Claire CHAZAL

ça y est je n'ai plus de popup vous êtes trop fort!! Bon week end et continuer à aider les personnes qui sont dans la dech' Merci encore!

re bonjour, voilà les log: Log of AproposFix v1 ************ Running from directory: C:\Documents and Settings\salmon\Bureau\Spyware Doctor\Nouveau dossier\aproposfix ************ Registry entries found: [HKEY_LOCAL_MACHINE\Software\CsiiEAx3LQ4m] @="OLH.n:mWXXWXXYXz\\g\\gEzgWXXWmZX2sxny2.XOUOPAIdcX9NERANOXO97EJPAHYOUO" "Device"="\\\\.\\PR6R6iP6" "DriverPath"="C:\\WINDOWS\\system32\\drivers\\sdbintel.sys" "DriverName"="splSDTC" "HideUninstallerName"="C:\\Program Files\\Netinrar\\ctfcmd.exe" "HDll"="C:\\WINDOWS\\system32\\dbmpagnt.dll" "ServerAddress"="adchannel.contextplus.net" "LegalNote"="http://adchannel.contextplus.net/legal-note/nonbranded.html" "PartnerId"="CP.LAV" "InstallationId"="{Xb333b0f-3ff5-4cb3-a2f6-257137482647}" "PageFiltering"=dword:00000001 "ClientName"="C:\\Program Files\\Netinrar\\setd3d8.exe" "AutoUpdater"="C:\\WINDOWS\\system32\\psbs32gt.exe" "Version"="2.0.106" ************ Removing hidden service: Service splSDTC removed. Removing hidden folder: Deletion of folder Netinrar succeeded! Deleting files: Deletion of file C:\WINDOWS\system32\drivers\sdbintel.sys succeeded! Deletion of file C:\WINDOWS\system32\psbs32gt.exe succeeded! Deletion of file C:\WINDOWS\system32\dbmpagnt.dll succeeded! Backing up files: Done! Removing registry entries: REGEDIT4 [-HKEY_CURRENT_USER\Software\CsiiEAx3LQ4m] [-HKEY_LOCAL_MACHINE\Software\CsiiEAx3LQ4m] Done! Finished! et le suivant: Logfile of HijackThis v1.99.1 Scan saved at 21:47:39, on 05/11/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\S24EvMon.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Network Associates\Common Framework\FrameworkService.exe C:\Program Files\Network Associates\VirusScan\Mcshield.exe C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe C:\WINDOWS\system32\RegSrvc.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe C:\WINDOWS\system32\wuauclt.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\rundll32.exe C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe C:\Program Files\Microsoft AntiSpyware\gcasServ.exe C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe C:\Program Files\Nokia\PC Suite for Nokia 3650\connmngmntbox.exe C:\Program Files\Nokia\PC Suite for Nokia 3650\ectaskscheduler.exe C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe C:\PROGRA~1\Nokia\PCSUIT~1\Elogerr.exe C:\Program Files\Intuwave\Shared\mRouterRunTime\mRouterRuntime.exe C:\PROGRA~1\Nokia\PCSUIT~1\BROADC~1.EXE C:\PROGRA~1\Nokia\PCSUIT~1\SCRFS.exe C:\Documents and Settings\salmon\Bureau\Spyware Doctor\Nouveau dossier\hijackthis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.yahoo.com/ R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.yahoo.com/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O4 - HKLM\..\Run: [bluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM\..\Run: [shStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe" O4 - HKLM\..\Run: [PRONoMgr.exe] c:\Program Files\Intel\PROSetWireless\NCS\PROSet\PRONoMgr.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe" O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [spySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray O4 - HKCU\..\Run: [WINSOS VERIFY] "C:\Program Files\WINSOS\WINSOS.EXE" MINI O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - Global Startup: PCSuiteForNokia3650 Detect.lnk = ? O4 - Global Startup: PCSuiteForNokia3650 TS.lnk = ? O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\WINDOWS\system32\shdocvw.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com/download/cult.cab O16 - DPF: {D1B09964-F8F7-4FAB-8F2D-B8B2AC3D3BD3} (INIwallet_Eng Control) - http://plugin.inicis.com/INIwallet_Eng.cab O20 - Winlogon Notify: Unimodem - C:\WINDOWS\system32\jzcript.dll (file missing) O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe O23 - Service: RegSrvc - Intel Corporation - C:\WINDOWS\system32\RegSrvc.exe O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\WINDOWS\system32\S24EvMon.exe O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe fin!!(?)

******** 21:22: | Start of Session, vendredi 4 novembre 2005 | 21:22: Spy Sweeper started 21:22: Sweep initiated using definitions version 567 21:22: Starting Memory Sweep 21:25: Memory Sweep Complete, Elapsed Time: 00:02:36 21:25: Starting Registry Sweep 21:25: Registry Sweep Complete, Elapsed Time:00:00:09 21:25: Starting Cookie Sweep 21:25: Found Spy Cookie: 247realmedia cookie 21:25: salmon@247realmedia[2].txt (ID = 1953) 21:25: Found Spy Cookie: adtech cookie 21:25: salmon@adtech[2].txt (ID = 2155) 21:25: Found Spy Cookie: bluestreak cookie 21:25: salmon@bluestreak[2].txt (ID = 2314) 21:25: Found Spy Cookie: serving-sys cookie 21:25: salmon@serving-sys[1].txt (ID = 3343) 21:25: Found Spy Cookie: tradedoubler cookie 21:25: salmon@tradedoubler[2].txt (ID = 3575) 21:25: Found Spy Cookie: xiti cookie 21:25: salmon@xiti[1].txt (ID = 3717) 21:25: Cookie Sweep Complete, Elapsed Time: 00:00:00 21:25: Starting File Sweep 21:57: File Sweep Complete, Elapsed Time: 00:31:43 21:57: Full Sweep has completed. Elapsed time 00:34:34 21:57: Traces Found: 6 21:58: Removal process initiated 21:58: Quarantining All Traces: 247realmedia cookie 21:58: Quarantining All Traces: adtech cookie 21:58: Quarantining All Traces: bluestreak cookie 21:58: Quarantining All Traces: serving-sys cookie 21:58: Quarantining All Traces: tradedoubler cookie 21:58: Quarantining All Traces: xiti cookie 21:58: Removal process completed. Elapsed time 00:00:02 ******** voilà! J'attends tes ordres!

Aller courage! je suis sur que c'est presque fini, malgré ce message d'erreur: Voici le log de RegSrch "adchannel": REGEDIT4 ; RegSrch.vbs © Bill James ; Registry search results for string "adchannel" 04/11/2005 21:11:40 ; NOTE: This file will be deleted when you close WordPad. ; You must manually save this file to a new location if you want to refer to it again later. ; (If you save the file with a .reg extension, you can use it to restore any Registry changes you make to these values.) [HKEY_LOCAL_MACHINE\SOFTWARE\CsiiEAx3LQ4m] "ServerAddress"="adchannel.contextplus.net" [HKEY_LOCAL_MACHINE\SOFTWARE\CsiiEAx3LQ4m] "LegalNote"="http://adchannel.contextplus.net/legal-note/nonbranded.html" [HKEY_USERS\S-1-5-21-1715567821-1343024091-1708537768-1003\Software\CsiiEAx3LQ4m\Cookies\Data\net\contextplus\adchannel.contextplus.net/services] [HKEY_USERS\S-1-5-21-1715567821-1343024091-1708537768-1003\Software\CsiiEAx3LQ4m\Cookies\Data\net\contextplus\adchannel.contextplus.net/services] "freq_caps4"="MSCF;freq_caps4;AAAAAAAAAAAAAAAAjn5qQwUAAADfHAAAAQAAAAAAAAB2HwAAAAAAAAEAAABrWWpDpR8AAAAAAAABAAAAxBdqQ9QfAAAAAAAAAwAAAHdZakMyYWpDQGhqQwAgAAAAAAAAAwAAAHhZakM8YWpD8mhqQwju7Zo|||||;3434642176;30479594;adchannel.contextplus.net;/services;0;{NULL};" et celui de HijackThis Logfile of HijackThis v1.99.1 Scan saved at 21:21:02, on 04/11/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\S24EvMon.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\rundll32.exe C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe C:\Program Files\Microsoft AntiSpyware\gcasServ.exe C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe C:\Program Files\Nokia\PC Suite for Nokia 3650\connmngmntbox.exe C:\Program Files\Intuwave\Shared\mRouterRunTime\mRouterRuntime.exe C:\Program Files\Nokia\PC Suite for Nokia 3650\ectaskscheduler.exe C:\PROGRA~1\Nokia\PCSUIT~1\Elogerr.exe C:\PROGRA~1\Nokia\PCSUIT~1\BROADC~1.EXE C:\PROGRA~1\Nokia\PCSUIT~1\SCRFS.exe C:\Program Files\Network Associates\Common Framework\FrameworkService.exe C:\Program Files\Network Associates\VirusScan\Mcshield.exe C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe C:\WINDOWS\system32\RegSrvc.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Documents and Settings\salmon\Bureau\Spyware Doctor\Nouveau dossier\hijackthis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.yahoo.com/ R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.yahoo.com/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O4 - HKLM\..\Run: [bluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM\..\Run: [shStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe" O4 - HKLM\..\Run: [PRONoMgr.exe] c:\Program Files\Intel\PROSetWireless\NCS\PROSet\PRONoMgr.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe" O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [spySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray O4 - HKCU\..\Run: [WINSOS VERIFY] "C:\Program Files\WINSOS\WINSOS.EXE" MINI O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - Global Startup: PCSuiteForNokia3650 Detect.lnk = ? O4 - Global Startup: PCSuiteForNokia3650 TS.lnk = ? O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\WINDOWS\system32\shdocvw.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com/download/cult.cab O16 - DPF: {D1B09964-F8F7-4FAB-8F2D-B8B2AC3D3BD3} (INIwallet_Eng Control) - http://plugin.inicis.com/INIwallet_Eng.cab O20 - Winlogon Notify: Unimodem - C:\WINDOWS\system32\jzcript.dll (file missing) O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe O23 - Service: RegSrvc - Intel Corporation - C:\WINDOWS\system32\RegSrvc.exe O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\WINDOWS\system32\S24EvMon.exe O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe dès que sweeper à fini je vous le poste

J'ai lancé sweeper (en mode normal, je n'étais pas en mode sans echec). Sweeper ne m'a pas demander de redémarrer cette fois! voici le log de cette session ******** 17:37: | Start of Session, vendredi 4 novembre 2005 | 17:37: Spy Sweeper started 17:37: Sweep initiated using definitions version 564 17:37: Starting Memory Sweep 17:40: Memory Sweep Complete, Elapsed Time: 00:02:57 17:40: Starting Registry Sweep 17:41: Registry Sweep Complete, Elapsed Time:00:00:09 17:41: Starting Cookie Sweep 17:41: Found Spy Cookie: adtech cookie 17:41: salmon@adtech[1].txt (ID = 2155) 17:41: Found Spy Cookie: bluestreak cookie 17:41: salmon@bluestreak[2].txt (ID = 2314) 17:41: Found Spy Cookie: casalemedia cookie 17:41: salmon@casalemedia[1].txt (ID = 2354) 17:41: Cookie Sweep Complete, Elapsed Time: 00:00:00 17:41: Starting File Sweep 18:14: File Sweep Complete, Elapsed Time: 00:33:21 18:14: Full Sweep has completed. Elapsed time 00:36:33 18:14: Traces Found: 3 18:16: Removal process initiated 18:16: Quarantining All Traces: adtech cookie 18:16: Quarantining All Traces: bluestreak cookie 18:16: Quarantining All Traces: casalemedia cookie 18:16: Removal process completed. Elapsed time 00:00:04 ******** 16:00: | Start of Session, vendredi 4 novembre 2005 | 16:00: Spy Sweeper started 16:00: Sweep initiated using definitions version 564 16:00: Starting Memory Sweep 16:04: Memory Sweep Complete, Elapsed Time: 00:03:48 16:04: Starting Registry Sweep 16:04: Registry Sweep Complete, Elapsed Time:00:00:14 16:04: Starting Cookie Sweep 16:04: Found Spy Cookie: bluestreak cookie 16:04: salmon@bluestreak[1].txt (ID = 2314) 16:04: Found Spy Cookie: comclick cookie 16:04: [email protected][2].txt (ID = 2450) 16:04: Found Spy Cookie: tradedoubler cookie 16:04: salmon@tradedoubler[2].txt (ID = 3575) 16:04: Cookie Sweep Complete, Elapsed Time: 00:00:00 16:04: Starting File Sweep 16:32: File Sweep Complete, Elapsed Time: 00:27:34 16:32: Full Sweep has completed. Elapsed time 00:31:24 16:32: Traces Found: 3 16:40: Removal process initiated 16:40: Quarantining All Traces: bluestreak cookie 16:40: Quarantining All Traces: comclick cookie 16:40: Quarantining All Traces: tradedoubler cookie 16:40: Removal process completed. Elapsed time 00:00:03 17:08: The Spy Communication shield has blocked access to: focusin.ads.targetnet.com 17:08: The Spy Communication shield has blocked access to: focusin.ads.targetnet.com ******** A priori, à part les 3 cookies il trouve plus rien, le pb c'est plutot les 2 17:08: The Spy Communication shield has blocked access to: focusin.ads.targetnet.com 17:08: The Spy Communication shield has blocked access to: focusin.ads.targetnet.com Qui me posse problème (ça signifie qu'un prog essait d'accéder à un site non?) Dois je relancer l2mfix?

