


    0

    Fichiers effacés


    35







    Info sur les moteurs

    Définition virus


    1188565

    Version des moteurs


    AVCORE v1.0 (build 2422) (i386) (Sep 25 2007 08:26:36)

    Analyse des plugins


    16

    Archive des plugins


    42

    Unpack des plugins


    7

    E-mail plugins


    6

    Système plugins


    5







    Paramètres d'analyse

    Première action


    Désinfecté

    Seconde Action


    Supprimé

    Heuristique


    Oui

    Acceptez les avertissements


    Oui

    Extensions analysées


    exe;com;dll;ocx;scr;bin;dat;386;vxd;sys;wdm;cla;class;ovl;ole;hlp;doc;dot;xls;ppt;wbk;wiz;pot;ppa;xla;xlt;vbs;vbe;mdb;rtf;htm;hta;html;xml;xtp;php;asp;js;shs;chm;lnk;pif;prc;url;smm;pfd;msi;ini;csc;cmd;bas;

    Excludez les extensions




    Analyse d'emails


    Oui

    Analyse des Archives


    Oui

    Analyser paquets programmes


    Oui

    Analyse des fichiers


    Oui

    Analyse de boot


    Oui








    Fichier analysé


    Statut

    C:\Documents and Settings\Pierre\Bureau\BTFix\BTFixBackups\bfbbemwd.exe


    Détecté avec: Adware.Hotbar.CS

    C:\Documents and Settings\Pierre\Bureau\BTFix\BTFixBackups\bfbbemwd.exe


    Supprimé

    C:\Program Files\Utilitaires poste\Nouveau dossier\plugins\NPNd2fn.dll


    Détecté avec: Adware.Toolbar.Mywebsearch.O

    C:\Program Files\Utilitaires poste\Nouveau dossier\plugins\NPNd2fn.dll


    Supprimé

    C:\System Volume Information\_restore{75BE3631-BF92-4A65-B135-DA298D6CBE1F}\RP669\A0145281.exe


    Détecté avec: Adware.Hotbar.CS

    C:\System Volume Information\_restore{75BE3631-BF92-4A65-B135-DA298D6CBE1F}\RP669\A0145281.exe


    Supprimé

    C:\System Volume Information\_restore{75BE3631-BF92-4A65-B135-DA298D6CBE1F}\RP669\A0145284.DLL


    Détecté avec: Application.Need2find.A

    C:\System Volume Information\_restore{75BE3631-BF92-4A65-B135-DA298D6CBE1F}\RP669\A0145284.DLL


    Echec de la désinfection

    C:\System Volume Information\_restore{75BE3631-BF92-4A65-B135-DA298D6CBE1F}\RP669\A0145284.DLL


    Supprimé

    C:\System Volume Information\_restore{75BE3631-BF92-4A65-B135-DA298D6CBE1F}\RP669\A0145286.dll


    Détecté avec: Adware.Hotbar.BE

    C:\System Volume Information\_restore{75BE3631-BF92-4A65-B135-DA298D6CBE1F}\RP669\A0145286.dll


    Supprimé

    C:\System Volume Information\_restore{75BE3631-BF92-4A65-B135-DA298D6CBE1F}\RP669\A0145290.dll


    Détecté avec: Adware.Hotbar.BK

    C:\System Volume Information\_restore{75BE3631-BF92-4A65-B135-DA298D6CBE1F}\RP669\A0145290.dll


    Supprimé

    C:\System Volume Information\_restore{75BE3631-BF92-4A65-B135-DA298D6CBE1F}\RP669\A0145291.dll


    Détecté avec: Adware.Hotbar.BE

    C:\System Volume Information\_restore{75BE3631-BF92-4A65-B135-DA298D6CBE1F}\RP669\A0145291.dll


    Supprimé

    C:\System Volume Information\_restore{75BE3631-BF92-4A65-B135-DA298D6CBE1F}\RP669\A0145292.dll


    Détecté avec: Adware.Hotbar.BU

    C:\System Volume Information\_restore{75BE3631-BF92-4A65-B135-DA298D6CBE1F}\RP669\A0145292.dll


    Supprimé

    C:\System Volume Information\_restore{75BE3631-BF92-4A65-B135-DA298D6CBE1F}\RP669\A0145293.exe


    Détecté avec: Adware.Hotbar.Spamblocker.A

    C:\System Volume Information\_restore{75BE3631-BF92-4A65-B135-DA298D6CBE1F}\RP669\A0145293.exe


    Supprimé

    C:\System Volume Information\_restore{75BE3631-BF92-4A65-B135-DA298D6CBE1F}\RP669\A0145295.exe


    Détecté avec: Adware.Hotbar.CU

    C:\System Volume Information\_restore{75BE3631-BF92-4A65-B135-DA298D6CBE1F}\RP669\A0145295.exe


    Supprimé

    C:\System Volume Information\_restore{75BE3631-BF92-4A65-B135-DA298D6CBE1F}\RP669\A0145300.dll


    Détecté avec: Adware.Hotbar.M

    C:\System Volume Information\_restore{75BE3631-BF92-4A65-B135-DA298D6CBE1F}\RP669\A0145300.dll


    Supprimé

    C:\System Volume Information\_restore{75BE3631-BF92-4A65-B135-DA298D6CBE1F}\RP669\A0145301.exe


    Détecté avec: Adware.Hotbar.CS

    C:\System Volume Information\_restore{75BE3631-BF92-4A65-B135-DA298D6CBE1F}\RP669\A0145301.exe


    Supprimé

    C:\System Volume Information\_restore{75BE3631-BF92-4A65-B135-DA298D6CBE1F}\RP669\A0145302.dll


    Détecté avec: Adware.Hotbar.FS

    C:\System Volume Information\_restore{75BE3631-BF92-4A65-B135-DA298D6CBE1F}\RP669\A0145302.dll


    Supprimé

    C:\System Volume Information\_restore{75BE3631-BF92-4A65-B135-DA298D6CBE1F}\RP669\A0145303.dll


    Détecté avec: Adware.Hotbar.BU

    C:\System Volume Information\_restore{75BE3631-BF92-4A65-B135-DA298D6CBE1F}\RP669\A0145303.dll


    Supprimé

    C:\System Volume Information\_restore{75BE3631-BF92-4A65-B135-DA298D6CBE1F}\RP669\A0145304.dll


    Détecté avec: Adware.Hotbar.DZ

    C:\System Volume Information\_restore{75BE3631-BF92-4A65-B135-DA298D6CBE1F}\RP669\A0145304.dll


    Supprimé

    C:\System Volume Information\_restore{75BE3631-BF92-4A65-B135-DA298D6CBE1F}\RP669\A0145307.dll


    Détecté avec: Adware.Hotbar.BE

    C:\System Volume Information\_restore{75BE3631-BF92-4A65-B135-DA298D6CBE1F}\RP669\A0145307.dll


    Supprimé

    C:\System Volume Information\_restore{75BE3631-BF92-4A65-B135-DA298D6CBE1F}\RP669\A0145308.exe


    Infecté par: Trojan.Dloader.RE

    C:\System Volume Information\_restore{75BE3631-BF92-4A65-B135-DA298D6CBE1F}\RP669\A0145308.exe


    Supprimé

    C:\System Volume Information\_restore{75BE3631-BF92-4A65-B135-DA298D6CBE1F}\RP669\A0145309.dll


    Détecté avec: Adware.Hotbar.BI

    C:\System Volume Information\_restore{75BE3631-BF92-4A65-B135-DA298D6CBE1F}\RP669\A0145309.dll


    Supprimé

    C:\System Volume Information\_restore{75BE3631-BF92-4A65-B135-DA298D6CBE1F}\RP670\A0145758.exe


    Détecté avec: Application.MIRC.M

    C:\System Volume Information\_restore{75BE3631-BF92-4A65-B135-DA298D6CBE1F}\RP670\A0145758.exe


    Echec de la désinfection

    C:\System Volume Information\_restore{75BE3631-BF92-4A65-B135-DA298D6CBE1F}\RP670\A0145758.exe


    Supprimé

    C:\System Volume Information\_restore{75BE3631-BF92-4A65-B135-DA298D6CBE1F}\RP670\A0145759.exe


    Détecté avec: Adware.Winantispyware.C

    C:\System Volume Information\_restore{75BE3631-BF92-4A65-B135-DA298D6CBE1F}\RP670\A0145759.exe


    Supprimé

    C:\System Volume Information\_restore{75BE3631-BF92-4A65-B135-DA298D6CBE1F}\RP673\A0146045.exe


    Détecté avec: Adware.Hotbar.CS

    C:\System Volume Information\_restore{75BE3631-BF92-4A65-B135-DA298D6CBE1F}\RP673\A0146045.exe


    Supprimé

    C:\System Volume Information\_restore{75BE3631-BF92-4A65-B135-DA298D6CBE1F}\RP673\A0146046.dll


    Détecté avec: Adware.Toolbar.Mywebsearch.O

    C:\System Volume Information\_restore{75BE3631-BF92-4A65-B135-DA298D6CBE1F}\RP673\A0146046.dll


    Supprimé

    C:\WINDOWS\Bizarre\ccdew\cult.exe


    Détecté avec: Spyware.Prcview.A

    C:\WINDOWS\Bizarre\ccdew\cult.exe


    Supprimé

    C:\WINDOWS\Bizarre\ccdew\knlps.exe


    Détecté avec: Application.Prockill.Knlkillp.D

    C:\WINDOWS\Bizarre\ccdew\knlps.exe


    Echec de la désinfection

    C:\WINDOWS\Bizarre\ccdew\knlps.exe


    Supprimé

    C:\WINDOWS\Bizarre\ccdew\knlps.sys


    Détecté avec: Application.Prockill.Knlkillp.B

    C:\WINDOWS\Bizarre\ccdew\knlps.sys


    Echec de la désinfection

    C:\WINDOWS\Bizarre\ccdew\knlps.sys


    Supprimé

    C:\WINDOWS\Bizarre\ccdew\orrl.exe


    Détecté avec: Application.Sniffer.DaSniff

    C:\WINDOWS\Bizarre\ccdew\orrl.exe


    Echec de la désinfection

    C:\WINDOWS\Bizarre\ccdew\orrl.exe


    Supprimé

    C:\WINDOWS\sideb.exe


    Détecté avec: Adware.Generic.15334

    C:\WINDOWS\sideb.exe


    Supprimé

    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\HJ7XZ8N4\silent_install[1].exe