Alors, alors!!! L2MFIX find log 1.04a These are the registry keys present ********************************************************************************** Winlogon/notify: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify] "Asynchronous"=dword:00000000 "DllName"="" "Impersonate"=dword:00000000 "Logon"="WinLogon" "Logoff"="WinLogoff" "Shutdown"="WinShutdown" [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Unimodem] "Asynchronous"=dword:00000000 "DllName"="C:\\WINDOWS\\system32\\jzcript.dll" "Impersonate"=dword:00000000 "Logon"="WinLogon" "Logoff"="WinLogoff" "Shutdown"="WinShutdown" RegDACL 5.1 - Permissions Manager for Registry keys for Windows NT 4 and above Copyright © 1999-2001 Frank Heyne Software (http://www.heysoft.de) This program is Freeware, use it on your own risk! Access Control List for Registry key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify: (ID-NI) ALLOW Read BUILTIN\Utilisateurs (ID-IO) ALLOW Read BUILTIN\Utilisateurs (ID-NI) ALLOW Read BUILTIN\Utilisateurs avec pouvoir (ID-IO) ALLOW Read BUILTIN\Utilisateurs avec pouvoir (ID-NI) ALLOW Full access BUILTIN\Administrateurs (ID-IO) ALLOW Full access BUILTIN\Administrateurs (ID-NI) ALLOW Full access AUTORITE NT\SYSTEM (ID-IO) ALLOW Full access AUTORITE NT\SYSTEM (ID-IO) ALLOW Full access CREATEUR PROPRIETAIRE ********************************************************************************** useragent: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform] "{16C57968-3624-B2BF-7F24-69510B085C83}"="" ********************************************************************************** Shell Extension key: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved] "{00022613-0000-0000-C000-000000000046}"="Feuille de propri‚t‚s du fichier multim‚dia" "{176d6597-26d3-11d1-b350-080036a75b03}"="Gestion de scanneur ICM" "{1F2E5C40-9550-11CE-99D2-00AA006E086C}"="Page de s‚curit‚ NTFS" "{3EA48300-8CF6-101B-84FB-666CCB9BCD32}"="Page des propri‚t‚s de OLE DocFile" "{40dd6e20-7c17-11ce-a804-00aa003ca9f6}"="Extensions de l'environnement pour le partage" "{41E300E0-78B6-11ce-849B-444553540000}"="PlusPack CPL Extension" "{42071712-76d4-11d1-8b24-00a0c9068ff3}"="Extension Affichage Carte du Panneau de configuration" "{42071713-76d4-11d1-8b24-00a0c9068ff3}"="Extension Affichage ?cran du Panneau de configuration" "{42071714-76d4-11d1-8b24-00a0c9068ff3}"="Extension Affichage Panorama du Panneau de configuration" "{4E40F770-369C-11d0-8922-00A024AB2DBB}"="Page de s‚curit‚ DS" "{513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8}"="Page de compatibilit‚" "{56117100-C0CD-101B-81E2-00AA004AE837}"="Gestionnaire de donn‚es endommag‚es de l'environnement" "{59099400-57FF-11CE-BD94-0020AF85B590}"="Extension copie de disquette" "{59be4990-f85c-11ce-aff7-00aa003ca9f6}"="Extensions de l'environnement pour les objets r‚seau de Microsoft Windows" "{5DB2625A-54DF-11D0-B6C4-0800091AA605}"="Gestion d'‚cran ICM" "{675F097E-4C4D-11D0-B6C1-0800091AA605}"="Gestion d'imprimante ICM" "{764BF0E1-F219-11ce-972D-00AA00A14F56}"="Extensions de l'environnement de compression de fichiers" "{77597368-7b15-11d0-a0c2-080036af3f03}"="Extension de l'environnement d'imprimante Web" "{7988B573-EC89-11cf-9C00-00AA00A14F56}"="Disk Quota UI" "{853FE2B1-B769-11d0-9C4E-00C04FB6C6FA}"="Menu contextuel de cryptage" "{85BBD920-42A0-1069-A2E4-08002B30309D}"="Porte-documents" "{88895560-9AA2-1069-930E-00AA0030EBC8}"="Extension ic“ne HyperTerminal" "{BD84B380-8CA2-1069-AB1D-08000948F534}"="Fonts" "{DBCE2480-C732-101B-BE72-BA78E9AD5B27}"="Profil ICC" "{F37C5810-4D3F-11d0-B4BF-00AA00BBB723}"="Page de s‚curit‚ des imprimantes" "{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}"="Extensions de l'environnement pour le partage" "{f92e8c40-3d33-11d2-b1aa-080036a75b03}"="Display TroubleShoot CPL Extension" "{7444C717-39BF-11D1-8CD9-00C04FC29D45}"="Extension de cryptographie PKO" "{7444C719-39BF-11D1-8CD9-00C04FC29D45}"="Extension de cryptographie Sign" "{7007ACC7-3202-11D1-AAD2-00805FC1270E}"="Connexions r‚seau" "{992CFFA0-F557-101A-88EC-00DD010CCC48}"="Connexions r‚seau" "{E211B736-43FD-11D1-9EFB-0000F8757FCD}"="&Scanneurs et appareils photo" "{FB0C9C8A-6C50-11D1-9F1D-0000F8757FCD}"="&Scanneurs et appareils photo" "{905667aa-acd6-11d2-8080-00805f6596d2}"="&Scanneurs et appareils photo" "{3F953603-1008-4f6e-A73A-04AAC7A992F1}"="&Scanneurs et appareils photo" "{83bbcbf3-b28a-4919-a5aa-73027445d672}"="&Scanneurs et appareils photo" "{F0152790-D56E-4445-850E-4F3117DB740C}"="Remote Sessions CPL Extension" "{60254CA5-953B-11CF-8C96-00AA00B8708C}"="Extensions de l'interpr‚teur de commandes pour l'environnement d'ex‚cution de scripts Windows" "{2206CDB2-19C1-11D1-89E0-00C04FD7A829}"="Liaison de donn‚es Microsoft" "{DD2110F0-9EEF-11cf-8D8E-00AA0060F5BF}"="Tasks Folder Icon Handler" "{797F1E90-9EDD-11cf-8D8E-00AA0060F5BF}"="Tasks Folder Shell Extension" "{D6277990-4C6A-11CF-8D87-00AA0060F5BF}"="Tƒches planifi‚es" "{2559a1f7-21d7-11d4-bdaf-00c04f60b9f0}"="Set Program Access and Defaults" "{5F327514-6C5E-4d60-8F16-D07FA08A78ED}"="Auto Update Property Sheet Extension" "{0DF44EAA-FF21-4412-828E-260A8728E7F1}"="Barre des tƒches et menu D‚marrer" "{2559a1f0-21d7-11d4-bdaf-00c04f60b9f0}"="Rechercher" "{2559a1f1-21d7-11d4-bdaf-00c04f60b9f0}"="Aide et support" "{2559a1f2-21d7-11d4-bdaf-00c04f60b9f0}"="Aide et support" "{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}"="Ex‚cuter..." "{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}"="Internet" "{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}"="Courrier ‚lectronique" "{D20EA4E1-3957-11d2-A40B-0C5020524152}"="Polices" "{D20EA4E1-3957-11d2-A40B-0C5020524153}"="Outils d'administration" "{596AB062-B4D2-4215-9F74-E9109B0A8153}"="Page de propri‚t‚s des versions pr‚c‚dentes" "{9DB7A13C-F208-4981-8353-73CC61AE2783}"="Versions pr‚c‚dentes" "{875CB1A1-0F29-45de-A1AE-CFB4950D0B78}"="Audio Media Properties Handler" "{40C3D757-D6E4-4b49-BB41-0E5BBEA28817}"="Video Media Properties Handler" "{E4B29F9D-D390-480b-92FD-7DDB47101D71}"="Wav Properties Handler" "{87D62D94-71B3-4b9a-9489-5FE6850DC73E}"="Avi Properties Handler" "{A6FD9E45-6E44-43f9-8644-08598F5A74D9}"="Midi Properties Handler" "{c5a40261-cd64-4ccf-84cb-c394da41d590}"="Video Thumbnail Extractor" "{5E6AB780-7743-11CF-A12B-00AA004AE837}"="Barre d'outils Internet Microsoft" "{22BF0C20-6DA7-11D0-B373-00A0C9034938}"="?tat du t‚l‚chargement" "{91EA3F8B-C99B-11d0-9815-00C04FD91972}"="Dossier Bureau ‚tendu" "{6413BA2C-B461-11d1-A18A-080036B11A03}"="Dossier du shell augment‚" "{F61FFEC1-754F-11d0-80CA-00AA005B4383}"="BandProxy" "{7BA4C742-9E81-11CF-99D3-00AA004AE837}"="Bande du navigateur Microsoft" "{30D02401-6A81-11d0-8274-00C04FD5AE38}"="Bande de recherche" "{169A0691-8DF9-11d1-A1C4-00C04FD75D13}"="Volet int‚gr‚ de recherche" "{07798131-AF23-11d1-9111-00A0C98BA67D}"="Recherche Web" "{AF4F6510-F982-11d0-8595-00AA004CD6D8}"="Utilitaire des options de l'arborescence du Registre" "{01E04581-4EEE-11d0-BFE9-00AA005B4383}"="&Adresse" "{A08C11D2-A228-11d0-825B-00AA005B4383}"="BoŒte d'entr‚e de l'adresse" "{00BB2763-6A77-11D0-A535-00C04FD7D062}"="Saisie semi-automatique Microsoft" "{7376D660-C583-11d0-A3A5-00C04FD706EC}"="TridentImageExtractor" "{6756A641-DE71-11d0-831B-00AA005B4383}"="Liste de saisie semi-automatique MRU" "{6935DB93-21E8-4ccc-BEB9-9FE3C77A297A}"="Liste de saisie semi-automatique personnalis‚e MRU" "{7e653215-fa25-46bd-a339-34a2790f3cb7}"="Accessible" "{acf35015-526e-4230-9596-becbe19f0ac9}"="Barre de progrŠs auto-ouvrante" "{00BB2764-6A77-11D0-A535-00C04FD7D062}"="Liste de saisie semi-automatique de l'historique Microsoft" "{03C036F1-A186-11D0-824A-00AA005B4383}"="Liste de saisie semi-automatique du dossier Shell Microsoft" "{00BB2765-6A77-11D0-A535-00C04FD7D062}"="Conteneur de la liste de saisie semi-automatique multiple Microsoft" "{ECD4FC4E-521C-11D0-B792-00A0C90312E1}"="Menu Site de bandes" "{3CCF8A41-5C85-11d0-9796-00AA00B90ADF}"="Shell DeskBarApp" "{ECD4FC4C-521C-11D0-B792-00A0C90312E1}"="Barre du Bureau" "{ECD4FC4D-521C-11D0-B792-00A0C90312E1}"="Shell Rebar BandSite" "{DD313E04-FEFF-11d1-8ECD-0000F87A470C}"="Assistance utilisateur" "{EF8AD2D1-AE36-11D1-B2D2-006097DF8C11}"="ParamŠtres du dossier global" "{EFA24E61-B078-11d0-89E4-00C04FC9E26E}"="Favorites Band" "{0A89A860-D7B1-11CE-8350-444553540000}"="Shell Automation Inproc Service" "{E7E4BC40-E76A-11CE-A9BB-00AA004AE837}"="Shell DocObject Viewer" "{A5E46E3A-8849-11D1-9D8C-00C04FC99D61}"="Microsoft Browser Architecture" "{FBF23B40-E3F0-101B-8488-00AA003E56F8}"="InternetShortcut" "{3C374A40-BAE4-11CF-BF7D-00AA006946EE}"="Microsoft Url History Service" "{FF393560-C2A7-11CF-BFF4-444553540000}"="Historique" "{7BD29E00-76C1-11CF-9DD0-00A0C9034933}"="Temporary Internet Files" "{7BD29E01-76C1-11CF-9DD0-00A0C9034933}"="Temporary Internet Files" "{CFBFAE00-17A6-11D0-99CB-00C04FD64497}"="Microsoft Url Search Hook" "{A2B0DD40-CC59-11d0-A3A5-00C04FD706EC}"="Image de d‚marrage de la Suite IE4" "{67EA19A0-CCEF-11d0-8024-00C04FD75D13}"="CDF Extension Copy Hook" "{131A6951-7F78-11D0-A979-00C04FD705A2}"="ISFBand OC" "{9461b922-3c5a-11d2-bf8b-00c04fb93661}"="Search Assistant OC" "{3DC7A020-0ACD-11CF-A9BB-00AA004AE837}"="Internet" "{871C5380-42A0-1069-A2EA-08002B30309D}"="Internet Name Space" "{EFA24E64-B078-11d0-89E4-00C04FC9E26E}"="Explorer Band" "{9E56BE60-C50F-11CF-9A2C-00A0C90A90CE}"="Sendmail service" "{9E56BE61-C50F-11CF-9A2C-00A0C90A90CE}"="Sendmail service" "{88C6C381-2E85-11D0-94DE-444553540000}"="Dossier ActiveX Cache" "{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"="WebCheck" "{ABBE31D0-6DAE-11D0-BECA-00C04FD940BE}"="Subscription Mgr" "{F5175861-2688-11d0-9C5E-00AA00A45957}"="Dossier Inscription" "{08165EA0-E946-11CF-9C87-00AA005127ED}"="WebCheckWebCrawler" "{E3A8BDE6-ABCE-11d0-BC4B-00C04FD929DB}"="WebCheckChannelAgent" "{E8BB6DC0-6B4E-11d0-92DB-00A0C90C2BD7}"="TrayAgent" "{7D559C10-9FE9-11d0-93F7-00AA0059CE02}"="Code Download Agent" "{E6CC6978-6B6E-11D0-BECA-00C04FD940BE}"="ConnectionAgent" "{D8BD2030-6FC9-11D0-864F-00AA006809D9}"="PostAgent" "{7FC0B86E-5FA7-11d1-BC7C-00C04FD929DB}"="WebCheck SyncMgr Handler" "{352EC2B7-8B9A-11D1-B8AE-006008059382}"="Gestionnaire d'applications d'environnement" "{0B124F8F-91F0-11D1-B8B5-006008059382}"="?num‚rateur d'applications install‚es" "{CFCCC7A0-A282-11D1-9082-006008059382}"="Publication d'application Darwin" "{e84fda7c-1d6a-45f6-b725-cb260c236066}"="Shell Image Verbs" "{66e4e4fb-f385-4dd0-8d74-a2efd1bc6178}"="Shell Image Data Factory" "{00E7B358-F65B-4dcf-83DF-CD026B94BFD4}"="Autoplay for SlideShow" "{3F30C968-480A-4C6C-862D-EFC0897BB84B}"="Extracteur de miniatures de fichier + GDI" "{9DBD2C50-62AD-11d0-B806-00C04FD706EC}"="Gestionnaire de miniatures - Informations de r‚sum‚ (DOCFILES)" "{EAB841A0-9550-11cf-8C16-00805F1408F3}"="Extracteur de miniatures HTML" "{eb9b1153-3b57-4e68-959a-a3266bc3d7fe}"="Shell Image Property Handler" "{CC6EEFFB-43F6-46c5-9619-51D571967F7D}"="Assistant Publication de sites Web" "{add36aa8-751a-4579-a266-d66f5202ccbb}"="Commande d'impressions via le Web" "{6b33163c-76a5-4b6c-bf21-45de9cd503a1}"="Objet Assistant de publication Shell" "{58f1f272-9240-4f51-b6d4-fd63d1618591}"="Assistant Obtenir une identit‚ Passport" "{7A9D77BD-5403-11d2-8785-2E0420524153}"="Comptes d'utilisateurs" "{BD472F60-27FA-11cf-B8B4-444553540000}"="Compressed (zipped) Folder Right Drag Handler" "{888DCA60-FC0A-11CF-8F0F-00C04FD7D062}"="Compressed (zipped) Folder SendTo Target" "{f39a0dc0-9cc8-11d0-a599-00c04fd64433}"="Fichier de chaŒne" "{f3aa0dc0-9cc8-11d0-a599-00c04fd64434}"="Raccourci de chaŒne" "{f3ba0dc0-9cc8-11d0-a599-00c04fd64435}"="Channel Handler Object" "{f3da0dc0-9cc8-11d0-a599-00c04fd64437}"="Channel Menu" "{f3ea0dc0-9cc8-11d0-a599-00c04fd64438}"="Channel Properties" "{692F0339-CBAA-47e6-B5B5-3B84DB604E87}"="Extensions Manager Folder" "{63da6ec0-2e98-11cf-8d82-444553540000}"="FTP Folders Webview" "{883373C3-BF89-11D1-BE35-080036B11A03}"="Microsoft DocProp Shell Ext" "{A9CF0EAE-901A-4739-A481-E35B73E47F6D}"="Microsoft DocProp Inplace Edit Box Control" "{8EE97210-FD1F-4B19-91DA-67914005F020}"="Microsoft DocProp Inplace ML Edit Box Control" "{0EEA25CC-4362-4A12-850B-86EE61B0D3EB}"="Microsoft DocProp Inplace Droplist Combo Control" "{6A205B57-2567-4A2C-B881-F787FAB579A3}"="Microsoft DocProp Inplace Calendar Control" "{28F8A4AC-BBB3-4D9B-B177-82BFC914FA33}"="Microsoft DocProp Inplace Time Control" "{8A23E65E-31C2-11d0-891C-00A024AB2DBB}"="Directory Query UI" "{9E51E0D0-6E0F-11d2-9601-00C04FA31A86}"="Shell properties for a DS object" "{163FDC20-2ABC-11d0-88F0-00A024AB2DBB}"="Directory Object Find" "{F020E586-5264-11d1-A532-0000F8757D7E}"="Directory Start/Search Find" "{0D45D530-764B-11d0-A1CA-00AA00C16E65}"="Directory Property UI" "{62AE1F9A-126A-11D0-A14B-0800361B1103}"="Directory Context Menu Verbs" "{ECF03A33-103D-11d2-854D-006008059367}"="MyDocs Copy Hook" "{ECF03A32-103D-11d2-854D-006008059367}"="MyDocs Drop Target" "{4a7ded0a-ad25-11d0-98a8-0800361b1103}"="MyDocs Properties" "{750fdf0e-2a26-11d1-a3ea-080036587f03}"="Offline Files Menu" "{10CFC467-4392-11d2-8DB4-00C04FA31A66}"="Offline Files Folder Options" "{AFDB1F70-2A4C-11d2-9039-00C04F8EEB3E}"="Dossier Fichiers hors connexion" "{143A62C8-C33B-11D1-84FE-00C04FA34A14}"="Microsoft Agent Character Property Sheet Handler" "{ECCDF543-45CC-11CE-B9BF-0080C87CDBA6}"="DfsShell" "{60fd46de-f830-4894-a628-6fa81bc0190d}"="%DESC_PublishDropTarget%" "{7A80E4A8-8005-11D2-BCF8-00C04F72C717}"="MMC Icon Handler" "{0CD7A5C0-9F37-11CE-AE65-08002B2E1262}"=".CAB file viewer" "{32714800-2E5F-11d0-8B85-00AA0044F941}"="Des &personnes..." "{8DD448E6-C188-4aed-AF92-44956194EB1F}"="Windows Media Player Play as Playlist Context Menu Handler" "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"="Windows Media Player Burn Audio CD Context Menu Handler" "{F1B9284F-E9DC-4e68-9D7E-42362A59F0FD}"="Windows Media Player Add to Playlist Context Menu Handler" "{BDEADF00-C265-11D0-BCED-00A0C90AB50F}"="Dossiers Web" "{0006F045-0000-0000-C000-000000000046}"="Microsoft Outlook Custom Icon Handler" "{42042206-2D85-11D3-8CFF-005004838597}"="Microsoft Office HTML Icon Handler" "{640167b4-59b0-47a6-b335-a6b3c0695aea}"="Portable Media Devices" "{cc86590a-b60a-48e6-996b-41d25ed39a1e}"="Portable Media Devices Menu" "{F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4}"="Shell Extensions for RealOne Player" "{6B19FEC2-A45B-11CF-9045-00A0C9039735}"="Registered ActiveX Controls" "{D545EBD1-BD92-11CF-8772-00A0C9039735}"="Developer Studio Components" "{e57ce731-33e8-4c51-8354-bb4de9d215d1}"="P‚riph‚riques Plug and Play universels" "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"="WinRAR shell extension" "{F087F83E-36EF-47CB-83A3-861A9CF4F61A}"="" "{225A7D95-7246-45CB-8845-6768CDC5C7B9}"="" "{879D1CD2-B8BE-4256-BB66-89FFB7A4C2BD}"="" "{C242EC40-E591-4590-B350-41338B51E3DC}"="" "{B1ACD05F-FA25-4F7C-BE38-A103E14A9F8F}"="" "{42D17FC3-7D0B-4510-BB58-70838D8AF4CA}"="" "{C37C4409-184E-4B20-ADF4-73E7EF07FA89}"="" "{7C9D5882-CB4A-4090-96C8-430BFE8B795B}"="Webroot Spy Sweeper Context Menu Integration" ********************************************************************************** HKEY ROOT CLASSIDS: Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{F087F83E-36EF-47CB-83A3-861A9CF4F61A}] @="" [HKEY_CLASSES_ROOT\CLSID\{F087F83E-36EF-47CB-83A3-861A9CF4F61A}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{F087F83E-36EF-47CB-83A3-861A9CF4F61A}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{F087F83E-36EF-47CB-83A3-861A9CF4F61A}\InprocServer32] @="C:\\WINDOWS\\system32\\ktdla.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{225A7D95-7246-45CB-8845-6768CDC5C7B9}] @="" [HKEY_CLASSES_ROOT\CLSID\{225A7D95-7246-45CB-8845-6768CDC5C7B9}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{225A7D95-7246-45CB-8845-6768CDC5C7B9}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{225A7D95-7246-45CB-8845-6768CDC5C7B9}\InprocServer32] @="C:\\WINDOWS\\system32\\mvcpx32r.dLL" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{879D1CD2-B8BE-4256-BB66-89FFB7A4C2BD}] @="" [HKEY_CLASSES_ROOT\CLSID\{879D1CD2-B8BE-4256-BB66-89FFB7A4C2BD}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{879D1CD2-B8BE-4256-BB66-89FFB7A4C2BD}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{879D1CD2-B8BE-4256-BB66-89FFB7A4C2BD}\InprocServer32] @="C:\\WINDOWS\\system32\\guard.tmp" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{B1ACD05F-FA25-4F7C-BE38-A103E14A9F8F}] @="" [HKEY_CLASSES_ROOT\CLSID\{B1ACD05F-FA25-4F7C-BE38-A103E14A9F8F}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{B1ACD05F-FA25-4F7C-BE38-A103E14A9F8F}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{B1ACD05F-FA25-4F7C-BE38-A103E14A9F8F}\InprocServer32] @="C:\\WINDOWS\\system32\\guard.tmp" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{42D17FC3-7D0B-4510-BB58-70838D8AF4CA}] @="" [HKEY_CLASSES_ROOT\CLSID\{42D17FC3-7D0B-4510-BB58-70838D8AF4CA}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{42D17FC3-7D0B-4510-BB58-70838D8AF4CA}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{42D17FC3-7D0B-4510-BB58-70838D8AF4CA}\InprocServer32] @="C:\\WINDOWS\\system32\\wpn32spl.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{C37C4409-184E-4B20-ADF4-73E7EF07FA89}] @="" [HKEY_CLASSES_ROOT\CLSID\{C37C4409-184E-4B20-ADF4-73E7EF07FA89}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{C37C4409-184E-4B20-ADF4-73E7EF07FA89}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{C37C4409-184E-4B20-ADF4-73E7EF07FA89}\InprocServer32] @="C:\\WINDOWS\\system32\\guard.tmp" "ThreadingModel"="Apartment" ********************************************************************************** Files Found are not all bad files: C:\WINDOWS\SYSTEM32\ browseui.dll Sat 3 Sep 2005 1:06:12 A.... 1 020 416 996,50 K cdfview.dll Sat 3 Sep 2005 1:06:12 A.... 152 064 148,50 K cdosys.dll Sat 10 Sep 2005 2:55:14 A.... 2 067 968 1,97 M cmdlin~1.dll Thu 6 Oct 2005 14:19:02 A.... 98 304 96,00 K cmdlin~2.dll Fri 7 Oct 2005 22:41:12 A.... 43 520 42,50 K danim.dll Sat 3 Sep 2005 1:06:12 A.... 1 056 256 1,00 M dxtrans.dll Sat 3 Sep 2005 1:06:12 A.... 205 312 200,50 K dyutil.dll Wed 26 Oct 2005 23:10:52 ..S.R 234 961 229,45 K extmgr.dll Sat 3 Sep 2005 1:06:12 A.... 55 808 54,50 K i4060e~1.dll Thu 3 Nov 2005 15:02:10 ..S.R 233 657 228,18 K iepeers.dll Sat 3 Sep 2005 1:06:12 A.... 251 392 245,50 K inseng.dll Sat 3 Sep 2005 1:06:12 A.... 96 768 94,50 K islzma.dll Fri 21 Oct 2005 15:50:14 A.... 102 912 100,50 K kqdfi.dll Sun 23 Oct 2005 3:41:56 ..S.R 236 607 231,06 K ktdla.dll Sun 30 Oct 2005 4:02:00 ..S.R 233 657 228,18 K kudhe220.dll Thu 27 Oct 2005 23:27:00 ..S.R 235 299 229,78 K linkinfo.dll Thu 1 Sep 2005 2:43:38 A.... 19 968 19,50 K m0rmla~1.dll Fri 28 Oct 2005 23:23:38 ..S.R 236 489 230,95 K mgimsg.dll Fri 28 Oct 2005 11:42:02 ..S.R 234 961 229,45 K mpiole16.dll Wed 26 Oct 2005 8:47:48 ..S.R 235 299 229,78 K mshtml.dll Tue 4 Oct 2005 16:26:06 A.... 3 013 120 2,87 M mshtmled.dll Sat 3 Sep 2005 1:06:12 A.... 448 512 438,00 K msrating.dll Sat 3 Sep 2005 1:06:12 A.... 146 432 143,00 K mstime.dll Sat 3 Sep 2005 1:06:12 A.... 530 432 518,00 K mvcpx32r.dll Fri 21 Oct 2005 17:25:42 ..S.R 235 813 230,29 K n08o0a~1.dll Fri 21 Oct 2005 20:53:56 ..S.R 235 341 229,82 K netman.dll Mon 22 Aug 2005 19:35:10 A.... 197 632 193,00 K nwwks.dll Thu 11 Aug 2005 16:11:40 A.... 65 024 63,50 K ondbse32.dll Sat 29 Oct 2005 0:04:18 ..S.R 235 299 229,78 K pngfilt.dll Sat 3 Sep 2005 1:06:12 A.... 39 424 38,50 K q0nu0a~1.dll Thu 3 Nov 2005 19:30:26 ..S.R 234 191 228,70 K quartz.dll Tue 30 Aug 2005 4:55:44 A.... 1 293 312 1,23 M safolder.dll Thu 3 Nov 2005 14:44:34 ..S.R 234 191 228,70 K scclient.dll Tue 25 Oct 2005 23:22:10 ..S.R 234 961 229,45 K shdocvw.dll Sat 3 Sep 2005 1:06:12 A.... 1 484 288 1,41 M shell32.dll Fri 23 Sep 2005 4:07:00 A.... 8 506 880 8,11 M shlwapi.dll Sat 3 Sep 2005 1:06:12 A.... 474 112 463,00 K sirrnfr.dll Thu 3 Nov 2005 1:02:38 ..S.R 234 191 228,70 K umpnpmgr.dll Tue 23 Aug 2005 4:39:36 A.... 124 928 122,00 K urlmon.dll Sat 3 Sep 2005 1:06:12 A.... 605 696 591,50 K wininet.dll Sat 3 Sep 2005 1:06:12 A.... 662 528 647,00 K winsrv.dll Thu 1 Sep 2005 2:43:38 A.... 292 352 285,50 K wpn32spl.dll Thu 3 Nov 2005 14:52:44 ..S.R 233 657 228,18 K wrlogo~1.dll Mon 24 Oct 2005 12:19:50 A.... 492 544 481,00 K wrlzma.dll Mon 24 Oct 2005 12:19:46 A.... 17 920 17,50 K 45 items found: 45 files (16 H/S), 0 directories. Total of file sizes: 27 324 398 bytes 26,05 M Locate .tmp files: No matches found. ********************************************************************************** Directory Listing of system files: Le volume dans le lecteur C n'a pas de nom. Le num‚ro de s‚rie du volume est 7CB8-C5E4 R‚pertoire de C:\WINDOWS\System32 03/11/2005 19:30 234ÿ191 q0nu0a59ed.dll 03/11/2005 15:02 233ÿ657 i4060edseh060.dll 03/11/2005 14:52 233ÿ657 wpn32spl.dll 03/11/2005 14:44 234ÿ191 safolder.dll 03/11/2005 01:02 234ÿ191 sirrnfr.dll 30/10/2005 04:01 233ÿ657 ktdla.dll 29/10/2005 00:04 235ÿ299 ondbse32.dll 28/10/2005 23:23 236ÿ489 m0rmla911d.dll 28/10/2005 11:42 234ÿ961 mgimsg.dll 27/10/2005 23:26 235ÿ299 kudhe220.dll 26/10/2005 23:10 234ÿ961 dyutil.dll 26/10/2005 08:47 235ÿ299 mpiole16.dll 25/10/2005 23:22 234ÿ961 scclient.dll 23/10/2005 03:41 236ÿ607 kqdfi.dll 21/10/2005 20:53 235ÿ341 n08o0al3edq.dll 21/10/2005 17:25 235ÿ813 mvcpx32r.dLL 16/10/2005 17:53 <REP> dllcache 29/03/2005 15:50 <REP> Microsoft 16 fichier(s) 3ÿ758ÿ574 octets 2 R‚p(s) 171ÿ085ÿ824 octets libres Voilà!

Mon problème semble réglé puisque je n'ai plus de fenêtres intempestives ni de messages dans spy sweeper m'indiquant que mon ordinateur essaye de se connecter à www.ad_a_w_a_r_e.com mais "est ce l'arbre qui cache la foret ?" ] Reste-il thread tapis dans l'ombre, des processus malveillants qui veillent chacun de mes pas? C. Chazale paranoïaque