    Infecté par: Dropped:Adware.Toolbar.Elitebar.Q

    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\HJ7XZ8N4\silent_install[1].exe


    Echec de la désinfection

    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\HJ7XZ8N4\silent_install[1].exe


    Supprimé

    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\HJ7XZ8N4\silent_install[2].exe


    Infecté par: Dropped:Adware.Toolbar.Elitebar.Q

    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\HJ7XZ8N4\silent_install[2].exe


    Echec de la désinfection

    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\HJ7XZ8N4\silent_install[2].exe


    Supprimé

    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\HJ7XZ8N4\silent_install[3].exe


    Infecté par: Dropped:Adware.Toolbar.Elitebar.Q

    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\HJ7XZ8N4\silent_install[3].exe


    Echec de la désinfection

    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\HJ7XZ8N4\silent_install[3].exe


    Supprimé

    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\HJ7XZ8N4\silent_install[4].exe


    Infecté par: Dropped:Adware.Toolbar.Elitebar.Q

    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\HJ7XZ8N4\silent_install[4].exe


    Echec de la désinfection

    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\HJ7XZ8N4\silent_install[4].exe


    Supprimé

    C:\WINDOWS\system32\drivers\uwasfsd.sys


    Détecté avec: Application.Winfixer.DQ

    C:\WINDOWS\system32\drivers\uwasfsd.sys


    Echec de la désinfection

    C:\WINDOWS\system32\drivers\uwasfsd.sys


    Supprimé

    C:\WINDOWS\system32\qdbvxuoq.exe=>(NSIS o)=>lzma_nsis0017=>(NSIS o)=>zlib_nsis0002


    Infecté par: Trojan.Dloader.RE

    C:\WINDOWS\system32\qdbvxuoq.exe=>(NSIS o)=>lzma_nsis0017=>(NSIS o)=>zlib_nsis0002


    Supprimé

    C:\WINDOWS\system32\qdbvxuoq.exe=>(NSIS o)=>lzma_nsis0017=>(NSIS o)


    Echec de la mise à jour

    C:\WINDOWS\system32\qdbvxuoq.exe=>(NSIS o)=>lzma_nsis0017=>(NSIS o)=>zlib_nsis0003


    Détecté avec: Adware.Hotbar.BI

    C:\WINDOWS\system32\qdbvxuoq.exe=>(NSIS o)=>lzma_nsis0017=>(NSIS o)=>zlib_nsis0003


    Supprimé

    C:\WINDOWS\system32\qdbvxuoq.exe=>(NSIS o)=>lzma_nsis0017=>(NSIS o)


    Echec de la mise à jour

    C:\WINDOWS\unstall.exe


    Détecté avec: Adware.Mediamotor.A

    C:\WINDOWS\unstall.exe


    Supprimé





















    1 Mai 2008 14:51:39

    Re,

    Télécharge Deckard's System Scanner (DSS) (ou DSS) sur ton Bureau.
    NB : Tu dois être connecté avec des droits d'Administrateur.
  • ferme toutes les applications et fenêtres
  • double-clique sur dss.exe pour le lancer et suis les instructions ci-dessous
    Attention, il est conseillé de stopper temporairement les logiciels résidents de protection (pare-feu, antivirus, etc.)
  • s'il s'agit d'une première utilisation ou d'une nouvelle version de DSS :
  • tu devras cliquer 2 fois sur le OK des boîtes de dialogue
    Attention, si tu tardes trop, la réponse Abandon sera automatiquement validée
  • quand le traitement est terminé (clique sur OK), deux fichiers texte s'affichent :
    main.txt <- ouvert en premier plan et en plein écran
    extra.txt <- ouvert en second plan et en fenêtré (regarde la barre des taches)
    S'il s'agit d'une utilisation supplémentaire de DSS :
  • tu n'auras pas de boîte de dialogue (pas de OK)
  • quand le traitement est terminé, un fichier texte s'affiche :
    main.txt <- ouvert en premier plan et en plein écran

  • copie (Ctrl+A puis Ctrl+C) et colle (Ctrl+V) le contenu de main.txt dans ton prochain post
  • copie de même le contenu de extra.txt dans ton prochain post, si tu as ce fichier (première utilisation)
  • n'oublie pas de réactiver les protections si elles ont été stoppées.



    Ce que fait DSS :
  • crée un point de restauration dans Windows XP et Vista
  • nettoie les fichiers temporaires, DPF-Downloaded Program Files et le Cache Internet, vide la Corbeille de tous les lecteurs
  • vérifie quelques zones importantes de ton système et établit un rapport pour examen par ton conseiller en sécurité. DSS lance automatiquement HijackThis pour toi; il va aussi créer un raccourci HijackThis sur ton Bureau si tu n'as pas déjà HijackThis d'installé.

    ;) 
    1 Mai 2008 15:12:54

    main :

    Deckard's System Scanner v20071014.68
    Run by L93112 on 2008-05-01 15:09:02
    Computer is in Normal Mode.
    --------------------------------------------------------------------------------

    -- System Restore --------------------------------------------------------------

    Successfully created a Deckard's System Scanner Restore Point.


    -- Last 5 Restore Point(s) --
    81: 2008-05-01 13:09:10 UTC - RP674 - Deckard's System Scanner Restore Point
    80: 2008-04-30 13:23:02 UTC - RP673 - ComboFix created restore point
    79: 2008-04-30 07:36:43 UTC - RP672 - Point de vérification système
    78: 2008-04-29 06:28:50 UTC - RP671 - Point de vérification système
    77: 2008-04-28 06:11:06 UTC - RP670 - Point de vérification système


    -- First Restore Point --
    1: 2008-02-01 13:45:38 UTC - RP594 - Point de vérification système


    Backed up registry hives.
    Performed disk cleanup.

    System Drive C: has 12.29 GiB (less than 15%) free.


    -- HijackThis (run as L93112.exe) ----------------------------------------------

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 15:09:50, on 01/05/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16640)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
    C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
    C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\WINDOWS\system32\zstatus.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\Program Files\utilitaires\Anti-Blaxx 1.18\Anti-Blaxx.exe
    C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
    C:\Program Files\utilitaires\Winamp\winampa.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\SAGEM\SAGEM F@st 800-908\dslmon.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\Documents and Settings\L93112\Bureau\dss.exe
    C:\PROGRA~1\TRENDM~1\HIJACK~1\L93112.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFre1.dll
    O2 - BHO: Winamp Toolbar BHO - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
    O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
    O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
    O3 - Toolbar: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFre1.dll
    O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
    O4 - HKLM\..\Run: [rybinyf] C:\WINDOWS\rybinyf.exe
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
    O4 - HKLM\..\Run: [Anti-Blaxx Manager] C:\Program Files\utilitaires\Anti-Blaxx 1.18\Anti-Blaxx.exe
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
    O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\utilitaires\Winamp\winampa.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\RunServices: [ALTER DATA] c:\windows\system32\ccdew\repcale.exe c:\windows\system32\ccdew\beird.exe
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-21-329068152-682003330-1394885836-1006\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Pierre')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
    O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-908\dslmon.exe
    O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Bureautique\crosoftoffice\Office10\OSA.EXE
    O8 - Extra context menu item: &Search - http://ko.bar.need2find.com/KO/menusearch.html?p=KO
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\BUREAU~1\CROSOF~1\Office10\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\npjpi160_05.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\npjpi160_05.dll
    O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\utilitaires\WinHTTrack\WinHTTrackIEBar.dll (file missing)
    O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\utilitaires\WinHTTrack\WinHTTrackIEBar.dll (file missing)
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
    O14 - IERESET.INF: START_PAGE_URL=http://freebox.free.fr/
    O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab312...
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
    O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall...
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClie...
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/fl...
    O17 - HKLM\System\CCS\Services\Tcpip\..\{D8BC072F-A077-4C4F-AC90-88EB09415E48}: NameServer = 192.162.0.101
    O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
    O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
    O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

    --
    End of file - 8592 bytes

    -- File Associations -----------------------------------------------------------

    All associations okay.


    -- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------

    R0 sfdrv01 (StarForce Protection Environment Driver (version 1.x)) - c:\windows\system32\drivers\sfdrv01.sys <Not Verified; Protection Technology (StarForce); SF FrontLine>
    R0 sfhlp02 (StarForce Protection Helper Driver (version 2.x)) - c:\windows\system32\drivers\sfhlp02.sys <Not Verified; Protection Technology (StarForce); SF FrontLine>
    R0 sfsync02 (StarForce Protection Synchronization Driver (version 2.x)) - c:\windows\system32\drivers\sfsync02.sys <Not Verified; Protection Technology; StarForce Protection System>
    R0 sfsync04 (StarForce Protection Synchronization Driver (version 4.x)) - c:\windows\system32\drivers\sfsync04.sys <Not Verified; Protection Technology (StarForce); SF FrontLine>
    R0 sfvfs02 (StarForce Protection VFS Driver (version 2.x)) - c:\windows\system32\drivers\sfvfs02.sys <Not Verified; Protection Technology; StarForce Protection System>
    R1 OMCI - c:\windows\system32\drivers\omci.sys <Not Verified; Dell Computer Corporation; OMCI Driver>
    R1 SCDEmu - c:\windows\system32\drivers\scdemu.sys <Not Verified; PowerISO Computing, Inc.; scdemu>
    R2 atksgt - c:\windows\system32\drivers\atksgt.sys
    R2 lirsgt - c:\windows\system32\drivers\lirsgt.sys
    R2 STEC3 - c:\windows\system32\stec3.sys <Not Verified; AntiCracking; SVKP driver for NT>
    R3 fbxusb (Carte réseau virtuelle FreeBox USB) - c:\windows\system32\drivers\fbxusb32.sys <Not Verified; FreeBox SA; Carte réseau virtuelle FreeBox USB pour Windows 2000/XP>

    S3 adiusbaw (USB ADSL WAN Adapter) - c:\windows\system32\drivers\adiusbaw.sys (file missing)
    S3 TIEHDUSB - c:\windows\system32\drivers\tiehdusb.sys <Not Verified; Texas Instruments Incorporated; Texas Instruments Incorporated Educational Handheld Device>


    -- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------

    R2 AntiVirScheduler (AntiVir PersonalEdition Classic Scheduler) - c:\program files\antivir personaledition classic\sched.exe <Not Verified; Avira GmbH; AntiVir Workstation>
    R2 Apple Mobile Device - "c:\program files\fichiers communs\apple\mobile device support\bin\applemobiledeviceservice.exe" <Not Verified; Apple, Inc.; Apple Mobile Device Service>


    -- Device Manager: Disabled ----------------------------------------------------

    No disabled devices found.