voici une version encore plus light (sans spy communication ni truc du style 21:23: 00006e5d_43597732_000eb3c9 (ID = 0)) ******** 01:17: | Start of Session, vendredi 4 novembre 2005 | 01:17: Spy Sweeper started 01:17: Sweep initiated using definitions version 564 01:17: Starting Memory Sweep 01:17: Sweep Canceled 01:17: Memory Sweep Complete, Elapsed Time: 00:00:05 01:17: Traces Found: 0 01:17: Deletion from quarantine initiated 01:17: Processing: xiti cookie 01:17: Deletion from quarantine completed. Elapsed time 00:00:00 01:17: | End of Session, vendredi 4 novembre 2005 | ******** 00:35: | Start of Session, vendredi 4 novembre 2005 | 00:35: Spy Sweeper started 00:35: Sweep initiated using definitions version 564 00:35: Starting Memory Sweep 00:37: Memory Sweep Complete, Elapsed Time: 00:01:50 00:37: Starting Registry Sweep 00:37: Registry Sweep Complete, Elapsed Time:00:00:07 00:37: Starting Cookie Sweep 00:37: Found Spy Cookie: xiti cookie 00:37: salmon@xiti[1].txt (ID = 3717) 00:37: Cookie Sweep Complete, Elapsed Time: 00:00:02 00:37: Starting File Sweep 01:06: File Sweep Complete, Elapsed Time: 00:29:03 01:06: Full Sweep has completed. Elapsed time 00:31:05 01:06: Traces Found: 1 01:16: Removal process initiated 01:17: Quarantining All Traces: xiti cookie 01:17: Removal process completed. Elapsed time 00:00:01 01:17: | End of Session, vendredi 4 novembre 2005 | ******** 00:33: | Start of Session, vendredi 4 novembre 2005 | 00:33: Spy Sweeper started 00:33: Sweep initiated using definitions version 564 00:33: Starting Memory Sweep 00:33: Sweep Canceled 00:33: Memory Sweep Complete, Elapsed Time: 00:00:04 00:33: Traces Found: 0 00:35: Deletion from quarantine initiated 00:35: Processing: apropos 00:35: Processing: bluestreak cookie 00:35: Processing: hbmediapro cookie 00:35: Processing: icannnews 00:35: Processing: potentially rootkit-masked files 00:35: Processing: trafficmp cookie 00:35: Deletion from quarantine completed. Elapsed time 00:00:01 00:35: | End of Session, vendredi 4 novembre 2005 | ******** 23:32: | Start of Session, jeudi 3 novembre 2005 | 23:32: Spy Sweeper started 23:32: Sweep initiated using definitions version 564 23:32: Starting Memory Sweep 23:34: Found Adware: icannnews 23:34: Detected running threat: C:\WINDOWS\system32\jzcript.dll (ID = 83) 23:34: Detected running threat: C:\WINDOWS\system32\hDl.dll (ID = 83) 23:34: Memory Sweep Complete, Elapsed Time: 00:02:04 23:34: Starting Registry Sweep 23:35: Registry Sweep Complete, Elapsed Time:00:00:07 23:35: Starting Cookie Sweep 23:35: Found Spy Cookie: hbmediapro cookie 23:35: [email protected][2].txt (ID = 2768) 23:35: Found Spy Cookie: bluestreak cookie 23:35: salmon@bluestreak[1].txt (ID = 2314) 23:35: Found Spy Cookie: trafficmp cookie 23:35: salmon@trafficmp[2].txt (ID = 3581) 23:35: Cookie Sweep Complete, Elapsed Time: 00:00:00 23:35: Starting File Sweep 23:39: Found Adware: effective-i toolbar 23:39: 664edb3c-2731-4c28-a182-7b1f23 (ID = 106574) 23:40: Found Adware: apropos 23:40: wingenerics.dll (ID = 50187) 23:44: atmtd.dll._ (ID = 166754) 23:50: atmtd.dll (ID = 166754) 00:08: File Sweep Complete, Elapsed Time: 00:33:00 00:08: Full Sweep has completed. Elapsed time 00:35:14 00:08: Traces Found: 9 00:10: Removal process initiated 00:10: Quarantining All Traces: apropos 00:10: Quarantining All Traces: effective-i toolbar 00:10: Quarantining All Traces: icannnews 00:10: Quarantining All Traces: bluestreak cookie 00:10: Quarantining All Traces: hbmediapro cookie 00:10: Quarantining All Traces: trafficmp cookie 00:10: Warning: Launched explorer.exe 00:10: Warning: Quarantine process could not restart Explorer. 00:12: Preparing to restart your computer. Please wait... 00:12: Removal process completed. Elapsed time 00:02:00 ******** 23:32: | Start of Session, jeudi 3 novembre 2005 | 23:32: Spy Sweeper started 23:32: Sweep initiated using definitions version 564 23:32: Starting Memory Sweep 23:32: Sweep Canceled 23:32: Memory Sweep Complete, Elapsed Time: 00:00:03 23:32: Traces Found: 0 23:32: | End of Session, jeudi 3 novembre 2005 | ******** 20:45: | Start of Session, jeudi 3 novembre 2005 | 20:45: Spy Sweeper started 20:45: Sweep initiated using definitions version 564 20:45: Starting Memory Sweep 20:46: Found Adware: icannnews 20:46: Detected running threat: C:\WINDOWS\system32\i4060edseh060.dll (ID = 83) 20:46: Detected running threat: C:\WINDOWS\system32\jzcript.dll (ID = 83) 20:47: Memory Sweep Complete, Elapsed Time: 00:02:39 20:47: Starting Registry Sweep 20:48: Found Adware: look2me 20:48: HKLM\software\microsoft\windows nt\currentversion\winlogon\notify\policies\ || dllname (ID = 911234) 20:48: Registry Sweep Complete, Elapsed Time:00:00:25 20:48: Starting Cookie Sweep 20:48: Found Spy Cookie: hbmediapro cookie 20:48: [email protected][2].txt (ID = 2768) 20:48: Found Spy Cookie: bluestreak cookie 20:48: salmon@bluestreak[1].txt (ID = 2314) 20:48: Found Spy Cookie: trafficmp cookie 20:48: salmon@trafficmp[2].txt (ID = 3581) 20:48: Cookie Sweep Complete, Elapsed Time: 00:00:02 20:48: Starting File Sweep 20:52: Found Adware: effective-i toolbar 20:52: 664edb3c-2731-4c28-a182-7b1f23 (ID = 106574) 20:52: Found Adware: apropos 20:52: wingenerics.dll (ID = 50187) 20:57: atmtd.dll._ (ID = 166754) 21:05: atmtd.dll (ID = 166754) 21:22: Found System Monitor: potentially rootkit-masked files 21:25: ctfcmd.exe (ID = 0) 21:31: setd3d8.exe (ID = 0) 21:31: ace.dll (ID = 0) 21:31: data.bin (ID = 0) 21:42: sdbintel.sys (ID = 0) 21:49: dns (ID = 0) 21:49: psbs32gt.exe (ID = 0) 21:49: Warning: DDAFileExists failed to resolve the MFT number for: c:\program files\netinrar\cache\00004a80_43644558_000aded6. 21:49: Warning: DDAFileExists failed to resolve the MFT number for: c:\program files\netinrar\cache\00003f4a_435c24ea_00054663. 21:49: Warning: DDAFileExists failed to resolve the MFT number for: c:\program files\netinrar\cache\0000030a_4368e3e6_000485dc. 21:49: Warning: DDAFileExists failed to resolve the MFT number for: c:\program files\netinrar\cache\0000323b_4368e1d5_000dd581. 21:50: Warning: DDAFileExists failed to resolve the MFT number for: c:\program files\netinrar\cache\00000784_43651471_0002ff0e. 21:50: Warning: DDAFileExists failed to resolve the MFT number for: c:\program files\netinrar\cache\00000822_435b321e_0002bd41. 21:50: Warning: DDAFileExists failed to resolve the MFT number for: c:\program files\netinrar\cache\00005f45_436a67d2_000d248e. 21:50: Warning: DDAFileExists failed to resolve the MFT number for: c:\program files\netinrar\cache\00001366_436a5f90_000e5e5b. 21:50: Warning: DDAFileExists failed to resolve the MFT number for: c:\program files\netinrar\cache\00006952_43595b73_000de174. 21:50: Warning: DDAFileExists failed to resolve the MFT number for: c:\program files\netinrar\cache\0000212c_4365161a_00079900. 21:50: Warning: DDAFileExists failed to resolve the MFT number for: c:\program files\netinrar\cache\00002f0c_4364ff5b_0007db41. 21:50: Warning: DDAFileExists failed to resolve the MFT number for: c:\program files\netinrar\cache\00000390_4364f5e2_000aa736. 21:53: index (ID = 0) 21:54: ai_29-10-2005.log (ID = 0) 21:54: ai_30-10-2005.log (ID = 0) 21:54: ai_02-11-2005.log (ID = 0) 21:54: ai_31-10-2005.log (ID = 0) 21:55: ai_28-10-2005.log (ID = 0) 21:56: ai_03-11-2005.log (ID = 0) 22:03: Warning: Unhandled Archive Type 22:03: Warning: Unhandled Archive Type 22:07: Warning: Unhandled Archive Type 22:08: File Sweep Complete, Elapsed Time: 01:20:06 22:08: Full Sweep has completed. Elapsed time 01:23:22 22:08: Traces Found: 1845 22:16: Removal process initiated 22:18: Quarantining All Traces: potentially rootkit-masked files 23:23: Warning: Access violation at address 00402BCF in module 'WRSSSDK.exe'. Read of address 05DF4000 23:32: Updating spyware definitions 23:32: There is a problem reaching the server. The cause may be in your connection, or on the server. Please try again later. 23:32: | End of Session, jeudi 3 novembre 2005 | ******** 20:27: | Start of Session, jeudi 3 novembre 2005 | 20:27: Spy Sweeper started 20:38: There is a problem reaching the server. The cause may be in your connection, or on the server. Please try again later. 20:39: Updating spyware definitions 20:40: Your spyware definitions have been updated. 20:45: | End of Session, jeudi 3 novembre 2005 | fin!!! Désolé pour les 2 premiers log inutiles de spy sweeper, voici le log de dll compare * DLLCompare Log version(1.0.0.127) Files Found that Windows does not See or cannot Access *Not everything listed here means you are infected! ________________________________________________ C:\WINDOWS\SYSTEM32\dyutil.dll Wed 26 Oct 2005 23:10:52 ..S.R 234 961 229,45 K C:\WINDOWS\SYSTEM32\i4060e~1.dll Thu 3 Nov 2005 15:02:10 ..S.R 233 657 228,18 K C:\WINDOWS\SYSTEM32\kqdfi.dll Sun 23 Oct 2005 3:41:56 ..S.R 236 607 231,06 K C:\WINDOWS\SYSTEM32\ktdla.dll Sun 30 Oct 2005 4:02:00 ..S.R 233 657 228,18 K C:\WINDOWS\SYSTEM32\kudhe220.dll Thu 27 Oct 2005 23:27:00 ..S.R 235 299 229,78 K C:\WINDOWS\SYSTEM32\m0rmla~1.dll Fri 28 Oct 2005 23:23:38 ..S.R 236 489 230,95 K C:\WINDOWS\SYSTEM32\mgimsg.dll Fri 28 Oct 2005 11:42:02 ..S.R 234 961 229,45 K C:\WINDOWS\SYSTEM32\mpiole16.dll Wed 26 Oct 2005 8:47:48 ..S.R 235 299 229,78 K C:\WINDOWS\SYSTEM32\mvcpx32r.dll Fri 21 Oct 2005 17:25:42 ..S.R 235 813 230,29 K C:\WINDOWS\SYSTEM32\n08o0a~1.dll Fri 21 Oct 2005 20:53:56 ..S.R 235 341 229,82 K C:\WINDOWS\SYSTEM32\ondbse32.dll Sat 29 Oct 2005 0:04:18 ..S.R 235 299 229,78 K C:\WINDOWS\SYSTEM32\q0nu0a~1.dll Thu 3 Nov 2005 19:30:26 ..S.R 234 191 228,70 K C:\WINDOWS\SYSTEM32\safolder.dll Thu 3 Nov 2005 14:44:34 ..S.R 234 191 228,70 K C:\WINDOWS\SYSTEM32\scclient.dll Tue 25 Oct 2005 23:22:10 ..S.R 234 961 229,45 K C:\WINDOWS\SYSTEM32\sirrnfr.dll Thu 3 Nov 2005 1:02:38 ..S.R 234 191 228,70 K C:\WINDOWS\SYSTEM32\wpn32spl.dll Thu 3 Nov 2005 14:52:44 ..S.R 233 657 228,18 K ________________________________________________ 1 421 items found: 1 421 files (16 H/S), 0 directories. Total of file sizes: 293 065 813 bytes 279,49 M Administrator Account = Vrai --------------------End log---------------------

voici un version light du log de sweeper (sans les stop des spy communication) ******** 01:17: | Start of Session, vendredi 4 novembre 2005 | 01:17: Spy Sweeper started 01:17: Sweep initiated using definitions version 564 01:17: Starting Memory Sweep 01:17: Sweep Canceled 01:17: Memory Sweep Complete, Elapsed Time: 00:00:05 01:17: Traces Found: 0 01:17: Deletion from quarantine initiated 01:17: Processing: xiti cookie 01:17: Deletion from quarantine completed. Elapsed time 00:00:00 01:17: | End of Session, vendredi 4 novembre 2005 | ******** 00:35: | Start of Session, vendredi 4 novembre 2005 | 00:35: Spy Sweeper started 00:35: Sweep initiated using definitions version 564 00:35: Starting Memory Sweep 00:37: Memory Sweep Complete, Elapsed Time: 00:01:50 00:37: Starting Registry Sweep 00:37: Registry Sweep Complete, Elapsed Time:00:00:07 00:37: Starting Cookie Sweep 00:37: Found Spy Cookie: xiti cookie 00:37: salmon@xiti[1].txt (ID = 3717) 00:37: Cookie Sweep Complete, Elapsed Time: 00:00:02 00:37: Starting File Sweep 01:06: File Sweep Complete, Elapsed Time: 00:29:03 01:06: Full Sweep has completed. Elapsed time 00:31:05 01:06: Traces Found: 1 01:16: Removal process initiated 01:17: Quarantining All Traces: xiti cookie 01:17: Removal process completed. Elapsed time 00:00:01 01:17: | End of Session, vendredi 4 novembre 2005 | ******** 00:33: | Start of Session, vendredi 4 novembre 2005 | 00:33: Spy Sweeper started 00:33: Sweep initiated using definitions version 564 00:33: Starting Memory Sweep 00:33: Sweep Canceled 00:33: Memory Sweep Complete, Elapsed Time: 00:00:04 00:33: Traces Found: 0 00:35: Deletion from quarantine initiated 00:35: Processing: apropos 00:35: Processing: bluestreak cookie 00:35: Processing: hbmediapro cookie 00:35: Processing: icannnews 00:35: Processing: potentially rootkit-masked files 00:35: Processing: trafficmp cookie 00:35: Deletion from quarantine completed. Elapsed time 00:00:01 00:35: | End of Session, vendredi 4 novembre 2005 | ******** 23:32: | Start of Session, jeudi 3 novembre 2005 | 23:32: Spy Sweeper started 23:32: Sweep initiated using definitions version 564 23:32: Starting Memory Sweep 23:34: Found Adware: icannnews 23:34: Detected running threat: C:\WINDOWS\system32\jzcript.dll (ID = 83) 23:34: Detected running threat: C:\WINDOWS\system32\hDl.dll (ID = 83) 23:34: Memory Sweep Complete, Elapsed Time: 00:02:04 23:34: Starting Registry Sweep 23:35: Registry Sweep Complete, Elapsed Time:00:00:07 23:35: Starting Cookie Sweep 23:35: Found Spy Cookie: hbmediapro cookie 23:35: [email protected][2].txt (ID = 2768) 23:35: Found Spy Cookie: bluestreak cookie 23:35: salmon@bluestreak[1].txt (ID = 2314) 23:35: Found Spy Cookie: trafficmp cookie 23:35: salmon@trafficmp[2].txt (ID = 3581) 23:35: Cookie Sweep Complete, Elapsed Time: 00:00:00 23:35: Starting File Sweep 23:39: Found Adware: effective-i toolbar 23:39: 664edb3c-2731-4c28-a182-7b1f23 (ID = 106574) 23:40: Found Adware: apropos 23:40: wingenerics.dll (ID = 50187) 23:44: atmtd.dll._ (ID = 166754) 23:50: atmtd.dll (ID = 166754) 00:08: File Sweep Complete, Elapsed Time: 00:33:00 00:08: Full Sweep has completed. Elapsed time 00:35:14 00:08: Traces Found: 9 00:10: Removal process initiated 00:10: Quarantining All Traces: apropos 00:10: Quarantining All Traces: effective-i toolbar 00:10: Quarantining All Traces: icannnews 00:10: Quarantining All Traces: bluestreak cookie 00:10: Quarantining All Traces: hbmediapro cookie 00:10: Quarantining All Traces: trafficmp cookie 00:10: Warning: Launched explorer.exe 00:10: Warning: Quarantine process could not restart Explorer. 