    -- Scheduled Tasks -------------------------------------------------------------

    2008-04-25 18:46:18 284 --a------ C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
    2005-02-01 12:40:00 328 --a------ C:\WINDOWS\Tasks\Azureus.job


    -- Files created between 2008-04-01 and 2008-05-01 -----------------------------

    2008-05-01 14:03:46 141612 --a------ C:\WINDOWS\system32\drivers\dump_wmimmc.sys
    2008-05-01 11:23:49 0 d-------- C:\WINDOWS\BDOSCAN8
    2008-05-01 11:23:43 0 d-------- C:\WINDOWS\LastGood
    2008-04-29 09:19:42 68096 --a------ C:\WINDOWS\zip.exe
    2008-04-29 09:19:42 49152 --a------ C:\WINDOWS\VFind.exe
    2008-04-29 09:19:42 212480 --a------ C:\WINDOWS\swxcacls.exe <Not Verified; SteelWerX; SteelWerX Extended Configurator ACLists>
    2008-04-29 09:19:42 136704 --a------ C:\WINDOWS\swsc.exe <Not Verified; SteelWerX; SteelWerX Service Controller>
    2008-04-29 09:19:42 161792 --a------ C:\WINDOWS\swreg.exe <Not Verified; SteelWerX; SteelWerX Registry Editor>
    2008-04-29 09:19:42 98816 --a------ C:\WINDOWS\sed.exe
    2008-04-29 09:19:42 80412 --a------ C:\WINDOWS\grep.exe
    2008-04-29 09:19:42 73728 --a------ C:\WINDOWS\fdsv.exe <Not Verified; Smallfrogs Studio; >
    2008-04-28 12:24:49 0 d-------- C:\Documents and Settings\Pierre\Application Data\Malwarebytes
    2008-04-28 12:24:44 0 d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
    2008-04-28 12:24:43 0 d-------- C:\Program Files\Malwarebytes' Anti-Malware
    2008-04-28 00:26:10 0 dr-h----- C:\Documents and Settings\Pierre\Recent
    2008-04-28 00:23:23 0 d-------- C:\Program Files\CCleaner
    2008-04-27 23:27:11 3692 --a------ C:\WINDOWS\system32\tmp.reg
    2008-04-27 23:21:36 0 d-a------ C:\MSNFix
    2008-04-27 22:23:07 0 d-------- C:\WINDOWS\ERUNT
    2008-04-27 22:20:49 0 d--h----- C:\Documents and Settings\Administrateur\Voisinage réseau
    2008-04-27 22:20:49 0 d--h----- C:\Documents and Settings\Administrateur\Voisinage d'impression
    2008-04-27 22:20:49 0 dr-h----- C:\Documents and Settings\Administrateur\SendTo
    2008-04-27 22:20:49 0 d--h----- C:\Documents and Settings\Administrateur\Recent
    2008-04-27 22:20:49 0 d--h----- C:\Documents and Settings\Administrateur\Modèles
    2008-04-27 22:20:49 0 d-------- C:\Documents and Settings\Administrateur\Mes documents
    2008-04-27 22:20:49 0 dr------- C:\Documents and Settings\Administrateur\Menu Démarrer
    2008-04-27 22:20:49 0 d--h----- C:\Documents and Settings\Administrateur\Local Settings
    2008-04-27 22:20:49 0 d-------- C:\Documents and Settings\Administrateur\Favoris
    2008-04-27 22:20:49 0 d--hs---- C:\Documents and Settings\Administrateur\Cookies
    2008-04-27 22:20:49 0 d-------- C:\Documents and Settings\Administrateur\Bureau
    2008-04-27 22:20:49 0 dr-h----- C:\Documents and Settings\Administrateur\Application Data
    2008-04-27 22:20:49 0 d---s---- C:\Documents and Settings\Administrateur\Application Data\Microsoft
    2008-04-27 22:20:48 524288 --ah----- C:\Documents and Settings\Administrateur\NTUSER.DAT
    2008-04-27 19:58:23 0 d-------- C:\Program Files\Trend Micro
    2008-04-27 18:02:16 0 d-------- C:\Documents and Settings\LocalService\Application Data\SpamBlockerUtility
    2008-04-27 18:02:15 0 d-------- C:\Documents and Settings\LocalService\Application Data\ShopperReports
    2008-04-27 17:54:37 0 d-------- C:\Documents and Settings\LocalService\Application Data\AdobeUM
    2008-04-27 17:53:31 0 d-------- C:\Documents and Settings\LocalService\Application Data\Adobe
    2008-04-27 11:57:25 0 d-------- C:\Program Files\Fichiers communs\xing shared
    2008-04-27 09:38:19 74752 --a------ C:\WINDOWS\ST6UNST.EXE <Not Verified; Microsoft Corporation; Microsoft® Visual Basic pour Windows>
    2008-04-03 09:28:33 0 d-------- C:\Documents and Settings\L93112\batclient


    -- Find3M Report ---------------------------------------------------------------

    2008-04-30 15:13:19 0 d-------- C:\Program Files\Winamp Remote
    2008-04-29 09:21:05 0 d-------- C:\Program Files\Fichiers communs
    2008-04-27 11:57:22 0 d-------- C:\Program Files\Fichiers communs\Real
    2008-04-12 03:06:15 0 d-------- C:\Documents and Settings\L93112\Application Data\Azureus
    2008-04-11 09:07:13 467798 --a------ C:\WINDOWS\system32\perfh00C.dat
    2008-04-11 09:07:13 74288 --a------ C:\WINDOWS\system32\perfc00C.dat
    2008-04-06 17:48:19 0 d-------- C:\Program Files\jeux
    2008-03-28 20:18:37 0 d-------- C:\Program Files\Safari
    2008-03-20 18:28:57 0 d-------- C:\Program Files\Freecorder
    2008-03-19 21:27:54 0 d-------- C:\Program Files\Freecorder Toolbar
    2008-03-14 20:15:47 0 d-------- C:\Program Files\iTunes
    2008-03-14 20:15:32 0 d-------- C:\Program Files\iPod
    2008-03-14 20:14:07 0 d-------- C:\Program Files\QuickTime
    2008-03-08 09:31:36 0 d-------- C:\Program Files\Java
    2008-03-06 17:21:07 0 d-------- C:\Documents and Settings\L93112\Application Data\Adobe
    2008-03-04 04:01:20 0 d-------- C:\Program Files\Microsoft CAPICOM 2.1.0.2
    2008-03-02 21:13:55 0 d-------- C:\Program Files\Windows Live
    2008-03-02 21:11:22 0 d--hs--c- C:\Program Files\Fichiers communs\WindowsLiveInstaller
    2008-02-03 23:34:25 0 -ra------ C:\logwmemory.bin


    -- Registry Dump ---------------------------------------------------------------

    *Note* empty entries & legit default entries are not shown


    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{1392b8d2-5c05-419f-a8f6-b9f15a596612}]
    20/03/2008 18:29 1470488 --a------ C:\Program Files\Freecorder\tbFre1.dll

    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{25CEE8EC-5730-41bc-8B58-22DDC8AB8C20}]
    04/10/2007 22:06 1135968 --a------ C:\Program Files\Winamp Toolbar\winamptb.dll

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "UpdReg"="C:\WINDOWS\UpdReg.EXE" [11/05/2000 02:00]
    "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [22/02/2008 05:25]
    "rybinyf"="C:\WINDOWS\rybinyf.exe" []
    "ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [20/02/2003 22:00]
    "ATICCC"="C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" [02/01/2006 17:41]
    "Anti-Blaxx Manager"="C:\Program Files\utilitaires\Anti-Blaxx 1.18\Anti-Blaxx.exe" [26/10/2005 17:35]
    "avgnt"="C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" [17/04/2008 13:25]
    "WinampAgent"="C:\Program Files\utilitaires\Winamp\winampa.exe" [16/01/2008 00:54]
    "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [01/02/2008 00:13]
    "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [19/02/2008 14:10]
    "TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [27/04/2008 11:57]

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [20/08/2004 01:09]

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\runservices]
    "ALTER DATA"=c:\windows\system32\ccdew\repcale.exe c:\windows\system32\ccdew\beird.exe

    C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
    DSLMON.lnk - C:\Program Files\SAGEM\SAGEM F@st 800-908\dslmon.exe [23/11/2004 20:37:02]
    Lancement rapide d'Adobe Reader.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [23/09/2005 23:05:26]
    Microsoft Office.lnk - C:\Program Files\Bureautique\crosoftoffice\Office10\OSA.EXE [13/02/2001 10:01:04]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
    "DisableRegistryTools"=0 (0x0)
    "HideLegacyLogonScripts"=0 (0x0)
    "HideLogoffScripts"=0 (0x0)
    "RunLogonScriptSync"=1 (0x1)
    "RunStartupScriptSync"=1 (0x1)
    "HideStartupScripts"=0 (0x0)

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
    "AllowLegacyWebView"=1 (0x1)
    "AllowUnhashedWebView"=1 (0x1)

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vds]
    @="Service"

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
    @="Volume shadow copy"




    -- End of Deckard's System Scanner: finished at 2008-05-01 15:10:28 ------------

    1 Mai 2008 15:14:16

    Deckard's System Scanner v20071014.68
    Extra logfile - please post this as an attachment with your post.
    --------------------------------------------------------------------------------

    -- System Information ----------------------------------------------------------

    Microsoft Windows XP Édition familiale (build 2600) SP 2.0
    Architecture: X86; Language: French

    CPU 0: Intel(R) Pentium(R) 4 CPU 3.00GHz
    Percentage of Memory in Use: 35%
    Physical Memory (total/avail): 1023 MiB / 660.19 MiB
    Pagefile Memory (total/avail): 2461.35 MiB / 2112.13 MiB
    Virtual Memory (total/avail): 2047.88 MiB / 1928.63 MiB

    A: is Removable (No Media)
    C: is Fixed (NTFS) - 111.72 GiB total, 12.29 GiB free.
    E: is CDROM (No Media)
    F: is CDROM (No Media)

    \\.\PHYSICALDRIVE0 - ST3120026A - 111.76 GiB - 2 partitions
    \PARTITION0 - Unknown - 39.19 MiB
    \PARTITION1 (bootable) - Système de fichiers installable - 111.72 GiB - C:



    -- Security Center -------------------------------------------------------------

    AUOptions is scheduled to auto-install.
    Windows Internal Firewall is enabled.

    AV: Avira AntiVir PersonalEdition Classic v0.0.0.0 (Avira GmbH)
    AV: Avira AntiVir PersonalEdition Classic v0.0.0.0 (Avira GmbH)
    AV: Avira AntiVir PersonalEdition v8.0.1.15 (Avira GmbH) Disabled
    AV: Avira AntiVir PersonalEdition Classic v0.0.0.0 (Avira GmbH)
    AV: Avira AntiVir PersonalEdition Classic v 6.38.1.13
    (Avira GmbH) Disabled

    [HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
    "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
    "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

    [HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
    "C:\\WINDOWS\\system32\\javaw.exe"="C:\\WINDOWS\\system32\\javaw.exe:*:Enabled:javaw"
    "C:\\Program Files\\utilitaires\\Phone\\Skype.exe"="C:\\Program Files\\utilitaires\\Phone\\Skype.exe:*:Enabled:Skype"
    "C:\\Program Files\\jeux\\Freeciv-1.14.0\\civserver.exe"="C:\\Program Files\\jeux\\Freeciv-1.14.0\\civserver.exe:*:Enabled:civserver"
    "C:\\Program Files\\utilitaires\\Maple 9.5\\bin.win\\mserver.exe"="C:\\Program Files\\utilitaires\\Maple 9.5\\bin.win\\mserver.exe:*:D isabled:mserver"
    "C:\\Program Files\\utilitaires\\Maple 9.5\\jre\\bin\\java.exe"="C:\\Program Files\\utilitaires\\Maple 9.5\\jre\\bin\\java.exe:*:D isabled:java"
    "C:\\WINDOWS\\system32\\dpnsvr.exe"="C:\\WINDOWS\\system32\\dpnsvr.exe:*:Enabled:Microsoft DirectPlay8 Server"
    "C:\\Program Files\\JVTorrent\\btdownloadgui.exe"="C:\\Program Files\\JVTorrent\\btdownloadgui.exe:*:Enabled:btdownloadgui"
    "C:\\Program Files\\utilitaires\\xchat\\xchat.exe"="C:\\Program Files\\utilitaires\\xchat\\xchat.exe:*:Enabled:XChat IRC Client"
    "C:\\Program Files\\Real\\RealPlayer\\realplay.exe"="C:\\Program Files\\Real\\RealPlayer\\realplay.exe:*:Enabled:RealPlayer"
    "C:\\torrent\\xevil\\xevil.exe"="C:\\torrent\\xevil\\xevil.exe:*:Enabled:XEvil2.0 Beta Demo"
    "C:\\Program Files\\Utilitaires poste\\Nouveau dossier\\firefox.exe"="C:\\Program Files\\Utilitaires poste\\Nouveau dossier\\firefox.exe:*:Enabled:Firefox"
    "C:\\Program Files\\Windows Media Player\\wmplayer.exe"="C:\\Program Files\\Windows Media Player\\wmplayer.exe:*:Enabled:Windows Media Player"
    "C:\\Program Files\\jeux\\CrackAttack\\bin\\crackattack.exe"="C:\\Program Files\\jeux\\CrackAttack\\bin\\crackattack.exe:*:Enabled:crackattack"
    "C:\\Program Files\\Crack-Attack\\bin\\crack-attack.exe"="C:\\Program Files\\Crack-Attack\\bin\\crack-attack.exe:*:Enabled:crack-attack"
    "C:\\Program Files\\jeux\\Atari\\Neverwinter Nights 2\\nwn2main.exe"="C:\\Program Files\\jeux\\Atari\\Neverwinter Nights 2\\nwn2main.exe:*:Enabled:Neverwinter Nights 2 Main"
    "C:\\Program Files\\jeux\\Atari\\Neverwinter Nights 2\\nwn2main_amdxp.exe"="C:\\Program Files\\jeux\\Atari\\Neverwinter Nights 2\\nwn2main_amdxp.exe:*:Enabled:Neverwinter Nights 2 AMD"
    "C:\\Program Files\\jeux\\Atari\\Neverwinter Nights 2\\nwupdate.exe"="C:\\Program Files\\jeux\\Atari\\Neverwinter Nights 2\\nwupdate.exe:*:Enabled:Neverwinter Nights 2 Updater"
    "C:\\Program Files\\jeux\\Atari\\Neverwinter Nights 2\\nwn2server.exe"="C:\\Program Files\\jeux\\Atari\\Neverwinter Nights 2\\nwn2server.exe:*:Enabled:Neverwinter Nights 2 Server"
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
    "C:\\Program Files\\utilitaires\\Freeplayer\\vlc\\vlc.exe"="C:\\Program Files\\utilitaires\\Freeplayer\\vlc\\vlc.exe:*:Enabled:VLC media player"
    "C:\\Program Files\\utilitaires\\VideoLAN\\VLC\\vlc.exe"="C:\\Program Files\\utilitaires\\VideoLAN\\VLC\\vlc.exe:*:Enabled:VLC media player"
    "C:\\Program Files\\Mozilla Firefox\\firefox.exe"="C:\\Program Files\\Mozilla Firefox\\firefox.exe:*:Enabled:Firefox"
    "C:\\Program Files\\Winamp Remote\\bin\\Orb.exe"="C:\\Program Files\\Winamp Remote\\bin\\Orb.exe:*:Enabled:o rb"
    "C:\\Program Files\\Winamp Remote\\bin\\OrbTray.exe"="C:\\Program Files\\Winamp Remote\\bin\\OrbTray.exe:*:Enabled:o rbTray"
    "C:\\Program Files\\Winamp Remote\\bin\\OrbStreamerClient.exe"="C:\\Program Files\\Winamp Remote\\bin\\OrbStreamerClient.exe:*:Enabled:o rb Stream Client"
    "C:\\Program Files\\jeux\\Soldat\\Soldat.exe"="C:\\Program Files\\jeux\\Soldat\\Soldat.exe:*:Enabled:Soldat"
    "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
    "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
    "C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"


    -- Environment Variables -------------------------------------------------------

    ALLUSERSPROFILE=C:\Documents and Settings\All Users
    APPDATA=C:\Documents and Settings\L93112\Application Data
    CLASSPATH=.;C:\Program Files\Java\jre1.6.0_05\lib\ext\QTJava.zip
    CommonProgramFiles=C:\Program Files\Fichiers communs
    COMPUTERNAME=L93112-5I19KXN2
    ComSpec=C:\WINDOWS\system32\cmd.exe
    FP_NO_HOST_CHECK=NO
    HOMEDRIVE=C:
    HOMEPATH=\Documents and Settings\L93112
    LOGONSERVER=\\L93112-5I19KXN2
    NUMBER_OF_PROCESSORS=1
    OS=Windows_NT
    Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\system32\wbem;C:\Program Files\ATI Technologies\ATI Control Panel;C:\Program Files\Fichiers communs\Adaptec Shared\System;C:\Program Files\ATI Technologies\ATI.ACE;C:\Program Files\QuickTime\QTSystem;C:\Program Files\utilitaires\MiKTeX 2.5\miktex\bin;
    PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
    PROCESSOR_ARCHITECTURE=x86
    PROCESSOR_IDENTIFIER=x86 Family 15 Model 2 Stepping 9, GenuineIntel
    PROCESSOR_LEVEL=15
    PROCESSOR_REVISION=0209
    ProgramFiles=C:\Program Files
    PROMPT=$P$G
    QTJAVA=C:\Program Files\Java\jre1.6.0_05\lib\ext\QTJava.zip
    SESSIONNAME=Console
    SystemDrive=C:
    SystemRoot=C:\WINDOWS
    TEMP=C:\DOCUME~1\L93112\LOCALS~1\Temp
    TMP=C:\DOCUME~1\L93112\LOCALS~1\Temp
    USERDOMAIN=L93112-5I19KXN2
    USERNAME=L93112
    USERPROFILE=C:\Documents and Settings\L93112
    windir=C:\WINDOWS
    XCHAT_WARNING_IGNORE=true


    -- User Profiles ---------------------------------------------------------------

    L93112 (admin)
    Louis (admin)
    Pierre (admin)
    Sylvie (admin)
    Hervé (admin)
    Administrateur (new local, admin)