00:12: Preparing to restart your computer. Please wait... 00:12: Removal process completed. Elapsed time 00:02:00 ******** 23:32: | Start of Session, jeudi 3 novembre 2005 | 23:32: Spy Sweeper started 23:32: Sweep initiated using definitions version 564 23:32: Starting Memory Sweep 23:32: Sweep Canceled 23:32: Memory Sweep Complete, Elapsed Time: 00:00:03 23:32: Traces Found: 0 23:32: | End of Session, jeudi 3 novembre 2005 | ******** 20:45: | Start of Session, jeudi 3 novembre 2005 | 20:45: Spy Sweeper started 20:45: Sweep initiated using definitions version 564 20:45: Starting Memory Sweep 20:46: Found Adware: icannnews 20:46: Detected running threat: C:\WINDOWS\system32\i4060edseh060.dll (ID = 83) 20:46: Detected running threat: C:\WINDOWS\system32\jzcript.dll (ID = 83) 20:47: Memory Sweep Complete, Elapsed Time: 00:02:39 20:47: Starting Registry Sweep 20:48: Found Adware: look2me 20:48: HKLM\software\microsoft\windows nt\currentversion\winlogon\notify\policies\ || dllname (ID = 911234) 20:48: Registry Sweep Complete, Elapsed Time:00:00:25 20:48: Starting Cookie Sweep 20:48: Found Spy Cookie: hbmediapro cookie 20:48: [email protected][2].txt (ID = 2768) 20:48: Found Spy Cookie: bluestreak cookie 20:48: salmon@bluestreak[1].txt (ID = 2314) 20:48: Found Spy Cookie: trafficmp cookie 20:48: salmon@trafficmp[2].txt (ID = 3581) 20:48: Cookie Sweep Complete, Elapsed Time: 00:00:02 20:48: Starting File Sweep 20:52: Found Adware: effective-i toolbar 20:52: 664edb3c-2731-4c28-a182-7b1f23 (ID = 106574) 20:52: Found Adware: apropos 20:52: wingenerics.dll (ID = 50187) 20:57: atmtd.dll._ (ID = 166754) 21:05: atmtd.dll (ID = 166754) 21:22: Found System Monitor: potentially rootkit-masked files 21:22: 00001481_436a657d_00078340 (ID = 0) 21:22: 000075ef_436a61da_0004048e (ID = 0) 21:22: 0000662a_435aa6ff_00057686 (ID = 0) 21:22: 00004cad_4368e5d6_000900e0 (ID = 0) 21:22: 00005c46_43690e57_000e0b5c (ID = 0) 21:22: 00000786_435af6c3_000a3ba4 (ID = 0) 21:22: 00000bb3_4358f25c_0006a1a6 (ID = 0) 21:22: 00006048_436a6536_0009507c (ID = 0) 21:22: 0000676d_435adc52_000151ac (ID = 0) 21:22: 00005e73_436a66ae_0009ef8c (ID = 0) 21:22: 00004e45_4368e1d4_000cbe0c (ID = 0) 21:22: 00004087_436a657d_000bf1b1 (ID = 0) 21:22: 00004eae_436a67bd_0002e6d4 (ID = 0) 21:22: 0000139d_4368ee36_0001ddb8 (ID = 0) 21:22: 0000470e_436a66af_000054b1 (ID = 0) 21:22: 000048cc_4368f1a8_000ab3c6 (ID = 0) 21:22: 00000ff4_43659410_000e9691 (ID = 0) 21:22: 0000251f_435c1189_00069880 (ID = 0) 21:22: 00004ecf_43656a0d_000ab150 (ID = 0) 21:22: 00002b0c_435a1d95_00076574 (ID = 0) 21:22: 00003459_436a67f8_0000d618 (ID = 0) 21:22: 0000785e_43662180_0009ebac (ID = 0) 21:22: 00007443_43659bf1_000a0231 (ID = 0) 21:22: 000015a1_435a02f6_00071937 (ID = 0) 21:22: 00004365_435aa5c2_000ba39c (ID = 0) 21:22: 00001927_43655328_00020486 (ID = 0) 21:22: 00004baf_43661de6_000a7193 (ID = 0) 21:22: 00003a2d_43690762_0005c739 (ID = 0) 21:22: 00001af4_43690513_000579b4 (ID = 0) 21:22: 00006e9e_43659b2d_00067749 (ID = 0) 21:22: 00005d24_436a67bd_00046e04 (ID = 0) 21:22: 0000491c_43595c17_0005deee (ID = 0) 21:22: 000053b1_436a6968_00014828 (ID = 0) 21:22: 00005878_4364410f_0005de0e (ID = 0) 21:22: 00000677_4368f7f9_000e72b3 (ID = 0) 21:22: 00005753_4368f1b7_0006c0d3 (ID = 0) 21:22: 00002cd6_436439f8_000bd44e (ID = 0) 21:22: 000072ae_4368d16e_000ccc06 (ID = 0) 21:22: 00007153_43654986_000e9c2b (ID = 0) 21:22: 00006443_4368dc5a_000db880 (ID = 0) 21:22: 000054dc_4368f499_000da5d4 (ID = 0) 21:22: 0000758d_43661e3f_000bf0d8 (ID = 0) 21:22: 00005c5e_435a74bb_0002f7cf (ID = 0) 21:22: 00000588_436a67c7_00078d86 (ID = 0) 21:22: 0000190b_43654988_000a11db (ID = 0) 21:22: 00001238_4359771b_000331dc (ID = 0) 21:22: 0000282d_436a6832_00079c9e (ID = 0) 21:22: 000016d4_43690adb_0004fd0e (ID = 0) 21:22: 00005579_436a67c7_000cbf90 (ID = 0) 21:23: 0000263d_436a67fa_00059e06 (ID = 0) 21:23: 00006048_43690763_000e829e (ID = 0) 21:23: 00005f90_4358f14c_0003198c (ID = 0) 21:23: 0000368e_4368f4d9_000dd4e1 (ID = 0) 21:23: 000055bc_43661430_000d94b6 (ID = 0) 21:23: 00004e08_436a692a_0008a12c (ID = 0) 21:23: 000075c1_4364eede_000ebd8e (ID = 0) 21:23: 0000442b_43690937_00056309 (ID = 0) 21:23: 00001ad4_4368e16b_000b5a23 (ID = 0) 21:23: 000008ff_43655331_00087b04 (ID = 0) 21:23: 0000773f_435ae392_0005e288 (ID = 0) 21:23: 000004f0_43653e0c_00075b73 (ID = 0) 21:23: 000057d3_43690764_000e3a01 (ID = 0) 21:23: 000001d3_436906a8_000c8a68 (ID = 0) 21:23: 00007f96_4368e1d0_00094af0 (ID = 0) 21:23: 0000136f_4365994b_0009c7d8 (ID = 0) 21:23: 0000275b_43659411_000db17b (ID = 0) 21:23: 00004d59_436554fc_0007de94 (ID = 0) 21:23: 000043f6_43656a4c_0001d6bb (ID = 0) 21:23: 0000590e_43690a1c_000da0a8 (ID = 0) 21:23: 00000035_4369046f_00025490 (ID = 0) 21:23: 00007f61_43690adb_000b19ce (ID = 0) 21:23: 00007613_4365386b_000d9746 (ID = 0) 21:23: 000007cf_4369047a_000a5d7e (ID = 0) 21:23: 000056ae_436a5ca8_000c3b66 (ID = 0) 21:23: 00003a8d_43690adc_00001ee1 (ID = 0) 21:23: 00006732_4369047f_00065969 (ID = 0) 21:23: 000073d9_43690f01_0004a366 (ID = 0) 21:23: 00006d22_43690482_000cd546 (ID = 0) 21:23: 00007a08_43659388_0007795c (ID = 0) 21:23: 00004509_43597706_00086321 (ID = 0) 21:23: 000036a1_43651453_00034104 (ID = 0) 21:23: 00001649_435b064f_0000cee1 (ID = 0) 21:23: 00006e5d_43597732_000eb3c9 (ID = 0) 21:23: 00004531_43655046_000c3cd1 (ID = 0) 21:23: 00006ca5_43659388_000a87bc (ID = 0) 21:23: 000053b1_4364ee96_0001b2a6 (ID = 0) 21:23: 00001481_4369093e_000e1910 (ID = 0) 21:23: 00004e08_4364ee7c_000c6f30 (ID = 0) 21:23: 00004ae1_436439cd_0005b064 (ID = 0) 21:23: 00000975_436907e5_000880fb (ID = 0) 21:23: 00003ea4_4366208c_0005a101 (ID = 0) 21:23: 00005968_436910a7_0000c4f0 (ID = 0) 21:23: 00002668_43691a72_000322d8 (ID = 0) 21:23: 00004325_43691ac7_000db6bc (ID = 0) 21:23: 00007a61_4364ee83_0002f614 (ID = 0) 21:23: 00007fbe_43690ae8_000f0dc8 (ID = 0) 21:23: 00004bcd_436555af_000a1f26 (ID = 0) 21:23: 00007871_436518cc_000816d9 (ID = 0) 21:24: 000031d8_43655340_000d8c13 (ID = 0) 21:24: 00007dd1_435a160e_0002cc69 (ID = 0) 21:24: 0000765f_43690a1e_000ce850 (ID = 0) 21:24: 00007983_4368f4e3_00009aae (ID = 0) 21:24: 00004e38_435aa6d5_000c5554 (ID = 0) 21:24: 00004db7_435b10d5_0008a8bb (ID = 0) 21:24: 00005173_43654e37_00093718 (ID = 0) 21:24: 0000198c_436555b0_00019620 (ID = 0) 21:24: 00004626_4369217f_0003d4b0 (ID = 0) 21:24: 00005876_4369110b_0004a5be (ID = 0) 21:24: 00003a4c_43654afe_0005e8fc (ID = 0) 21:24: 00004962_43659412_00032be9 (ID = 0) 21:24: 00004087_435a3cb7_00089f91 (ID = 0) 21:24: 0000458f_436454e9_00053806 (ID = 0) 21:24: 00004b40_43644104_0005c74c (ID = 0) 21:24: 0000662a_436501ff_00057156 (ID = 0) 21:24: 00002e39_43692322_0007fea4 (ID = 0) 21:24: 000042be_43653950_000ad458 (ID = 0) 21:24: 00004fc0_435a6413_0007882a (ID = 0) 21:24: 00005422_436442fc_000bcf61 (ID = 0) 21:24: 000052a1_436549b5_00073d03 (ID = 0) 21:24: 00001953_43644d8a_000d4420 (ID = 0) 21:24: 00003bf6_435a01b0_00071e0c (ID = 0) 21:24: 00006443_436a5af1_000afd8e (ID = 0) 21:24: 00006b89_43597ce4_00037e6e (ID = 0) 21:24: 000013a6_43654948_00039ef0 (ID = 0) 21:24: 00004b9d_43655351_000b79cc (ID = 0) 21:24: 0000737d_43653951_000559b1 (ID = 0) 21:24: 00007eb7_435a027a_0003c33e (ID = 0) 21:24: 00000d9f_43653951_000819d4 (ID = 0) 21:24: 00005c67_436a616f_0005074b (ID = 0) 21:24: 000071d5_4366209d_0002a404 (ID = 0) 21:24: 00003960_436912b0_0007a200 (ID = 0) 21:24: 00007389_43653952_000622e9 (ID = 0) 21:24: 00007ff5_43643f4e_000d9316 (ID = 0) 21:24: 0000388a_43653952_0009a6a4 (ID = 0) 21:24: 000071f6_4365938b_0006030c (ID = 0) 21:24: 000037e6_436907f4_000c5916 (ID = 0) 21:24: 00000a41_43653953_00031a29 (ID = 0) 21:24: 00007eb7_436a5faf_000741ac (ID = 0) 21:24: 00002332_435af6e0_00049ae6 (ID = 0) 21:24: 000015fd_43653953_000eb730 (ID = 0) 21:24: 00004fca_436614d3_000b8231 (ID = 0) 21:24: 00006e5d_436a5b82_000e7b6b (ID = 0) 21:24: 00000a41_435ae394_0004dbf3 (ID = 0) 21:24: 00007cb8_43653954_0003e361 (ID = 0) 21:24: 00000124_436a5a49_0003eff1 (ID = 0) 21:24: 0000634f_43653954_000e4774 (ID = 0) 21:24: 00006f68_43653955_000521f4 (ID = 0) 21:24: 000063cb_43597797_0005c43e (ID = 0) 21:25: 000019d9_436907f7_000450ab (ID = 0) 21:25: 00005878_435b18d6_000d7e20 (ID = 0) 21:25: 00007954_435af69e_0004125c (ID = 0) 21:25: 000073da_43644435_000a4879 (ID = 0) 21:25: 0000428b_4368dc7d_00068b33 (ID = 0) 21:25: 000041bb_4358f185_000b61a3 (ID = 0) 21:25: 000037be_43651861_000aef03 (ID = 0) 21:25: 00001850_43690a21_0001350b (ID = 0) 21:25: 00006f11_435c2d2e_000aa9f1 (ID = 0) 21:25: 00000c7b_43690afb_000cdfa3 (ID = 0) 21:25: 0000263d_43691404_00077690 (ID = 0) 21:25: 0000008e_4365162b_00029f78 (ID = 0) 21:25: 00000ecc_43690563_0000a999 (ID = 0) 21:25: ctfcmd.exe (ID = 0) 21:25: 00004f68_43691105_00023936 (ID = 0) 21:25: 00004963_435ad1c8_000d3ec3 (ID = 0) 21:25: 00005064_43690d8e_0001d5ae (ID = 0) 21:25: 00003f9a_4364f078_00051b51 (ID = 0) 21:25: 00002b00_43690a67_0009ed60 (ID = 0) 21:25: 0000591d_436907ff_0006ef91 (ID = 0) 21:25: 00003821_436565b2_000dd9ee (ID = 0) 21:25: 000009ce_43691256_000a8b8c (ID = 0) 21:25: 00001316_4369110c_000f3690 (ID = 0) 21:25: 00001d18_43690c09_0000ed7e (ID = 0) 21:25: 000040a5_4364eec9_00073ff8 (ID = 0) 21:25: 00005005_43690afc_0007b339 (ID = 0) 21:25: 00004d54_43690d93_0004b1f1 (ID = 0) 21:25: 00002213_4368e1e7_000696d1 (ID = 0) 21:25: 00003807_43690b0f_000a68e1 (ID = 0) 21:25: 00007cfe_436911a6_00091f73 (ID = 0) 21:25: 00000ecc_436453ba_000ee95b (ID = 0) 21:25: 000074ad_435a4d41_000e3fe4 (ID = 0) 21:25: 0000486a_43690e5c_000a5584 (ID = 0) 21:25: 00001f16_43690f02_000a506b (ID = 0) 21:25: 00004cd4_43690142_000826d8 (ID = 0) 21:25: 00002ba5_43691f9a_0000a961 (ID = 0) 21:25: 00001d11_4364eece_000c8e21 (ID = 0) 21:25: 00002f14_4368f1c7_0009175e (ID = 0) 21:25: 00001246_435af644_000462e4 (ID = 0) 21:25: 0000001c_4365a067_0008d184 (ID = 0) 21:25: 00006270_43690d32_00057793 (ID = 0) 21:25: 000039ce_43690d94_00052cec (ID = 0) 21:25: 00003492_43690d4e_000886f9 (ID = 0) 21:25: 00000732_43599a62_000bd7c0 (ID = 0) 21:25: 00000633_43690bac_00004270 (ID = 0) 21:26: 00003459_436912b1_00066eac (ID = 0) 21:26: 000049bb_43691120_000542fc (ID = 0) 21:26: 000019da_43690d69_000685d4 (ID = 0) 21:26: 00007874_4368fcf5_000384eb (ID = 0) 21:26: 00001289_43692023_00072fbc (ID = 0) 21:26: 0000773b_43690ba2_000b8018 (ID = 0) 21:26: 00000822_43644333_0009f661 (ID = 0) 21:26: 0000458f_436907da_0002e9f3 (ID = 0) 21:26: 00003bb1_43690d9c_0004e491 (ID = 0) 21:26: 00007874_43644f27_000a931b (ID = 0) 21:26: 00004c85_43690d9c_000b4f8e (ID = 0) 21:26: 0000513e_43690da7_000cc661 (ID = 0) 21:26: 00006ad6_436446c0_0001f8c6 (ID = 0) 21:26: 00004d9a_4364efb2_00095038 (ID = 0) 21:26: 00006d69_43690da8_00066104 (ID = 0) 21:26: 000048e6_43654ee2_00049170 (ID = 0) 21:26: 00006a15_43690da8_000c56a6 (ID = 0) 21:26: 0000182f_43690f13_0004450e (ID = 0) 21:26: 0000288f_4364475a_00058224 (ID = 0) 21:26: 00005fa4_43690145_00015760 (ID = 0) 21:26: 0000520b_4369125a_0000da73 (ID = 0) 21:26: 0000301c_4364409e_000a1ba8 (ID = 0) 21:26: 00000bdb_436440a4_00061d33 (ID = 0) 21:26: 00004d67_43690f19_00001f7b (ID = 0) 21:26: 00005d24_435a4d4f_00067559 (ID = 0) 21:26: 00002044_43654917_0001797b (ID = 0) 21:26: 0000390e_436614e2_000e4878 (ID = 0) 21:26: 00006d73_435ae566_0006b1ab (ID = 0) 21:26: 000056ae_436440ac_000cb530 (ID = 0) 21:26: 00006b72_43644a69_000263b9 (ID = 0) 21:26: 000020ad_436550f6_000da8eb (ID = 0) 21:26: 000058b0_43644436_00051c10 (ID = 0) 21:26: 0000047e_436446c3_000390d6 (ID = 0) 21:26: 00002b43_436599fb_0008e929 (ID = 0) 21:26: 00001796_43690ecf_000eb1d1 (ID = 0) 21:26: 0000263d_4364e355_0000bd79 (ID = 0) 21:26: 00001af4_435c0136_000e670c (ID = 0) 21:26: 00003004_43690e91_0008e6a0 (ID = 0) 21:26: 00005991_43644336_00060e2b (ID = 0) 21:26: 0000282d_435a5437_0005ba97 (ID = 0) 21:27: 00006f11_43691121_000d3ac9 (ID = 0) 21:27: 00002cc6_43657b73_00059106 (ID = 0) 21:27: 00000975_435a3b58_00024942 (ID = 0) 21:27: 00005f1e_436a633e_0000d681 (ID = 0) 21:27: 00006be8_436a62fe_000d5650 (ID = 0) 21:27: 000074ad_43691147_000ead03 (ID = 0) 21:27: 00002852_436911a8_000dc043 (ID = 0) 21:27: 0000658c_43691da0_000e4c5e (ID = 0) 21:27: 00006bcb_43644e12_000b5d53 (ID = 0) 21:27: 000048db_436911a9_0000c8cb (ID = 0) 21:27: 00003a9e_435a01c6_000b1d87 (ID = 0) 21:27: 00005d24_43691149_00089b83 (ID = 0) 21:27: 00005f34_435add7c_000012de (ID = 0) 21:27: 00001cdf_43692190_00093f3b (ID = 0) 21:27: 00004b72_43659216_0000df4c (ID = 0) 21:27: 00005fa8_43691e5e_000666bc (ID = 0) 21:27: 0000159f_435a7d8a_0001052a (ID = 0) 21:27: 00005c5e_4364f9bc_00071ade (ID = 0) 21:27: 00000588_4369116e_000d8bd8 (ID = 0) 21:27: 00003b97_43691406_000228a8 (ID = 0) 21:27: 000027da_4369219b_0003121e (ID = 0) 21:27: 00004e08_43691ada_000d5e04 (ID = 0) 21:27: 000068f5_4369125d_000b4f66 (ID = 0) 21:27: 00003a8d_435c1094_000b7354 (ID = 0) 21:27: 0000412f_43691da8_000cf22e (ID = 0) 21:27: 000075c1_43691ca2_0001fe64 (ID = 0) 21:27: 00004ad4_436910a7_000e85a0 (ID = 0) 21:27: 000065ca_43655304_000496a3 (ID = 0) 21:27: 00007eb7_43644283_0000e658 (ID = 0) 21:27: 00002cf7_436910a8_0001b546 (ID = 0) 21:27: 00000940_43691bdb_0005df6e (ID = 0) 21:27: 000030f1_43691da9_000925d6 (ID = 0) 21:27: 00003f9a_43691e6c_000dbcf3 (ID = 0) 21:27: 00003a2d_436a6536_00077b10 (ID = 0) 21:27: 000018be_436439ab_00000d58 (ID = 0) 21:27: 000033ea_436445b0_000bbc01 (ID = 0) 21:27: 00000e29_4369219f_000e7768 (ID = 0) 21:27: 000045c5_4369125f_000676d9 (ID = 0) 21:27: 00005579_43691170_00015d98 (ID = 0) 21:27: 00007014_43691bef_0001ba5e (ID = 0) 21:27: 00002725_436911ad_000bdfd8 (ID = 0) 21:27: 000074cd_43659c33_00004dc6 (ID = 0) 21:27: 0000412f_435c7695_000e2e30 (ID = 0) 21:27: 00003004_435a494b_0004f53c (ID = 0) 21:27: 000053b1_43691bf0_00020e3b (ID = 0) 21:27: 000054dc_436446c7_000cf994 (ID = 0) 21:27: 00005815_43691dad_00093c56 (ID = 0) 21:27: 00006f3c_436911e6_00044394 (ID = 0) 21:27: 0000138a_43691a31_00090aeb (ID = 0) 21:27: 00003f4a_436910b8_0003bd94 (ID = 0) 21:27: 00000a4a_436910ba_000688f8 (ID = 0) 21:28: 00007a61_43691adb_0009dfe9 (ID = 0) 21:28: 00005e9d_435b95c9_0009236c (ID = 0) 21:28: 00000914_4365545c_000e494c (ID = 0) 21:28: 00006cf4_436911ea_0002abc6 (ID = 0) 21:28: 000030a7_43691e71_00094383 (ID = 0) 21:28: 00002581_43659b80_0001df2c (ID = 0) 21:28: 00005f45_436911f1_0007de11 (ID = 0) 21:28: 0000368e_436446c9_000b7da4 (ID = 0) 21:28: 000013d3_436911fa_0004b414 (ID = 0) 21:28: 00005e76_43691a39_000650a9 (ID = 0) 21:28: 0000187e_4364457d_0001c03e (ID = 0) 21:28: 00006959_43659fc4_000a2071 (ID = 0) 21:28: 0000489c_43644a1f_0003aabb (ID = 0) 21:28: 00002e40_43644191_00000389 (ID = 0) 21:28: 000029d8_436911fc_0004e673 (ID = 0) 21:28: 00000a28_436911fc_00061f66 (ID = 0) 21:28: 000050a9_43692025_0003de60 (ID = 0) 21:28: 00003990_43662095_000388d9 (ID = 0) 21:28: 0000293b_43691c31_0008ade4 (ID = 0) 21:28: 00006486_43691e87_0000e260 (ID = 0) 21:28: 00000ea9_43691d61_00043439 (ID = 0) 21:28: 0000008c_43651933_000772f8 (ID = 0) 21:28: 00000940_436a6941_0003a246 (ID = 0) 21:28: 000046c2_43691e8a_00051374 (ID = 0) 21:28: 000028e2_43691f9a_000df4b6 (ID = 0) 21:28: 00002959_43691a39_00042d00 (ID = 0) 21:28: 00000634_4365a4c2_00061e41 (ID = 0) 21:28: 00002db5_43691e91_0000f381 (ID = 0) 21:28: 00007a54_43691e93_0003e603 (ID = 0) 21:28: 00003f0b_43691d67_0008762e (ID = 0) 21:28: 00005079_4365938c_0004817c (ID = 0) 21:28: 00003087_43691d68_00096684 (ID = 0) 21:28: 00002079_43692025_000873f0 (ID = 0) 21:28: 000050bf_43691e94_00039d66 (ID = 0) 21:28: 0000797d_43644137_0007d0e3 (ID = 0) 21:28: 000037e6_435a3bb3_00024c97 (ID = 0) 21:28: 0000441d_43691dbd_000e7a23 (ID = 0) 21:28: 0000159f_43691f8e_000017a4 (ID = 0) 21:28: 00005ccd_43691a42_0008a6f3 (ID = 0) 21:28: 0000169a_43691ead_000a46c6 (ID = 0) 21:28: 00007f4f_43644be3_00035c46 (ID = 0) 21:28: 00006fc9_43691a42_0007bc3c (ID = 0) 21:28: 00000d6a_43691c3b_0004ed0e (ID = 0) 21:28: 00002f0c_43691fa0_0008bd4e (ID = 0) 21:28: 0000591d_436a6547_00093ac1 (ID = 0) 21:28: 000011f4_4368fd52_0002336e (ID = 0) 21:28: 00002c4e_4365a4d2_000c6de3 (ID = 0) 21:29: 00004dc8_435b1175_000488cb (ID = 0) 21:29: 00005dd5_4368fd53_00060b06 (ID = 0) 21:29: 00002833_435bcbe0_00046ab0 (ID = 0) 21:29: 00004d9a_43691dc2_00059241 (ID = 0) 21:29: 000040a5_43691c46_000291e9 (ID = 0) 21:29: 00001d11_43691c48_000bef68 (ID = 0) 21:29: 00002fe7_43691eb0_00017ac3 (ID = 0) 21:29: 0000675f_4365a223_000e99ee (ID = 0) 21:29: 000036bf_43659fc5_0007db49 (ID = 0) 21:29: 00003295_43691dc5_0007c6cb (ID = 0) 21:29: 00004ad4_435c239d_000018ec (ID = 0) 21:29: 00006df1_43595bcd_00024223 (ID = 0) 21:29: 000010d9_43691eb0_000b9099 (ID = 0) 21:29: 000000c1_43691dcb_00088504 (ID = 0) 21:29: 0000676d_436921a4_00062c00 (ID = 0) 21:29: 000078d4_43691a76_00084443 (ID = 0) 21:29: 00006be8_4368f838_0004d486 (ID = 0) 21:29: 00000728_43691f46_000402eb (ID = 0) 21:29: 00005a9b_43691dd2_00080feb (ID = 0) 21:29: 00001af4_435a33b3_000ec13e (ID = 0) 21:29: 0000797d_435a01c9_000dee8a (ID = 0) 21:29: 00006d69_435a4644_00044791 (ID = 0) 21:29: 00004944_436a5f50_00010b18 (ID = 0) 21:29: 0000030a_436a5c7d_00041af1 (ID = 0) 21:29: 000069d0_43691a39_0009d464 (ID = 0) 21:29: 0000773b_435a405d_00072437 (ID = 0) 21:29: 00000ce1_43691dd9_0006b01b (ID = 0) 21:29: 00004fc0_43691ddd_000d58b6 (ID = 0) 21:29: 00005f23_43691eca_0004098e (ID = 0) 21:29: 00001049_43691a8b_00018bce (ID = 0) 21:29: 00005d2b_435af669_000ada69 (ID = 0) 21:29: 00002c3b_435a02e2_000e2589 (ID = 0) 21:29: 00000ddc_435a01d3_00096a1c (ID = 0) 21:29: 00004f68_435c2747_000e4a30 (ID = 0) 21:29: 00006e7e_43691de1_0000721e (ID = 0) 21:29: 00002f14_435a0a82_000738d2 (ID = 0) 21:29: 0000086a_43691a94_0006c959 (ID = 0) 21:29: 00006443_4359764a_00013341 (ID = 0) 21:29: 000051d1_43691f46_000674d1 (ID = 0) 21:29: 00004cad_435a0200_000758dc (ID = 0) 21:29: 000079d1_43691ecc_0007716b (ID = 0) 21:29: 00005f32_4359fd93_0005adc9 (ID = 0) 21:29: 0000638c_435af66a_0007836c (ID = 0) 21:29: 00006da6_43692324_0004ad48 (ID = 0) 21:30: 00006479_43691a96_00054d69 (ID = 0) 21:30: 000051d1_4364f617_000e6a5b (ID = 0) 21:30: 00007cfe_436a67c9_00083540 (ID = 0) 21:30: 00003f97_43691da0_00043688 (ID = 0) 21:30: 00003b97_436a67fc_0003d3d9 (ID = 0) 21:30: 00004e55_43691ed2_000212e4 (ID = 0) 21:30: 00004087_43690965_000021eb (ID = 0) 21:30: 00005e14_435a021c_000cb30a (ID = 0) 21:30: 00006343_436603fe_000042e8 (ID = 0) 21:30: 0000409d_43644340_0005d110 (ID = 0) 21:30: 000052e5_4365a65f_00020d2b (ID = 0) 21:30: 00000029_436353b5_0006a3b1 (ID = 0) 21:30: 000010d9_43691f48_0002fc56 (ID = 0) 21:30: 00006c6c_43691f48_000a03cc (ID = 0) 21:30: 00001ad4_436a5b84_0005346c (ID = 0) 21:30: 00001916_43644a3f_0006a983 (ID = 0) 21:30: 00006ea1_43691f50_0009bb71 (ID = 0) 21:30: 00004c66_43691f5d_0006f631 (ID = 0) 21:30: 00007514_43651476_00058d14 (ID = 0) 21:30: 00006d4e_43691f5e_000a0a31 (ID = 0) 21:30: 000036c2_43692124_00061c23 (ID = 0) 21:30: 00001bd9_43691f60_000b7583 (ID = 0) 21:30: 00004963_43692177_00004b13 (ID = 0) 21:30: 00001d18_435c118b_0005e028 (ID = 0) 21:30: 00004df2_435a0228_00094bb1 (ID = 0) 21:30: 00005753_435a09c1_0009b46c (ID = 0) 21:30: 00004efe_43691f5f_0003f311 (ID = 0) 21:30: 0000491c_435b1067_0001f6a8 (ID = 0) 21:30: 00001295_435af765_000c1c96 (ID = 0) 21:30: 00000871_43691f81_0002406b (ID = 0) 21:30: 00006e89_43692332_0003c314 (ID = 0) 21:30: 00000bb3_436a59de_00096120 (ID = 0) 21:30: 00001d5e_4369236e_000dca59 (ID = 0) 21:30: 00004fe2_43691f90_000134b9 (ID = 0) 21:30: 00002462_4369222f_000f2f81 (ID = 0) 21:30: 00004365_43691fa9_0007b6fb (ID = 0) 21:30: 000026b1_43692177_000d6f49 (ID = 0) 21:30: 00004e38_43691fab_0003058c (ID = 0) 21:30: 00000af0_435af676_00079fce (ID = 0) 21:30: 00002120_436923ca_000459f1 (ID = 0) 21:30: 00000a4a_435a49e4_00020dfe (ID = 0) 21:30: 00001ff1_4369236f_000bfa8c (ID = 0) 21:30: 000066fa_435c2bf4_000b8ec0 (ID = 0) 21:30: 000049f7_43690936_0000527e (ID = 0) 21:30: 00003699_435a03ae_000d961e (ID = 0) 21:30: 00007f96_435b1468_0001423b (ID = 0) 21:30: 0000456d_4369237a_000b2698 (ID = 0) 21:30: 000064e0_43692234_0007f5ee (ID = 0) 21:30: 0000293b_435a5a0a_0001d0f7 (ID = 0) 21:30: 00006f30_435af675_0003049e (ID = 0) 21:31: 00007296_43692237_0008550b (ID = 0) 21:31: 000069d0_435a543f_000c5294 (ID = 0) 21:31: 00000d6a_435a5a1a_000315ae (ID = 0) 21:31: 00001316_435c2c15_000ae84e (ID = 0) 21:31: 00006512_43692287_0008419e (ID = 0) 21:31: 00001d3f_43692330_000d3131 (ID = 0) 21:31: 00007ac2_435a5441_000de504 (ID = 0) 21:31: 00004944_435a022c_000e943a (ID = 0) 21:31: 00006048_435a3a29_000084af (ID = 0) 21:31: 0000527f_435af675_000f1700 (ID = 0) 21:31: 00007e0e_4369237d_0003e1c4 (ID = 0) 21:31: 000006e3_4369237d_0006a1e8 (ID = 0) 21:31: 00005198_4365a6a4_000e439b (ID = 0) 21:31: 00005e9d_4368f6a4_00056d63 (ID = 0) 21:31: setd3d8.exe (ID = 0) 21:31: 00005ccd_435a5454_00023d82 (ID = 0) 21:31: 000002b2_4365a7ea_00038c76 (ID = 0) 21:31: 00004ebf_435ae1b4_0004db24 (ID = 0) 21:31: 00003087_435a5aa1_00034cea (ID = 0) 21:31: 00000c1e_435ae367_0004c989 (ID = 0) 21:31: 00000a6c_4369238f_00064390 (ID = 0) 21:31: 00004328_4369238f_00088e58 (ID = 0) 21:31: 000036a1_43692390_00011726 (ID = 0) 21:31: ace.dll (ID = 0) 21:31: 000046cf_435a368f_00057907 (ID = 0) 21:31: 00000260_4365a4e9_00060eeb (ID = 0) 21:31: 00002d12_435b113b_000d7f80 (ID = 0) 21:31: 0000798b_4368eb54_000c8b5e (ID = 0) 21:31: 00001ad4_43643ef5_0004be1e (ID = 0) 21:31: 000012db_435968d6_000f3976 (ID = 0) 21:31: 0000249e_43644f3b_000274f4 (ID = 0) 21:31: data.bin (ID = 0) 21:31: 00005772_436a606f_00011599 (ID = 0) 21:31: 00001af4_436a6484_0008c3d9 (ID = 0) 21:31: 000072ae_43643a0d_00067beb (ID = 0) 21:31: 0000252a_436a6549_00080d0e (ID = 0) 21:31: 00007fbe_435c1095_0002ea4e (ID = 0) 21:31: 00004328_435ae327_00049a7c (ID = 0) 21:31: 00000902_435a03af_000bed6f (ID = 0) 21:31: 00007e87_43643a64_0004e190 (ID = 0) 21:31: 00007bb9_435a03b1_000eb8d2 (ID = 0) 21:31: 00003c8a_43659445_00022720 (ID = 0) 21:31: 000001d3_435a368f_000e2ecc (ID = 0) 21:31: 00001d5e_436513c4_0008d269 (ID = 0) 21:31: 000046a7_435af69d_00063066 (ID = 0) 21:31: 00007346_43650204_00027f16 (ID = 0) 21:31: 000032e6_43644a96_0007cf4b (ID = 0) 21:32: 00007983_43644737_000b9d9c (ID = 0) 21:32: 00007ff5_436a5bf6_000aeb2b (ID = 0) 21:32: 000073d9_436a66b9_0008cd5b (ID = 0) 21:32: 0000765f_436a65b8_000880e3 (ID = 0) 21:32: 0000542c_43644d70_00013bf8 (ID = 0) 21:32: 00006172_43644a4c_000baf51 (ID = 0) 21:32: 00002059_43690145_0004db1b (ID = 0) 21:32: 00000633_4364593f_000b6ca4 (ID = 0) 21:32: 