    -- Add/Remove Programs ---------------------------------------------------------

    --> "C:\Program Files\Creative\SBLive\Program\Ctzapxx.EXE" /X /U /S /R
    --> C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
    --> rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
    "Glest 2.0.0" --> "C:\Program Files\jeux\Glest_2.0.0\unins000.exe"
    a-squared free 1.5 --> "C:\Program Files\utilitaires\a2 free\unins000.exe"
    Ad-Aware SE Personal --> C:\PROGRA~1\Lavasoft\AD-AWA~1\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\INSTALL.LOG
    Adobe Acrobat 5.0 --> C:\WINDOWS\ISUN040C.EXE -f"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.isu" -c"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.dll"
    Adobe Download Manager 1.2 (Supprimer uniquement) --> "C:\Program Files\Fichiers communs\Adobe\ESD\uninst.exe"
    Adobe Flash Player 9 ActiveX --> C:\WINDOWS\system32\Macromed\Flash\UninstFl.exe -q
    Adobe Flash Player ActiveX --> C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
    Adobe Flash Player Plugin --> C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
    Adobe Photoshop Album 2.0 Edition Découverte --> MsiExec.exe /I{11B569C2-4BF6-4ED0-9D17-A4273943CB24}
    Adobe Reader 7.0.9 - Français --> MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A70900000002}
    AFPL Ghostscript 8.51 --> c:\program files\utilitaires\gs\uninstgs.exe "c:\program files\utilitaires\gs\gs8.51\uninstal.txt"
    AFPL Ghostscript Fonts --> c:\program files\utilitaires\gs\uninstgs.exe "c:\program files\utilitaires\gs\fonts\uninstal.txt"
    After SweetKiss --> C:\Program Files\Ciel\After SweetKiss\menu.exe
    Alexander --> C:\Program Files\jeux\Ubisoft\GSC Game World\Alexandre\uninstall.exe
    Anti-Blaxx 1.18 --> "C:\Program Files\utilitaires\Anti-Blaxx 1.18\unins000.exe"
    Apple Mobile Device Support --> MsiExec.exe /I{44734179-8A79-4DEE-BB08-73037F065543}
    Apple Software Update --> MsiExec.exe /I{B74F042E-E1B9-4A5B-8D46-387BB172F0A4}
    Archiveur WinRAR --> C:\Program Files\WinRAR\uninstall.exe
    ArcSoft Panorama Maker 3 --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A5F68DC8-0278-4AD8-B413-861509B5F25B}\Setup.exe" -l0x40c
    Assistant de connexion Windows Live --> MsiExec.exe /I{AFA4E5FD-ED70-4D92-99D0-162FD56DC986}
    ATI - Software Uninstall Utility --> C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe
    ATI Catalyst Control Center --> MsiExec.exe /I{34566374-6C4D-419F-A9E0-8B21CA905FD8}
    ATI Control Panel --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe"
    ATI Display Driver --> rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:D ISPLAY -clean
    Avira AntiVir Personal – Free Antivirus --> C:\Program Files\AntiVir PersonalEdition Classic\SETUP.EXE /REMOVE
    Azureus --> C:\Program Files\utilitaires\Azureus\Uninstall.exe
    BatClient --> C:\WINDOWS\system32\javaws.exe -uninstall -prompt "http://mirror-eu.bat.org/batclient/batclient-eu.jnlp"
    BSPlayer --> "C:\Program Files\Webteh\BSplayer\uninstall.exe"
    CCleaner (remove only) --> "C:\Program Files\CCleaner\uninst.exe"
    Comptabilité --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9308A8EB-1C1B-11D4-BFC8-00C04F6180C7}\setup.exe" UNINSTALL
    Correctif pour Lecteur Windows Media 11 (KB939683) --> "C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
    Correctif pour Windows XP (KB914440) --> "C:\WINDOWS\$NtUninstallKB914440$\spuninst\spuninst.exe"
    Correctif Windows XP - KB834707 --> C:\WINDOWS\$NtUninstallKB834707$\spuninst\spuninst.exe
    Correctif Windows XP - KB867282 --> C:\WINDOWS\$NtUninstallKB867282$\spuninst\spuninst.exe
    Correctif Windows XP - KB873333 --> C:\WINDOWS\$NtUninstallKB873333$\spuninst\spuninst.exe
    Correctif Windows XP - KB873339 --> C:\WINDOWS\$NtUninstallKB873339$\spuninst\spuninst.exe
    Correctif Windows XP - KB885250 --> C:\WINDOWS\$NtUninstallKB885250$\spuninst\spuninst.exe
    Correctif Windows XP - KB885835 --> C:\WINDOWS\$NtUninstallKB885835$\spuninst\spuninst.exe
    Correctif Windows XP - KB885836 --> C:\WINDOWS\$NtUninstallKB885836$\spuninst\spuninst.exe
    Correctif Windows XP - KB885884 --> C:\WINDOWS\$NtUninstallKB885884$\spuninst\spuninst.exe
    Correctif Windows XP - KB886185 --> C:\WINDOWS\$NtUninstallKB886185$\spuninst\spuninst.exe
    Correctif Windows XP - KB887472 --> C:\WINDOWS\$NtUninstallKB887472$\spuninst\spuninst.exe
    Correctif Windows XP - KB887742 --> C:\WINDOWS\$NtUninstallKB887742$\spuninst\spuninst.exe
    Correctif Windows XP - KB888113 --> C:\WINDOWS\$NtUninstallKB888113$\spuninst\spuninst.exe
    Correctif Windows XP - KB888302 --> C:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.exe
    Correctif Windows XP - KB890047 --> C:\WINDOWS\$NtUninstallKB890047$\spuninst\spuninst.exe
    Correctif Windows XP - KB890175 --> C:\WINDOWS\$NtUninstallKB890175$\spuninst\spuninst.exe
    Correctif Windows XP - KB890859 --> "C:\WINDOWS\$NtUninstallKB890859$\spuninst\spuninst.exe"
    Correctif Windows XP - KB890923 --> "C:\WINDOWS\$NtUninstallKB890923$\spuninst\spuninst.exe"
    Correctif Windows XP - KB891781 --> C:\WINDOWS\$NtUninstallKB891781$\spuninst\spuninst.exe
    Correctif Windows XP - KB893066 --> "C:\WINDOWS\$NtUninstallKB893066$\spuninst\spuninst.exe"
    Correctif Windows XP - KB893086 --> "C:\WINDOWS\$NtUninstallKB893086$\spuninst\spuninst.exe"
    Crack-Attack! --> C:\Program Files\Crack-Attack\uninstall.exe
    DAEMON Tools --> MsiExec.exe /I{3DED3A72-61A8-4B87-98A5-EF0BC8038AA0}
    Dell ResourceCD --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D78653C3-A8FF-415F-92E6-D774E634FF2D}\setup.exe"
    DivX Player --> C:\Program Files\utilitaires\codecs\DivX\DivXPlayerUninstall.exe /PLAYER
    DivX Pro Codec Adware --> C:\Program Files\utilitaires\codecs\DivX\DivXProAdwareCodecUninstall.exe /CODEC
    Dragonshard --> MsiExec.exe /I{FA6E4C24-0378-497C-ABEC-1E264FF233BE}
    Easy CD Creator 5 Basic --> MsiExec.exe /I{609F7AC8-C510-11D4-A788-009027ABA5D0}
    eMusic - 50 Free MP3 offer --> "C:\Program Files\utilitaires\Winamp\eMusic\Uninst-eMusic-promotion.exe"
    Free - Kit de connexion --> C:\Program Files\Free.fr\uninstall.exe
    Freeciv 1.14.0 --> "C:\Program Files\jeux\Freeciv-1.14.0\unins000.exe"
    Freecorder Toolbar --> C:\PROGRA~1\FREECO~2\UNWISE.EXE C:\PROGRA~1\FREECO~2\INSTALL.LOG
    Freecorder Toolbar 3.0 Application --> "C:\WINDOWS\Freecorder Toolbar\uninstall.exe" "/U:C:\Program Files\Freecorder Toolbar\Uninstall\uninstall.xml"
    FreeOrion 0.3 --> C:\Program Files\jeux\FreeOrion\uninst.exe
    Freeplayer --> C:\Program Files\utilitaires\Freeplayer\Uninstall.exe
    Gestion Commerciale --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DEDD6B47-1C19-11D4-9E61-00C04F4E316A}\setup.exe" UNINSTALL
    GrabIt 1.6.2 Beta (build 940) --> "C:\Program Files\utilitaires\GrabIt\unins000.exe"
    GSview 4.7 --> C:\Program Files\utilitaires\Ghostgum\gsview\uninstgs.exe "C:\Program Files\utilitaires\Ghostgum\gsview\uninstal.txt"
    Heroes of Might and Magic V Collector Edition --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DDB68A90-340C-42B9-B42B-D2CBED1B91DC}\setup.exe" -l0x40c
    HijackThis 2.0.2 --> "C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
    Hotfix for Windows Media Format 11 SDK (KB929399) --> "C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
    IBEAD Multi Player --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{71E4EF4D-B65D-430A-86DF-4D13AB6C581B}\Setup.EXE" -l0x9
    Images Webscan 2.2b --> C:\Program Files\utilitaires\Images Webscan\uninst.exe
    Immobilisations --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{80864E88-1C1A-11D4-BEAA-00C04F61846C}\setup.exe" UNINSTALL
    Immortal Cities --> C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\10\INTEL3~1\IDriver.exe /M{E05B1C38-AE31-4146-8D47-E5E71BEB8D9E} /l1036
    Intel(R) PRO Network Adapters and Drivers --> Prounstl.exe
    iTunes --> MsiExec.exe /I{80FD852F-5AAC-4129-B931-06AAFFA43138}
    J2SE Runtime Environment 5.0 Update 10 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150100}
    J2SE Runtime Environment 5.0 Update 6 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150060}
    J2SE Runtime Environment 5.0 Update 9 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150090}
    Java 2 Runtime Environment, SE v1.4.1_01 --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1666FA7C-CB5F-11D6-A78C-00B0D079AF64}\setup.exe" Anytext
    Java Web Start --> "C:\Program Files\Java Web Start\uninst-javaws.exe"
    Java(TM) 6 Update 2 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160020}
    Java(TM) 6 Update 3 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160030}
    Java(TM) 6 Update 5 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050}
    Java(TM) SE Runtime Environment 6 Update 1 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160010}
    JVTorrent 1.1 --> C:\Program Files\JVTorrent\uninst.exe
    Keyhole 2 LT --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{036ABCF1-A419-4074-B35C-2C70592A0EBB}\Setup.exe" -l0x9
    Location Immobiliere --> MsiExec.exe /I{51A22F4B-E837-483E-89B6-AC56A5500BEB}
    Lunia --> "C:\Program Files\jeux\lunia\uninstall.exe"
    Macromedia Shockwave Player --> C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log
    Malwarebytes' Anti-Malware --> "C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
    Manuels électroniques --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FADD7B80-56C9-11D2-A387-00C04FC6ACC9}\setup.exe" UNINSTALL
    Maple 9.5 --> "C:\Program Files\utilitaires\Maple 9.5\Uninstall_Maple 9.5\Uninstall Maple 9.5.exe"
    Matroska Playback Pack --> C:\Program Files\utilitaires\Matroska Playback Pack\uninstall.exe
    Microsoft Compression Client Pack 1.0 for Windows XP --> "C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
    Microsoft Office XP Professional avec FrontPage --> MsiExec.exe /I{9028040C-6000-11D3-8CFE-0050048383C9}
    Microsoft User-Mode Driver Framework Feature Pack 1.0 --> "C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
    MiKTeX 2.5 --> "C:\Program Files\utilitaires\MiKTeX 2.5\miktex\bin\copystart.exe" "C:\Program Files\utilitaires\MiKTeX 2.5\miktex\config\uninstall.dat"
    mIRC --> "C:\Program Files\utilitaires\mIRC\mirc.exe" -uninstall
    Mise à jour de sécurité pour Lecteur Windows Media (KB911564) --> "C:\WINDOWS\$NtUninstallKB911564$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Lecteur Windows Media 10 (KB911565) --> "C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734) --> "C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782) --> "C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Lecteur Windows Media 6.4 (KB925398) --> "C:\WINDOWS\$NtUninstallKB925398_WMP64$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB883939) --> "C:\WINDOWS\$NtUninstallKB883939$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB890046) --> "C:\WINDOWS\$NtUninstallKB890046$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB893756) --> "C:\WINDOWS\$NtUninstallKB893756$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB896358) --> "C:\WINDOWS\$NtUninstallKB896358$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB896422) --> "C:\WINDOWS\$NtUninstallKB896422$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB896423) --> "C:\WINDOWS\$NtUninstallKB896423$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB896424) --> "C:\WINDOWS\$NtUninstallKB896424$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB896428) --> "C:\WINDOWS\$NtUninstallKB896428$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB896688) --> "C:\WINDOWS\$NtUninstallKB896688$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB899587) --> "C:\WINDOWS\$NtUninstallKB899587$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB899588) --> "C:\WINDOWS\$NtUninstallKB899588$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB899591) --> "C:\WINDOWS\$NtUninstallKB899591$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB900725) --> "C:\WINDOWS\$NtUninstallKB900725$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB901017) --> "C:\WINDOWS\$NtUninstallKB901017$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB901214) --> "C:\WINDOWS\$NtUninstallKB901214$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB902400) --> "C:\WINDOWS\$NtUninstallKB902400$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB903235) --> "C:\WINDOWS\$NtUninstallKB903235$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB904706) --> "C:\WINDOWS\$NtUninstallKB904706$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB905414) --> "C:\WINDOWS\$NtUninstallKB905414$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB905749) --> "C:\WINDOWS\$NtUninstallKB905749$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB905915) --> "C:\WINDOWS\$NtUninstallKB905915$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB908519) --> "C:\WINDOWS\$NtUninstallKB908519$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB908531) --> "C:\WINDOWS\$NtUninstallKB908531$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB911280) --> "C:\WINDOWS\$NtUninstallKB911280$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB911562) --> "C:\WINDOWS\$NtUninstallKB911562$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB911567) --> "C:\WINDOWS\$NtUninstallKB911567$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB911927) --> "C:\WINDOWS\$NtUninstallKB911927$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB912812) --> "C:\WINDOWS\$NtUninstallKB912812$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB912919) --> "C:\WINDOWS\$NtUninstallKB912919$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB913446) --> "C:\WINDOWS\$NtUninstallKB913446$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB913580) --> "C:\WINDOWS\$NtUninstallKB913580$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB914388) --> "C:\WINDOWS\$NtUninstallKB914388$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB914389) --> "C:\WINDOWS\$NtUninstallKB914389$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB916281) --> "C:\WINDOWS\$NtUninstallKB916281$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB917159) --> "C:\WINDOWS\$NtUninstallKB917159$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB917344) --> "C:\WINDOWS\$NtUninstallKB917344$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB917422) --> "C:\WINDOWS\$NtUninstallKB917422$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB917953) --> "C:\WINDOWS\$NtUninstallKB917953$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB918118) --> "C:\WINDOWS\$NtUninstallKB918118$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB918439) --> "C:\WINDOWS\$NtUninstallKB918439$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB918899) --> "C:\WINDOWS\$NtUninstallKB918899$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB919007) --> "C:\WINDOWS\$NtUninstallKB919007$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB920213) --> "C:\WINDOWS\$NtUninstallKB920213$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB920214) --> "C:\WINDOWS\$NtUninstallKB920214$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB920670) --> "C:\WINDOWS\$NtUninstallKB920670$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB920683) --> "C:\WINDOWS\$NtUninstallKB920683$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB920685) --> "C:\WINDOWS\$NtUninstallKB920685$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB921398) --> "C:\WINDOWS\$NtUninstallKB921398$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB921503) --> "C:\WINDOWS\$NtUninstallKB921503$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB921883) --> "C:\WINDOWS\$NtUninstallKB921883$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB922616) --> "C:\WINDOWS\$NtUninstallKB922616$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB922760) --> "C:\WINDOWS\$NtUninstallKB922760$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB922819) --> "C:\WINDOWS\$NtUninstallKB922819$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB923191) --> "C:\WINDOWS\$NtUninstallKB923191$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB923414) --> "C:\WINDOWS\$NtUninstallKB923414$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB923694) --> "C:\WINDOWS\$NtUninstallKB923694$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB923980) --> "C:\WINDOWS\$NtUninstallKB923980$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB924191) --> "C:\WINDOWS\$NtUninstallKB924191$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB924270) --> "C:\WINDOWS\$NtUninstallKB924270$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB924496) --> "C:\WINDOWS\$NtUninstallKB924496$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB924667) --> "C:\WINDOWS\$NtUninstallKB924667$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB925454) --> "C:\WINDOWS\$NtUninstallKB925454$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB925486) --> "C:\WINDOWS\$NtUninstallKB925486$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB925902) --> "C:\WINDOWS\$NtUninstallKB925902$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB926255) --> "C:\WINDOWS\$NtUninstallKB926255$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB926436) --> "C:\WINDOWS\$NtUninstallKB926436$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB927779) --> "C:\WINDOWS\$NtUninstallKB927779$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB927802) --> "C:\WINDOWS\$NtUninstallKB927802$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB928255) --> "C:\WINDOWS\$NtUninstallKB928255$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB928843) --> "C:\WINDOWS\$NtUninstallKB928843$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB929123) --> "C:\WINDOWS\$NtUninstallKB929123$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB930178) --> "C:\WINDOWS\$NtUninstallKB930178$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB931261) --> "C:\WINDOWS\$NtUninstallKB931261$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB931784) --> "C:\WINDOWS\$NtUninstallKB931784$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB932168) --> "C:\WINDOWS\$NtUninstallKB932168$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB933729) --> "C:\WINDOWS\$NtUninstallKB933729$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB935839) --> "C:\WINDOWS\$NtUninstallKB935839$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB935840) --> "C:\WINDOWS\$NtUninstallKB935840$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB936021) --> "C:\WINDOWS\$NtUninstallKB936021$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB938829) --> "C:\WINDOWS\$NtUninstallKB938829$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB941202) --> "C:\WINDOWS\$NtUninstallKB941202$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB941568) --> "C:\WINDOWS\$NtUninstallKB941568$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB941569) --> "C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB941644) --> "C:\WINDOWS\$NtUninstallKB941644$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB941693) --> "C:\WINDOWS\$NtUninstallKB941693$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB943055) --> "C:\WINDOWS\$NtUninstallKB943055$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB943460) --> "C:\WINDOWS\$NtUninstallKB943460$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB943485) --> "C:\WINDOWS\$NtUninstallKB943485$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB944653) --> "C:\WINDOWS\$NtUninstallKB944653$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB945553) --> "C:\WINDOWS\$NtUninstallKB945553$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB946026) --> "C:\WINDOWS\$NtUninstallKB946026$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB948590) --> "C:\WINDOWS\$NtUninstallKB948590$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB948881) --> "C:\WINDOWS\$NtUninstallKB948881$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB894391) --> "C:\WINDOWS\$NtUninstallKB894391$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB896727) --> "C:\WINDOWS\$NtUninstallKB896727$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB898461) --> "C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB900485) --> "C:\WINDOWS\$NtUninstallKB900485$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB904942) --> "C:\WINDOWS\$NtUninstallKB904942$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB910437) --> "C:\WINDOWS\$NtUninstallKB910437$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB916595) --> "C:\WINDOWS\$NtUninstallKB916595$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB920872) --> "C:\WINDOWS\$NtUninstallKB920872$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB922582) --> "C:\WINDOWS\$NtUninstallKB922582$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB927891) --> "C:\WINDOWS\$NtUninstallKB927891$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB929338) --> "C:\WINDOWS\$NtUninstallKB929338$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB930916) --> "C:\WINDOWS\$NtUninstallKB930916$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB931836) --> "C:\WINDOWS\$NtUninstallKB931836$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB933360) --> "C:\WINDOWS\$NtUninstallKB933360$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB936357) --> "C:\WINDOWS\$NtUninstallKB936357$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB938828) --> "C:\WINDOWS\$NtUninstallKB938828$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB942763) --> "C:\WINDOWS\$NtUninstallKB942763$\spuninst\spuninst.exe"
    Mozilla Firefox (1.5.0.11) --> C:\Program Files\Utilitaires poste\Nouveau dossier\uninstall\uninstall.exe /ua "1.5.0.11 (fr)"
    Mozilla Firefox (2.0.0.14) --> C:\Program Files\Mozilla Firefox\uninstall\helper.exe
    Mozilla Thunderbird (1.0) --> C:\WINDOWS\UninstallThunderbird.exe /ua "1.0 (fr)"
    MUSK Codec Pack v5 --> "C:\Program Files\utilitaires\MUSK Codec Pack v5\unins000.exe"
    NetHack 3.3.1 - Falcon's Eye 1.9.2 --> "C:\Program Files\jeux\NetHack - Falcon's Eye\unins000.exe"
    Neverwinter Nights 2 --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F20C1251-1D0A-4944-B2AE-678581B33B19}\SETUP.exe" -l0x40c -removeonly
    Nikon Message Center --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D2FCC1AE-6311-47C5-8130-C6C66D77DD71}\Setup.exe" -l0x40c UNINSTALL
    Outspark Launcher --> C:\Program Files\Outspark\Launcher\uninstall.exe
    Paie 100 --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{07933992-A6A0-11D4-9742-0008C7255265}\setup.exe" UNINSTALL
    Porrasturvat - Stair Dismount --> C:\Program Files\jeux\Porrasturvat - Stair Dismount\uninstall.exe
    PowerDVD --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\Setup.exe" -uninstall
    PowerISO --> "C:\Program Files\utilitaires\PowerISO\uninstall.exe"
    QuickTime --> MsiExec.exe /I{BFD96B89-B769-4CD6-B11E-E79FFD46F067}
    RaPiZ PSP Software --> "C:\Documents and Settings\Pierre\Bureau\jeux PSP\video\RaPiZ PSP Software\uninstall.exe"
    RealPlayer --> C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
    Safari --> MsiExec.exe /I{0AFC9710-5DD6-4C6A-BA52-91AE992B2C9D}
    SAGEM F@st 800-908 --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4AE3A0CB-87B0-4F51-BECD-3D1F8DFDD62F}\Setup.exe" -l0x40c
    Scorched3D 39.1 --> C:\Program Files\jeux\Scorched3D\uninst.exe
    SeaMonkey (1.0b) --> C:\WINDOWS\SeaMonkeyUninstall.exe /ua "1.0b (en)"
    Security Update for CAPICOM (KB931906) --> MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
    Security Update for CAPICOM (KB931906) --> MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
    Sid Meier's Pirates! --> C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{1632FD86-1BA4-4FC4-8B25-A8C655D63F68}
    Skype 1.1 --> "C:\Program Files\utilitaires\Phone\unins000.exe"
    Slash'EM 0.0.7E7F3 --> "C:\Program Files\jeux\SlashEM\SlashEM 0.0.7E7F3\unins000.exe"
    Soldat 1.4.2 --> "C:\Program Files\jeux\Soldat\unins000.exe"
    Sound Blaster Live! --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{96E16100-A77F-4B31-B9AD-FFBA040EE1BD}\SETUP.EXE" -l0x40c
    Steam --> C:\PROGRA~1\jeux\Valve\Steam\UNWISE.EXE C:\PROGRA~1\jeux\Valve\Steam\INSTALL.LOG
    Supreme Commander Demo --> C:\Documents and Settings\L93112\Application Data\InstallShield Installation Information\{25A1E6A4-2DBD-4AC0-8650-8EA9A45B1848}\setup.exe -runfromtemp -l0x0009 -removeonly
    Texmaker --> C:\Program Files\utilitaires\Texmaker\uninstall.exe
    TI Connect 1.5 --> MsiExec.exe /I{A8B94669-8654-4126-BD28-D0D2412CDED6}
    TrackMania Nations ESWC 0.1.7.5 --> "C:\Program Files\jeux\TrackMania Nations ESWC\unins000.exe"
    Trickster Online --> C:\Program Files\jeux\Trickster Online\uninst.exe
    UFO:Alien Invasion 2.0-RC6 --> C:\Program Files\jeux\UFOAI\uninst.exe
    VideoLAN VLC media player 0.8.5-freehd --> C:\Program Files\utilitaires\VideoLAN\VLC\uninstall.exe
    Wesnoth 1.0.2 --> "C:\Program Files\jeux\Wesnoth\unins000.exe"
    Widelands build9half --> "C:\Program Files\jeux\Widelands\unins000.exe"
    Winamp --> "C:\Program Files\utilitaires\Winamp\UninstWA.exe"
    Winamp Remote --> "C:\Program Files\Winamp Remote\uninstall.exe"
    Winamp Toolbar --> "C:\Program Files\Winamp Toolbar\uninstall.exe"
    Windows Live installer --> MsiExec.exe /X{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390}
    Windows Live Messenger --> MsiExec.exe /X{BADF6744-3787-48F6-B8C9-4C4995401D65}
    Windows Media Format 11 runtime --> "C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
    WinHTTrack Website Copier 3.40-2 --> "C:\Program Files\utilitaires\WinHTTrack\unins000.exe"
    WinZip --> "C:\Program Files\utilitaires\WinZip\WINZIP32.EXE" /uninstall
    WORLD SOCCER WINNING ELEVEN 8 INTERNATIONAL --> C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{B671D613-33AD-4FF0-B123-4470C0508553} /l1033
    X-Chat 2 (remove only) --> "C:\Program Files\utilitaires\xchat\uninstall.exe"
    X-Chat 2.6.8-1 --> "C:\Program Files\utilitaires\X-Chat 2\unins000.exe"
    Xfire (remove only) --> "C:\Program Files\Xfire\uninst.exe"