0000494a_4368f795_00013fa6 (ID = 0) 21:32: 000037e5_436a6551_000664a1 (ID = 0) 21:32: 00001dc0_436a6551_000c8161 (ID = 0) 21:32: 00007f4f_4368f78e_00000671 (ID = 0) 21:32: 00006c69_4368f5f3_0003864e (ID = 0) 21:32: 0000578d_43651833_0001abd9 (ID = 0) 21:32: 0000127e_436a6441_00061206 (ID = 0) 21:32: 0000387c_43655548_000a9be9 (ID = 0) 21:32: 0000424c_43656273_0009f4b8 (ID = 0) 21:32: 00003f97_435a5aae_000a0107 (ID = 0) 21:32: 000049f7_436a6552_000a8a76 (ID = 0) 21:32: 000010d9_4364f598_00073189 (ID = 0) 21:32: 00001850_436a65b8_000bdd80 (ID = 0) 21:32: 000075ef_43644739_000eb73c (ID = 0) 21:32: 00001366_435a0246_00025081 (ID = 0) 21:32: 000041bb_43595bd2_00012550 (ID = 0) 21:32: 000026e9_43595bd2_0008c940 (ID = 0) 21:32: 0000390c_435b1005_00074c39 (ID = 0) 21:32: 000032c1_4365555f_000415d3 (ID = 0) 21:32: 0000074d_435b1141_00002ecc (ID = 0) 21:32: 00005422_435a0322_000ccd66 (ID = 0) 21:32: 0000486a_435a4914_000cc3de (ID = 0) 21:32: 00005876_435a4a26_000704f9 (ID = 0) 21:32: 0000113e_435adc83_000d65d9 (ID = 0) 21:32: 0000123b_435ae47d_000dcc8b (ID = 0) 21:32: 00005f90_43643a17_000ad460 (ID = 0) 21:32: 00002e39_435ae1bd_000a8e0b (ID = 0) 21:32: 0000798b_435a039f_0006fddf (ID = 0) 21:32: 00001cdf_435adc18_000319cc (ID = 0) 21:32: 000032e7_435ae43a_0003ec23 (ID = 0) 21:32: 00006da6_435ae1dc_0002114b (ID = 0) 21:32: 00001d3f_435ae1dc_00056de8 (ID = 0) 21:32: 000036a1_435ae32c_0005a153 (ID = 0) 21:32: 00004657_4364473a_00047fe8 (ID = 0) 21:32: 00003a61_43644771_000cbcbe (ID = 0) 21:32: 00006a15_435a479a_0005ae91 (ID = 0) 21:32: 00002c49_4364473b_00017728 (ID = 0) 21:32: 000027da_435adc1c_0003576b (ID = 0) 21:32: 0000767d_435976ec_0002297c (ID = 0) 21:32: 000049f7_435a3c5c_000e6abf (ID = 0) 21:33: 00000588_435a4d55_0007a8ee (ID = 0) 21:33: 00003c61_4364473c_000d40ec (ID = 0) 21:33: 00000607_435ae401_000bd6a3 (ID = 0) 21:33: 0000759a_436440c2_000ba9c0 (ID = 0) 21:33: 00007dd1_4364494d_00001f50 (ID = 0) 21:33: 00006512_435add6b_000a1751 (ID = 0) 21:33: 00007987_43655605_000af111 (ID = 0) 21:33: 00002fff_4364474e_000985f8 (ID = 0) 21:33: 0000442b_436a6558_0008888c (ID = 0) 21:33: 00007874_435a1d88_0004d18c (ID = 0) 21:33: 00001d5e_435ae20c_000b3896 (ID = 0) 21:33: 00004d06_43595c58_00074c8e (ID = 0) 21:33: 00007020_43655606_0008d308 (ID = 0) 21:33: 00000f3e_435b1023_0007cddb (ID = 0) 21:33: 0000251f_43645bda_00060ff6 (ID = 0) 21:33: 0000322b_4365a84e_00019ec1 (ID = 0) 21:33: 000054de_435975f0_0005f23b (ID = 0) 21:33: 00005078_436a6558_0009e89e (ID = 0) 21:33: 000019d9_435a3bbe_000e9cd9 (ID = 0) 21:33: 00007daa_435af7eb_00051f9e (ID = 0) 21:33: 00001547_43595d00_0000725c (ID = 0) 21:33: 0000305e_436a5a56_0008f5c0 (ID = 0) 21:33: 0000153c_435969f7_000e3d63 (ID = 0) 21:33: 00003260_43655e16_000d6053 (ID = 0) 21:33: 00006c69_43644750_0004ad6b (ID = 0) 21:33: 00000e29_435adc24_0006448e (ID = 0) 21:33: 00001ff1_435ae20e_00009186 (ID = 0) 21:33: 00001d3f_43650add_0000c4b1 (ID = 0) 21:33: 00002d41_43655eca_00067b64 (ID = 0) 21:33: 00007e64_436556d2_000ba039 (ID = 0) 21:33: 00001316_436a6756_00036398 (ID = 0) 21:33: 0000047e_435b8721_0000f623 (ID = 0) 21:33: 00000099_436a5a38_00023040 (ID = 0) 21:33: 000030a7_4364f07f_000409be (ID = 0) 21:33: 00004ad4_436a66c5_00011eae (ID = 0) 21:33: 00001f16_436a66b9_000bdbbb (ID = 0) 21:33: 00000fbf_4368f1ba_00034df8 (ID = 0) 21:33: 00000c1e_43651458_0002726e (ID = 0) 21:33: 00000e90_436454d6_0002825e (ID = 0) 21:33: 00001cd0_435a024c_000c12bc (ID = 0) 21:33: 000053d1_436562af_0006626b (ID = 0) 21:33: 0000494a_43644c40_000ee0c3 (ID = 0) 21:33: 00006032_4364429d_00039c41 (ID = 0) 21:33: 0000561c_4365921d_0003edee (ID = 0) 21:33: 00004fe2_435a7d9b_00084522 (ID = 0) 21:33: 00004823_436353c9_000edf40 (ID = 0) 21:33: 00005de9_43655ed0_0001e076 (ID = 0) 21:33: 000032de_43655e21_00073336 (ID = 0) 21:33: 00000029_43643954_000b482e (ID = 0) 21:33: 00000099_435b1026_000a2983 (ID = 0) 21:33: 000026e9_436a59bb_0004f166 (ID = 0) 21:33: 00005dd5_43644f42_00062010 (ID = 0) 21:33: 00000677_43644c50_000ceffb (ID = 0) 21:33: 000045c5_435a52bb_00037dd7 (ID = 0) 21:33: 00006443_435b118f_0009d7b9 (ID = 0) 21:34: 00003f9a_435a651a_00055d5e (ID = 0) 21:34: 00005e41_43655f84_0007f8a0 (ID = 0) 21:34: 00006952_435b0623_0003a959 (ID = 0) 21:34: 00000588_4364d3e1_00077cc4 (ID = 0) 21:34: 000026ca_43644443_0003de00 (ID = 0) 21:34: 00001649_43643a19_0006712e (ID = 0) 21:34: 00004c85_435a45c2_000c93fc (ID = 0) 21:34: 000001eb_4358f257_00096cc8 (ID = 0) 21:34: 00004af3_436517c4_00090313 (ID = 0) 21:34: 00006df1_436a599a_000d8a04 (ID = 0) 21:34: 0000113e_4369222e_000bf463 (ID = 0) 21:34: 0000153c_43643a58_000c1ae1 (ID = 0) 21:34: 00002ea6_43595bdb_0001cd4b (ID = 0) 21:34: 000039b3_43597603_000880c4 (ID = 0) 21:34: 000018be_436353ce_000e5ee6 (ID = 0) 21:34: 000012db_43595bdb_000db88e (ID = 0) 21:34: 00007e0e_435ae27a_0000a63e (ID = 0) 21:34: 000006e3_435ae27a_00045118 (ID = 0) 21:34: 000016c5_4368f077_000e6439 (ID = 0) 21:34: 00000784_435ae404_000751f3 (ID = 0) 21:34: 000073b1_43655e27_00030da3 (ID = 0) 21:34: 00004080_4368f16e_00039f03 (ID = 0) 21:34: 00000029_436a595f_00020130 (ID = 0) 21:34: 0000314f_436a5ee0_00032aa8 (ID = 0) 21:34: 00006032_436a5faf_00098c74 (ID = 0) 21:34: 00000390_43691ed2_0009ddf3 (ID = 0) 21:34: 0000153c_43595bdc_000099f8 (ID = 0) 21:34: 00002e40_436a5f50_0005526b (ID = 0) 21:34: 00005af1_43643a19_000e635b (ID = 0) 21:34: 00004823_4364395a_000882ac (ID = 0) 21:34: 000046c2_435a656f_000b0d76 (ID = 0) 21:34: 00002fff_436a625d_0000a190 (ID = 0) 21:34: 00005e14_436a5f2b_0004f7a6 (ID = 0) 21:34: 00001e1f_4368df76_000cdfc0 (ID = 0) 21:34: 000063cb_436a5ba2_00065288 (ID = 0) 21:34: 00004df2_436a5f2c_000c2bdb (ID = 0) 21:34: 00002ea6_436a59f2_000514f1 (ID = 0) 21:34: 00007cfe_435c2e87_000716e6 (ID = 0) 21:34: 00004944_4368e5f3_000d27bb (ID = 0) 21:34: 00006784_436353d5_0002e940 (ID = 0) 21:35: 00007e87_43595bdc_0006687b (ID = 0) 21:35: 00002b0f_435ae404_0008b204 (ID = 0) 21:35: 000072b1_43655d46_000066cb (ID = 0) 21:35: 00004ae1_436353d9_00019fae (ID = 0) 21:35: 000066bb_436a5af3_000848ab (ID = 0) 21:35: 0000305e_435b1029_0008b333 (ID = 0) 21:35: 00003a61_435a14f3_0005e6c7 (ID = 0) 21:35: 00002e40_4368e5f4_00031784 (ID = 0) 21:35: 00001547_43597502_000b42ac (ID = 0) 21:35: 0000127e_43690145_000e5478 (ID = 0) 21:35: 00002120_435ae36d_0006c0b6 (ID = 0) 21:35: 000054de_43595d03_000e6b0b (ID = 0) 21:35: 00004908_43655e33_0001f111 (ID = 0) 21:35: 00003b65_43656a47_000713c3 (ID = 0) 21:35: 000026ca_4368ecaa_0007fcbc (ID = 0) 21:35: 00006784_436439c3_0007ea0b (ID = 0) 21:35: 00005f90_4368d178_000363cb (ID = 0) 21:35: 000058c5_435ae438_00016efc (ID = 0) 21:35: 000018be_436a5968_000b5ef0 (ID = 0) 21:35: 00004e45_436a5c3f_000a13e4 (ID = 0) 21:35: 0000491c_4368d7a8_00004c58 (ID = 0) 21:35: 00000120_436a5d41_0006bb23 (ID = 0) 21:35: 0000721d_435ae36f_0004a84c (ID = 0) 21:35: 00001dcb_435ae36f_000544c6 (ID = 0) 21:35: 00006784_4368d13a_000c6b1e (ID = 0) 21:35: 00006784_436a596a_000b914e (ID = 0) 21:35: 00003699_43644443_000e9050 (ID = 0) 21:35: 000012c2_435ae36f_000c4c3c (ID = 0) 21:35: 00001003_435ae36f_000dac4e (ID = 0) 21:35: 00004b40_4368e4ca_000ee184 (ID = 0) 21:35: 00005878_4368e4d8_000c21e4 (ID = 0) 21:35: 00000099_4359727a_000125e1 (ID = 0) 21:35: 000012e1_436443ba_00021453 (ID = 0) 21:35: 00004509_435b139d_0006e231 (ID = 0) 21:35: 00000902_43644450_00058731 (ID = 0) 21:35: 0000797d_4368e5b1_00034cf3 (ID = 0) 21:35: 0000121f_43644417_00055866 (ID = 0) 21:35: 00003106_435ae4a3_000ad053 (ID = 0) 21:35: 00001cd0_4368e661_0000237c (ID = 0) 21:35: 00006be8_43644d3d_00028efe (ID = 0) 21:35: 0000084d_435ae5db_00023c54 (ID = 0) 21:35: 00002059_43644f96_0005386c (ID = 0) 21:35: 00003308_435ae442_0000e3a4 (ID = 0) 21:35: 00005772_4368ed9d_000896ee (ID = 0) 21:35: 0000008c_435ae4a6_000def93 (ID = 0) 21:35: 00007fbe_436457ff_000d8fc4 (ID = 0) 21:35: 00002bd8_4365b3d5_0005f31b (ID = 0) 21:35: 00004461_435ae417_000018e3 (ID = 0) 21:35: 0000357e_435ae4ab_0007c7d4 (ID = 0) 21:36: 00005772_435a03b6_0001627f (ID = 0) 21:36: 00007514_435ae405_0001d74c (ID = 0) 21:36: 000067d0_435ae5e9_000b40d9 (ID = 0) 21:36: 00000a87_435ae4e1_000eed36 (ID = 0) 21:36: 000075ef_435b88ef_00094776 (ID = 0) 21:36: 00007e94_43661a5f_00082cdb (ID = 0) 21:36: 00000ddc_436a5ea6_000ae869 (ID = 0) 21:36: 0000390c_43596dc1_00039dd1 (ID = 0) 21:36: 000026a6_435b126e_0004cf61 (ID = 0) 21:36: 00001a49_435b1981_000cd18e (ID = 0) 21:36: 00004ae1_4368d13c_000e9a08 (ID = 0) 21:36: 00000a2f_43656818_00046bde (ID = 0) 21:36: 000063cb_435b140f_00089fd9 (ID = 0) 21:36: 0000428b_436a5afe_000d6a58 (ID = 0) 21:36: 00003d6c_436353e0_0005e743 (ID = 0) 21:36: 000012db_436a5a07_00016adc (ID = 0) 21:36: 00000c1e_4369239f_000059b1 (ID = 0) 21:36: 0000491c_436a5a73_00048df4 (ID = 0) 21:36: 00006952_4358f149_000e0939 (ID = 0) 21:36: 00000029_4368d106_00004611 (ID = 0) 21:36: 00004ae1_436a596e_000935e8 (ID = 0) 21:36: 00007f96_436a5bd4_00056f3c (ID = 0) 21:36: 00005f49_4368e5ba_000294dc (ID = 0) 21:36: 00000099_43643cde_00055d5c (ID = 0) 21:36: 0000440d_435b1067_00009696 (ID = 0) 21:36: 00007bb9_43644472_00064671 (ID = 0) 21:36: 00005db2_436445af_000e0129 (ID = 0) 21:36: 00002b00_436a65cd_0008f703 (ID = 0) 21:36: 00007c27_43656a49_0001ecf9 (ID = 0) 21:36: 00005478_435ae545_00038624 (ID = 0) 21:36: 00003b25_435b139f_000d0a31 (ID = 0) 21:36: 00006b36_435b18ff_00020421 (ID = 0) 21:36: 00005221_436604e1_000c957b (ID = 0) 21:36: 0000127e_43644fab_00002e46 (ID = 0) 21:36: 00004cad_436a5eac_000ae30b (ID = 0) 21:36: 00005db2_4368f16e_000c7be6 (ID = 0) 21:36: 0000153c_436a5a08_00073f00 (ID = 0) 21:36: 0000701f_435b1296_000d5451 (ID = 0) 21:36: 0000442b_435a3c60_0004b9a6 (ID = 0) 21:36: 00006784_435963e6_000330b1 (ID = 0) 21:36: 00006df1_43596744_000355d6 (ID = 0) 21:36: 000040a5_435a5a52_0005b0bf (ID = 0) 21:37: 000049f7_436456bd_000aeaf6 (ID = 0) 21:37: 00000124_43595beb_0007a791 (ID = 0) 21:37: 00001e1f_435b13a1_00063519 (ID = 0) 21:37: 000026a6_436a5b02_000bd289 (ID = 0) 21:37: 00003ee9_43691e5d_0006af59 (ID = 0) 21:37: 00004db7_436a5a8b_000142fc (ID = 0) 21:37: 00006270_43645bf3_000e1968 (ID = 0) 21:37: 00007e87_436a5a20_000cd0eb (ID = 0) 21:37: 00001366_435b23e6_0000b0d1 (ID = 0) 21:37: 00000fbf_435b84f1_000e5416 (ID = 0) 21:37: 00004898_43660fad_00009474 (ID = 0) 21:37: 0000199f_436560d3_00053f29 (ID = 0) 21:37: 00005f1e_43644edc_0004cd06 (ID = 0) 21:37: 00000c7b_43645803_000dcd63 (ID = 0) 21:37: 00003d6c_436a5970_000b64d1 (ID = 0) 21:37: 00007e01_4365ec18_000b7553 (ID = 0) 21:37: 000054be_435ae644_000aa7b4 (ID = 0) 21:37: 000017bd_4365938c_00085374 (ID = 0) 21:37: 00005f67_43655ed7_00022ef4 (ID = 0) 21:37: 00002cd6_436a5970_000cec01 (ID = 0) 21:37: 000060be_4365ec1b_000da9dc (ID = 0) 21:37: 00006fc9_435a5448_000d21ae (ID = 0) 21:37: 000072ae_436a5971_0002b4ac (ID = 0) 21:37: 00006952_436a5971_000414be (ID = 0) 21:37: 00005579_435a4d5d_0002f221 (ID = 0) 21:37: 000016d4_436a65cd_000b41cb (ID = 0) 21:37: 000046cf_436a64df_0000fc20 (ID = 0) 21:37: 00002bfa_4365921d_00085c60 (ID = 0) 21:37: 00002833_43644f16_000836f0 (ID = 0) 21:37: 00002cf7_436a66cd_00093ddb (ID = 0) 21:37: 00006bfc_435b1427_000caa94 (ID = 0) 21:37: 000049bb_435c2c9e_00053529 (ID = 0) 21:37: 0000390c_436a5a24_0009b1ec (ID = 0) 21:37: 000060bf_435b83d5_0007ef78 (ID = 0) 21:37: 00003ee9_435a64fb_00080b9a (ID = 0) 21:37: 000068f5_435c316b_0004b4e9 (ID = 0) 21:37: 0000084d_43651a2c_000063db (ID = 0) 21:37: 00001a31_43661a71_0006e3cc (ID = 0) 21:37: 00006899_4368f10d_0008abf8 (ID = 0) 21:37: 00005f23_4364f5a2_0002d439 (ID = 0) 21:37: 0000520b_435c3152_0002ef56 (ID = 0) 21:37: 0000182f_436a66be_00069eb3 (ID = 0) 21:37: 000079dc_43661429_000665e0 (ID = 0) 21:37: 