    -- Application Event Log -------------------------------------------------------

    Event Record #/Type8646 / Warning
    Event Submitted/Written: 05/01/2008 00:37:50 PM
    Event ID/Source: 4113 / Avira AntiVir
    Event Description:
    DR/Tool.Reboot.F.86C:\System Volume Information\_restore{75BE3631-BF92-4A65-B135-DA298D6CBE1F}\RP671\A0145939.exe

    Event Record #/Type8645 / Warning
    Event Submitted/Written: 05/01/2008 11:40:25 AM
    Event ID/Source: 4113 / Avira AntiVir
    Event Description:
    HEUR/HTML.MalwareC:\Documents and Settings\L93112\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\class%60.class-4747bc8c-67dfdb50.class

    Event Record #/Type8636 / Warning
    Event Submitted/Written: 04/30/2008 02:35:19 PM
    Event ID/Source: 4113 / Avira AntiVir
    Event Description:
    DR/Tool.Reboot.F.86C:\System Volume Information\_restore{75BE3631-BF92-4A65-B135-DA298D6CBE1F}\RP671\A0145939.exe

    Event Record #/Type8635 / Warning
    Event Submitted/Written: 04/30/2008 01:35:19 PM
    Event ID/Source: 4113 / Avira AntiVir
    Event Description:
    DR/Tool.Reboot.F.86C:\System Volume Information\_restore{75BE3631-BF92-4A65-B135-DA298D6CBE1F}\RP671\A0145939.exe

    Event Record #/Type8634 / Warning
    Event Submitted/Written: 04/30/2008 00:35:19 PM
    Event ID/Source: 4113 / Avira AntiVir
    Event Description:
    DR/Tool.Reboot.F.86C:\System Volume Information\_restore{75BE3631-BF92-4A65-B135-DA298D6CBE1F}\RP671\A0145939.exe



    -- Security Event Log ----------------------------------------------------------

    No Errors/Warnings found.


    -- System Event Log ------------------------------------------------------------

    Event Record #/Type46288 / Warning
    Event Submitted/Written: 05/01/2008 05:08:51 AM
    Event ID/Source: 36 / W32Time
    Event Description:
    Le service de temps n'a pas pu synchroniser l'heure système de 49152
    secondes car aucun fournisseur de temps n'a pu fournir de datage
    utilisable. L'horloge système n'est pas synchronisée.

    Event Record #/Type46241 / Warning
    Event Submitted/Written: 04/30/2008 03:30:37 PM
    Event ID/Source: 20169 / RemoteAccess
    Event Description:
    Impossible de contacter un serveur DHCP. L'adresse IP privée automatique
    169.254.182.162 sera attribuée aux clients entrants. Les clients ne pourront
    peut-être pas accéder aux ressources du réseau.

    Event Record #/Type46228 / Error
    Event Submitted/Written: 04/30/2008 03:29:40 PM
    Event ID/Source: 7000 / Service Control Manager
    Event Description:
    Le service General Purpose USB Driver (adildr.sys) n'a pas pu démarrer en raison de l'erreur :
    %%1058

    Event Record #/Type46225 / Warning
    Event Submitted/Written: 04/30/2008 03:29:08 PM / 04/30/2008 03:29:38 PM
    Event ID/Source: 4 / E100B
    Event Description:
    Adapter Intel(R) PRO/100 VE Network Connection: Adapter Link Down

    Event Record #/Type46216 / Warning
    Event Submitted/Written: 04/30/2008 03:26:32 PM
    Event ID/Source: 11050 / dnscache
    Event Description:
    Le service client DNS n'a pu contacter aucun serveur DNS pour un
    nombre répété de tentatives. Pendant les 30 prochaines secondes le
    service client DNS n'utilisera pas le réseau pour éviter d'autres
    problèmes de performance du réseau. Il reprendra un comportement normal
    après cela. Si ce problème persiste, vérifiez votre
    configuration TCP/IP, en particulier si vous avez un serveur
    DNS favoris (et si possible un serveur de secours) configuré. Si le problème
    persiste, vérifiez les conditions réseau de ces serveurs DNS ou contactez
    votre administrateur réseau.



    -- End of Deckard's System Scanner: finished at 2008-05-01 15:10:28 ------------

    1 Mai 2008 22:45:07

    Re,

    1) Relance HijackThis (clique droit -> lancer en tant qu'adminstrateur sous Vista), clique sur "do a system scan only", coche ces lignes ( si présentes ) puis clique sur "Fix Checked" et referme HijackThis :

    O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
    O4 - HKLM\..\Run: [rybinyf] C:\WINDOWS\rybinyf.exe
    O4 - HKCU\..\RunServices: [ALTER DATA] c:\windows\system32\ccdew\repcale.exe c:\windows\system32\ccdew\beird.exe


    2) Télécharger OTMoveIt2 par OldTimer.

  • Enregistrer ce fichier sur le Bureau.
  • Faire un double clic sur OTMoveIt2.exe pour lancer l'exécution de l'outil. (Note: Si vous utilisez Vista, faire un clic droit sur le fichier puis choisir Exécuter en tant qu'administrateur).
  • Copier les lignes de la zone "Code" ci-dessous en les sélectionnant TOUTES puis en appuyant simultanément sur les touches CTRL et C (ou, après les avoir sélectionnées, en faisant un clic droit puis en choisissant Copier):
    c:\windows\system32\ccdew\
    C:\WINDOWS\rybinyf.exe

  • Retourner dans la fenêtre de OTMoveIt2, faire un clic droit dans la zone "Paste Standard List of Files/Folders to Move" (sous la barre bleu clair) puis choisir Coller.
  • Cliquer sur le bouton rouge Moveit!.
  • Copier tout ce qui se trouve dans la zone Results (sous la barre verte) en sélectionnant TOUTES LES LIGNES puis en appuyant simultanément sur les touches CTRL et C (ou, après les avoir sélectionnées, en faisant un clic droit puis en choisissant Copier), et coller ces résulats en réponse sur le forum.
  • Fermer OTMoveIt2

    Note: Si un fichier ou un dossier ne peut pas être déplacé immédiatement, un redémarrage sera peut-être nécessaire afin de terminer le processus de déplacement. Si le redémarrage de la machine vous est demandé, choisir Oui/Yes. Dans ce cas, après le redémarrage, ouvrir le Bloc-notes (Démarrer->Tous les programmes->Accessoires->Bloc-notes), cliquer sur Fichier->Ouvrir, dans la zone "Nom du fichier" taper *.log et appuyer sur la touche Entrée, naviguer jusqu'au dossier C:\_OTMoveIt\MovedFiles, puis ouvrir le fichier .log le plus récent; ensuite faire un copier/coller du contenu de ce document en réponse sur le forum.

    Si tu obtiens un message comme quoi le rapport ne peut pas être créé, copie/colle ce qui apparaît dans la colonne droite de l’outil.

    3) Poste un nouveau rapport hijackthis.

    Comment va le PC ? Toujours des problèmes ?

    ;) 
    2 Mai 2008 18:24:58

    Bonjour,

    1) ok !

    2)
    Folder c:\windows\system32\ccdew\ not found.
    File/Folder C:\WINDOWS\rybinyf.exe not found.

    OTMoveIt2 by OldTimer - Version 1.0.4.1 log created on 05022008_181927

    3)

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 18:21:35, on 02/05/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16640)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
    C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
    C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\WINDOWS\system32\zstatus.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\Program Files\utilitaires\Anti-Blaxx 1.18\Anti-Blaxx.exe
    C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
    C:\Program Files\utilitaires\Winamp\winampa.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\SAGEM\SAGEM F@st 800-908\dslmon.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFre1.dll
    O2 - BHO: Winamp Toolbar BHO - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
    O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
    O3 - Toolbar: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFre1.dll
    O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
    O4 - HKLM\..\Run: [Anti-Blaxx Manager] C:\Program Files\utilitaires\Anti-Blaxx 1.18\Anti-Blaxx.exe
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
    O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\utilitaires\Winamp\winampa.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-21-329068152-682003330-1394885836-1006\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Pierre')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
    O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-908\dslmon.exe
    O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Bureautique\crosoftoffice\Office10\OSA.EXE
    O8 - Extra context menu item: &Search - http://ko.bar.need2find.com/KO/menusearch.html?p=KO
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\BUREAU~1\CROSOF~1\Office10\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\npjpi160_05.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\npjpi160_05.dll
    O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\utilitaires\WinHTTrack\WinHTTrackIEBar.dll (file missing)
    O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\utilitaires\WinHTTrack\WinHTTrackIEBar.dll (file missing)
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
    O14 - IERESET.INF: START_PAGE_URL=http://freebox.free.fr/
    O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab312...
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
    O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall...
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClie...
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/fl...
    O17 - HKLM\System\CCS\Services\Tcpip\..\{D8BC072F-A077-4C4F-AC90-88EB09415E48}: NameServer = 192.162.0.101
    O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
    O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
    O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

    --
    End of file - 8359 bytes


    le PC va beaucoup mieux :wahoo: 
    je ne vois plus de problème.
    2 Mai 2008 23:00:31

    Re,

    Moi non plus je n'en vois plus :D 

    Relance HijackThis (clique droit -> lancer en tant qu'adminstrateur sous Vista), clique sur "do a system scan only", coche ces lignes ( si présentes ) puis clique sur "Fix Checked" et referme HijackThis :

    O8 - Extra context menu item: &Search - http://ko.bar.need2find.com/KO/menusearch.html?p=KO


    *********************************************************

    C’est OK, tu ne seras plus infecté(e) quand tu auras fait TOUTES les manip’ ci-dessous :p 

    1) Télécharge ToolsCleaner sur ton bureau.
    http://www.commentcamarche.net/telecharger/toolscleaner...

    Ce programme va te faire désinstaller tous les outils que je t’ai faits utiliser.

  • Clique sur Recherche et laisse le scan agir ...
  • Clique sur Suppression pour finaliser.
  • Tu peux, si tu le souhaites, te servir des Options facultatives.
  • Clique sur Quitter pour obtenir le rapport.
  • Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).

    2) Télécharge et installe Ccleaner :
    http://www.01net.com/telecharger/windows/Utilitaire/net...
  • Avant de cliquer sur le bouton "installer", décoche toutes les "options supplémentaires". Ensuite, clique sur "Options", "Avancé" et décoche la case "Effacer uniquement les fichiers, du dossier Temp de Windows, plus vieux que 48 heures". Clique sur l'onglet "Nettoyeur" puis sur "Lancer le Nettoyage".
  • Ensuite clique sur l'onglet Registre, clique sur "Chercher des erreurs" puis sur "Réparer les erreurs sélectionnées". Il est inutile de faire des sauvegardes des clés. Répète l'opération autant de fois qu'il le faut jusqu'à qu'il ne trouve plus d'erreurs.
  • Tutorial ici : http://www.infos-du-net.com/forum/272336-7-ccleaner-und...
    3)
  • Désactive ta restauration systeme

  • Réactive ta restauration systeme

  • Tutorial ici : http://www.infos-du-net.com/forum/272480-11-desactiver-...
    ********************************************************************************

    Ajoute maintenant [Résolu] au titre. Pour cela :
    * Clique, dans ton premier message, sur le bouton "Editer"
    * Rajoute la mention [Résolu] au titre
    * Clique ensuite sur "Valider votre message"

    Ce serait sympa de rapporter ton infection sur > Malware-Complaints < pour faire condamner ses auteurs

    - Règles du forum <- ici
    - Poster un message <- ici ( par Malekal )

    Pour t'enregistrer clique sur le bouton register ( en haut )
    Si tu as plus de 13 ans choisis " I Agree to these terms and am over or exactly 13 years of age "
    Si tu as moins de 13 ans choisis " I Agree to these terms and am under 13 years of age "

    Tu auras une liste par type d'infection
    Si ton infection n'est pas dans la liste crée un message dans Autres infections

    a+ et bon surf :hello: 


    Quelques liens intéressants :

    http://mickael.barroux.free.fr/securite/
    http://www.malekal.com/
    http://www.infos-du-net.com/forum/275481-11-dossier-pre...
    3 Mai 2008 10:56:21

    -->- Recherche:

    C:\SDFIX: trouvé !
    C:\MsnFix: trouvé !
    C:\Qoobox: trouvé !
    C:\_OtMoveIt: trouvé !
    C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: trouvé !
    C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: trouvé !
    C:\Documents and Settings\L93112\Bureau\Dss.exe: trouvé !
    C:\Documents and Settings\L93112\Bureau\HijackThis.lnk: trouvé !
    C:\Documents and Settings\L93112\Bureau\OtMoveIt2.exe: trouvé !
    C:\Documents and Settings\Pierre\Bureau\SdFix.exe: trouvé !
    C:\Documents and Settings\Pierre\Bureau\HijackThis.lnk: trouvé !
    C:\Documents and Settings\Pierre\Bureau\Msnfix.zip: trouvé !
    C:\Documents and Settings\Pierre\Bureau\BtFix.zip: trouvé !
    C:\Documents and Settings\Pierre\Bureau\ComboFix.exe: trouvé !
    C:\Documents and Settings\Pierre\Bureau\HJTInstall.exe: trouvé !
    C:\Documents and Settings\Pierre\Bureau\SDFIX: trouvé !
    C:\Documents and Settings\Pierre\Bureau\Btfix: trouvé !
    C:\Documents and Settings\Pierre\Bureau\SmitFraudfix: trouvé !
    C:\Program Files\Mozilla Firefox\Bureau\HijackThis.exe: trouvé !
    C:\Program Files\Trend Micro\HijackThis: trouvé !
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !

    ---------------------------------
    -->- Suppression:

    C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: supprimé !
    C:\Documents and Settings\L93112\Bureau\Dss.exe: supprimé !
    C:\Documents and Settings\L93112\Bureau\HijackThis.lnk: supprimé !
    C:\Documents and Settings\L93112\Bureau\OtMoveIt2.exe: supprimé !
    C:\Documents and Settings\Pierre\Bureau\SdFix.exe: supprimé !
    C:\Documents and Settings\Pierre\Bureau\HijackThis.lnk: supprimé !
    C:\Documents and Settings\Pierre\Bureau\Msnfix.zip: supprimé !
    C:\Documents and Settings\Pierre\Bureau\BtFix.zip: supprimé !
    C:\Documents and Settings\Pierre\Bureau\ComboFix.exe: supprimé !
    C:\Documents and Settings\Pierre\Bureau\HJTInstall.exe: supprimé !
    C:\Program Files\Mozilla Firefox\Bureau\HijackThis.exe: supprimé !
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: supprimé !
    C:\SDFIX: supprimé !
    C:\MsnFix: supprimé !
    C:\Qoobox: supprimé !
    C:\_OtMoveIt: supprimé !
    C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: supprimé !
    C:\Documents and Settings\Pierre\Bureau\SDFIX: supprimé !
    C:\Documents and Settings\Pierre\Bureau\Btfix: supprimé !
    C:\Documents and Settings\Pierre\Bureau\SmitFraudfix: supprimé !
    C:\Program Files\Trend Micro\HijackThis: supprimé !
    3 Mai 2008 11:27:50

    Bonjour,
    Voila j'ai rapporté mon infection, tout est fini ^^
    Au revoir et Un grand merci pour toute l'aide que vous m'avez apporté :) 
    3 Mai 2008 12:35:49

    Re,

    De rien ce fut un plaisir !

    Rapporte ton infection sur malware complain si ce n'est pas fait, c'est important ;) 

    Merci de consulter ce dossier (en pdf) pour en connaître davantage sur les risques du Net.



    Si tu trouves ce document intéressant, n'hésite pas à le transmettre à tes contacts.

    Bonne continuation :hello: 
    7 Février 2010 16:58:57

    Bonjour a tous et merci pour vos reponses

    je voulais savoir si je peux utiliser la meme procedure pour enlever ce meme trojan "tr rootkit"
    merci
    7 Février 2010 17:14:55

    re-bonjour

    le logiciel ad-ware est-il efficace pour supprimé ce type de fichier
    Merci
        • 1 / 2
        • 2
        • Dernier
    Tom's guide dans le monde
    • Allemagne
    • Italie
    • Irlande
    • Royaume Uni
    • Etats Unis
    Suivre Tom's Guide
    Inscrivez-vous à la Newsletter
    • ajouter à twitter
    • ajouter à facebook
    • ajouter un flux RSS