000022e4_436560d5_0005234b (ID = 0) 21:37: 0000456d_436513fa_000061ae (ID = 0) 21:37: 00005092_43661bfe_000dc780 (ID = 0) 21:37: 00000bdb_435b171b_000af0d4 (ID = 0) 21:37: 00000c7b_435c1096_000bf3f0 (ID = 0) 21:38: 000015bd_43659fc5_000a744e (ID = 0) 21:38: 0000520b_4364e242_000ae530 (ID = 0) 21:38: 000077e7_43659104_00053e20 (ID = 0) 21:38: 0000468c_435a5a81_00092b06 (ID = 0) 21:38: 00005f90_436a5985_000d3b03 (ID = 0) 21:38: 00003cd6_436a616f_000703d6 (ID = 0) 21:38: 00000029_43596343_0004a6bc (ID = 0) 21:38: 00003b25_43643ed7_000a0b00 (ID = 0) 21:38: 00003a61_4368f5f8_000ccd8e (ID = 0) 21:38: 00006a15_43645ffd_000136fc (ID = 0) 21:38: 0000288f_4368f5f8_00061454 (ID = 0) 21:38: 00001850_436457cc_0002f788 (ID = 0) 21:38: 000016d4_435c106e_000ee4e8 (ID = 0) 21:38: 00004087_436456c0_000974a6 (ID = 0) 21:38: 00006be8_435a1d2a_000a64bc (ID = 0) 21:38: 00005039_4368f864_00068f9e (ID = 0) 21:38: 00000ecc_436a64bc_000d0d39 (ID = 0) 21:38: 00003a8d_436a65e7_0000fa9c (ID = 0) 21:38: 00007fbe_436a65fe_0000b864 (ID = 0) 21:38: 0000401d_4368f753_00059ae9 (ID = 0) 21:38: 00005ea5_43655ffc_0001e5db (ID = 0) 21:38: 00007f61_436a65e6_0009aac1 (ID = 0) 21:38: 00002852_435c2e98_000f1a76 (ID = 0) 21:38: 0000542c_4368f86f_0002ad49 (ID = 0) 21:38: 00003492_43645c4d_000b56f9 (ID = 0) 21:38: 0000618a_43659445_0003fc8c (ID = 0) 21:38: 000016c5_435b6e43_000c35d4 (ID = 0) 21:38: 000037e6_436a6540_0008018c (ID = 0) 21:38: 00000c7b_436a6604_00037329 (ID = 0) 21:38: 00005005_43645808_00013aa8 (ID = 0) 21:38: 00004823_4359634e_0009530e (ID = 0) 21:38: 00006ad6_4368f1c8_000eeb81 (ID = 0) 21:38: 00003f4a_436a66cd_000b3a66 (ID = 0) 21:38: 00006df1_4368d17b_00021499 (ID = 0) 21:38: 000057d3_435a3a5c_0006603e (ID = 0) 21:38: 0000692c_4368ee9f_000edea8 (ID = 0) 21:38: 0000765f_436457c0_0007e611 (ID = 0) 21:38: 00006732_43645242_000e7169 (ID = 0) 21:38: 00002852_436a67c9_000eee79 (ID = 0) 21:39: 00002c49_4368f55e_000eeb94 (ID = 0) 21:39: 00004d67_436a66c0_000d14f0 (ID = 0) 21:39: 0000074d_43597610_000dd4d0 (ID = 0) 21:39: 00000e90_436a6518_00091d18 (ID = 0) 21:39: 0000323b_435979d5_0004c76c (ID = 0) 21:39: 00000975_436454f2_000a7591 (ID = 0) 21:39: 000033ea_435a0689_00077dc6 (ID = 0) 21:39: 00005005_436a6617_000c93ce (ID = 0) 21:39: 00000fc9_4368fbef_00011fc8 (ID = 0) 21:39: 000011d5_43656018_00051c60 (ID = 0) 21:39: 00002120_43651460_000e1556 (ID = 0) 21:39: 00006d22_436452db_0005e2c6 (ID = 0) 21:39: 000048db_436a67cb_000cfd2e (ID = 0) 21:39: 00002b00_436457da_0009ff81 (ID = 0) 21:39: 0000701f_436a5b19_000af3d8 (ID = 0) 21:39: 00002b0c_4368fd29_000790ac (ID = 0) 21:39: 00001af4_43645309_00069749 (ID = 0) 21:39: 000019d9_436455d8_000ac6a3 (ID = 0) 21:39: 00007049_4368ee3e_0004f1f9 (ID = 0) 21:39: 000018be_4358f808_000bebdb (ID = 0) 21:39: 00003cd5_4368f16a_000c8c84 (ID = 0) 21:39: 0000014f_43659220_00036254 (ID = 0) 21:39: 00003ef6_435a033b_000939d1 (ID = 0) 21:39: 000019da_43645c51_000a3486 (ID = 0) 21:39: 00004823_43595b51_0001d36b (ID = 0) 21:39: 000048db_43659216_000c5534 (ID = 0) 21:39: 000009b3_4365682d_000c5ed0 (ID = 0) 21:39: 00002959_435a5410_00057bb1 (ID = 0) 21:39: 00000940_435a5977_000ca504 (ID = 0) 21:39: 000013e9_4368f16d_0007e0b6 (ID = 0) 21:39: 00004d67_4364baa1_0009dbfc (ID = 0) 21:39: 00000c15_4364580e_00077928 (ID = 0) 21:39: 00001916_435b970c_000d2dec (ID = 0) 21:39: 00005968_436a66c1_0002b67c (ID = 0) 21:39: 00000c15_436a661b_000ef516 (ID = 0) 21:39: 0000409d_436a5fe0_000e23d0 (ID = 0) 21:39: 000075ef_4368f4e5_000429a9 (ID = 0) 21:39: 00003c61_4368f562_000848db (ID = 0) 21:39: 000016d4_436457df_000b7bb3 (ID = 0) 21:39: 00000f3e_436a5a2e_00092694 (ID = 0) 21:39: 00000878_43692122_000d8db4 (ID = 0) 21:40: 00005ed0_436a66e8_0009ae9c (ID = 0) 21:40: 00003807_43645811_000a4a2b (ID = 0) 21:40: 000037e6_436454fe_000dee90 (ID = 0) 21:40: 0000188f_4365944e_000d0c10 (ID = 0) 21:40: 00006874_43659216_000e2aa1 (ID = 0) 21:40: 0000773b_43645814_00021aa1 (ID = 0) 21:40: 00002f14_436a6184_000dbdd4 (ID = 0) 21:40: 00001d18_43645be6_000a4c8c (ID = 0) 21:40: 00003807_436a661c_00030f73 (ID = 0) 21:40: 0000047e_4368f1d3_0009d039 (ID = 0) 21:40: 0000721d_43651464_000107a0 (ID = 0) 21:40: 00005e73_436461cd_0008f716 (ID = 0) 21:40: 00006ad6_436a6185_00044a18 (ID = 0) 21:40: 0000187e_436a6124_000efe71 (ID = 0) 21:40: 000073da_436a6040_00084da3 (ID = 0) 21:40: 00005707_43656a4e_000e90d6 (ID = 0) 21:40: 0000773b_436a662f_000b4561 (ID = 0) 21:40: 0000567e_43656984_000f2b81 (ID = 0) 21:40: 000001d3_43645498_000a29a0 (ID = 0) 21:40: 00002f15_4365618a_000bdd8e (ID = 0) 21:40: 00004823_4358ecee_0001c2d9 (ID = 0) 21:40: 000058b0_436a6040_000eb8a0 (ID = 0) 21:40: 00002fff_4368f566_0008d4b6 (ID = 0) 21:40: 00000633_436a6630_0001352b (ID = 0) 21:40: 00003371_436591bd_0001d1ee (ID = 0) 21:40: 00002833_436a6347_00001e6b (ID = 0) 21:40: 00003699_436a6045_000c149c (ID = 0) 21:40: 00006c69_436a625d_000733ab (ID = 0) 21:40: 00001dcb_43651464_0002dd0c (ID = 0) 21:40: 00006d4e_4364f9c4_0001523c (ID = 0) 21:40: 00000728_4364f5fb_000873b3 (ID = 0) 21:40: 000074ad_435c2d7a_000c2e53 (ID = 0) 21:40: 00001289_4365020b_00060313 (ID = 0) 21:40: 00004d54_43645e00_0005ec36 (ID = 0) 21:40: 00006784_4358ecf0_00001fcb (ID = 0) 21:40: 00007a61_435c31c8_000006d0 (ID = 0) 21:40: 00005f45_435c2f17_0000794c (ID = 0) 21:40: 00000ce1_4364eff5_000681c4 (ID = 0) 21:40: 00002237_43659220_00055ee0 (ID = 0) 21:40: 00007282_436a663f_000b5124 (ID = 0) 21:40: 00005d17_436591bd_0006677e (ID = 0) 21:40: 00000e00_4365620e_00026370 (ID = 0) 21:41: 0000401d_43644b0a_000e2dc3 (ID = 0) 21:41: 00007014_435c324f_0002aff3 (ID = 0) 21:41: 0000139d_436444f3_00096a4e (ID = 0) 21:41: 00006ad4_43644f77_000acdeb (ID = 0) 21:41: 0000251f_436a663f_000d2691 (ID = 0) 21:41: 00005d03_435b12f7_00022a9c (ID = 0) 21:41: 00000e12_4368fbf1_00008e8e (ID = 0) 21:41: 0000260d_435b1660_000526a6 (ID = 0) 21:41: 0000759a_435b1849_000e36f8 (ID = 0) 21:41: 00004027_436a67fe_00047b93 (ID = 0) 21:41: 00004e57_436a66e8_000d8094 (ID = 0) 21:41: 00000035_436a6441_000a8078 (ID = 0) 21:41: 0000422d_4368f1d6_00065d5e (ID = 0) 21:41: 00000120_435b182e_000adef4 (ID = 0) 21:41: 00001366_4368e620_0006a809 (ID = 0) 21:41: 00001547_436a5a94_000daf1c (ID = 0) 21:41: 000026e9_43643a32_0002dd99 (ID = 0) 21:41: 00006e5d_435b13e1_0001321c (ID = 0) 21:41: 0000252b_43660fd2_000052c0 (ID = 0) 21:41: 00000732_436a5ce2_0002f674 (ID = 0) 21:41: 00005af1_436a59b4_000e1c44 (ID = 0) 21:41: 0000305e_43595bed_00003600 (ID = 0) 21:41: 000018be_4359635b_0008d896 (ID = 0) 21:41: 00003d6c_436439d7_00072198 (ID = 0) 21:41: 00001649_43596716_000e3e59 (ID = 0) 21:41: 000054de_436a5ab9_000505e0 (ID = 0) 21:41: 00005cca_43656992_000e8f8b (ID = 0) 21:41: 00007bb9_436a6057_00043973 (ID = 0) 21:41: 00001bd9_435a7c37_000be88a (ID = 0) 21:41: 00001ad4_435b13e2_0006b803 (ID = 0) 21:41: 00004eae_435c2de1_000a517e (ID = 0) 21:41: 00005d24_4364d2dc_000852c0 (ID = 0) 21:41: 00004d54_435c1270_00000ed9 (ID = 0) 21:41: 00005af1_4368d17d_0009eae8 (ID = 0) 21:41: 00004db7_4368dbca_000c3cce (ID = 0) 21:41: 000041bb_4368d17e_0000500c (ID = 0) 21:41: 000001eb_43643a39_000a0c70 (ID = 0) 21:41: 00000124_43643d08_000c665c (ID = 0) 21:41: 00003cd5_435b8047_000e3924 (ID = 0) 21:41: 00007e87_435b0e9c_00021dbc (ID = 0) 21:41: 00002cd6_4358ecfa_000514b9 (ID = 0) 21:41: 00003b29_436591f8_000828b9 (ID = 0) 21:41: 00003b97_435c316e_00049eab (ID = 0) 21:41: 000039b3_43595d20_000966c6 (ID = 0) 21:41: 00002d73_43656882_0004eab1 (ID = 0) 21:41: 000041bb_436a59b8_00046b2b (ID = 0) 21:41: 0000196f_436569dc_000a6148 (ID = 0) 21:41: 0000422d_435b87ef_000a87ce (ID = 0) 21:41: 00006443_43643e02_000deb86 (ID = 0) 21:41: 00002d12_43595d22_00037c64 (ID = 0) 21:41: 00006778_436591dc_0004077e (ID = 0) 21:41: 00005d27_4365944f_00098df4 (ID = 0) 21:41: 000007cf_435a2733_00036d14 (ID = 0) 21:41: 00004d8f_43657b12_000ac519 (ID = 0) 21:41: 00003d6c_4368d13d_000377fc (ID = 0) 21:41: 00002cd6_4368d13d_0005c2c4 (ID = 0) 21:41: 0000366b_435b23e7_000ceff1 (ID = 0) 21:41: 00000603_43659971_0009da00 (ID = 0) 21:41: 00002753_436568a7_000dacfe (ID = 0) 21:41: 00002ea6_43643a40_0001f366 (ID = 0) 21:41: 00005940_436568b3_000eb416 (ID = 0) 21:41: 00005af1_43596746_00044bcc (ID = 0) 21:41: 00001243_436568b9_000843bb (ID = 0) 21:42: 000032e6_4368f746_000d9233 (ID = 0) 21:42: 00006e5d_4368df78_00025fce (ID = 0) 21:42: 00004ff8_43646001_0006f4e1 (ID = 0) 21:42: 00007f5c_4365944f_000d5fec (ID = 0) 21:42: 000058d5_436569f9_0008e0be (ID = 0) 21:42: 00006048_435c05fc_00046d2e (ID = 0) 21:42: 00002350_435b186f_00067e11 (ID = 0) 21:42: 00005d24_435c2df9_00029814 (ID = 0) 21:42: 00001d18_436a6657_0001c24e (ID = 0) 21:42: 00002833_4368fc43_000b1193 (ID = 0) 21:42: 00002c3b_435b31f9_00003ed3 (ID = 0) 21:42: 000066c4_435b23e9_00002538 (ID = 0) 21:42: 000048db_435c2ea9_000e1a04 (ID = 0) 21:42: 00006270_436a6657_00051eeb (ID = 0) 21:42: 000039b3_436a5abd_000bfcb8 (ID = 0) 21:42: 000001eb_436a59cf_000cb799 (ID = 0) 21:42: 0000047e_436a6197_00079699 (ID = 0) 21:42: 00001547_4368dbcc_000195be (ID = 0) 21:42: sdbintel.sys (ID = 0) 21:42: 000079d1_4364f5a9_000ee6dc (ID = 0) 21:42: 00000e90_435c0504_00027de9 (ID = 0) 21:42: 00004b99_436591f8_0009afe9 (ID = 0) 21:42: 000039ce_435c1275_00007936 (ID = 0) 21:42: 00003492_436a6670_0009cbc0 (ID = 0) 21:42: 00006479_435a5685_000eb841 (ID = 0) 21:42: 00006cde_43659b53_000885fc (ID = 0) 21:42: 00005f45_4364df45_0004a141 (ID = 0) 21:42: 0000422d_436a6197_000b6891 (ID = 0) 21:42: 0000249e_4368fcf7_000edef4 (ID = 0) 21:42: 0000549b_435a7f41_0006ffb1 (ID = 0) 21:42: 00006ad6_435a0b52_00020339 (ID = 0) 21:42: 000030f1_435a5c63_000d302a (ID = 0) 21:42: 000051b1_43659876_00025994 (ID = 0) 21:42: 00006512_43650acb_00091536 (ID = 0) 21:42: 000043db_4365218e_000d7f04 (ID = 0) 21:42: 00002ea6_4368d1ac_000d652e (ID = 0) 21:42: 00005d03_436a5b23_0009086e (ID = 0) 21:42: 00000588_435c2e2b_0007834c (ID = 0) 21:42: 00000a28_435c310d_00016b36 (ID = 0) 21:42: 00005579_435c2e4f_000b350e (ID = 0) 21:42: 000053b1_435c3253_00086dd8 (ID = 0) 21:42: 00007a61_436a692a_000b1313 (ID = 0) 21:42: 000019da_436a6670_000d013e (ID = 0) 21:42: 000022ee_435b1886_000774cc (ID = 0) 21:42: 000012db_4368d1ad_0001586c (ID = 0) 21:42: 000075c1_435c3422_000acf29 (ID = 0) 21:42: 00004027_435c3172_00017fac (ID = 0) 21:42: 000049bb_436a67ab_000036cc (ID = 0) 21:42: 0000366b_435a025c_0004efea (ID = 0) 21:42: 0000153c_4368d1c1_000e77c8 (ID = 0) 21:42: 000054de_4368dbcc_00025956 (ID = 0) 21:42: 0000448d_43659343_0009ee53 (ID = 0) 21:43: 00000633_435a407d_000c1f8a (ID = 0) 21:43: 0000489c_4368f6e3_0007e198 (ID = 0) 21:43: 000054dc_436a61a0_000381e6 (ID = 0) 21:43: 00007e0e_43651400_0002a718 (ID = 0) 21:43: 00000677_435a1b61_0007d6ee (ID = 0) 21:43: 00006b28_43651487_00094951 (ID = 0) 21:43: 000016c5_436a612a_00099feb (ID = 0) 21:43: 00004ef7_436593af_0005bbb8 (ID = 0) 21:43: 00006e89_436512fb_0007eb84 (ID = 0) 21:43: 0000368e_436a61a0_00055753 (ID = 0) 21:43: 00007f4f_435a1acf_000d0936 (ID = 0) 21:43: 00002959_436a681f_0003d521 (ID = 0) 21:43: 00007014_436a6941_0007e999 (ID = 0) 21:43: 00005064_436a6685_000908ec (ID = 0) 21:43: 000053d3_43656a15_000004e1 (ID = 0) 21:43: 0000074d_43595d23_0003a923 (ID = 0) 21:43: 00005981_436599ed_00027da9 (ID = 0) 21:43: 0000288f_436a6271_0001604c (ID = 0) 21:43: 00006bfc_436a5bd3_0001e5e1 (ID = 0) 21:43: 000013e9_435b8049_0000f910 (ID = 0) 21:43: 00006952_4368d16f_0006dc04 (ID = 0) 21:43: 000026a6_4368dc7e_000ab108 (ID = 0) 21:43: 00004d06_43643d76_0009c631 (ID = 0) 21:43: 000039b3_4368dbcc_00089d34 (ID = 0) 21:43: 000066c4_435a0270_0004eb0f (ID = 0) 21:43: 000045a1_43656a16_00062741 (ID = 0) 21:43: 00002d12_436a5ac1_0004bd84 (ID = 0) 21:43: 00002d12_4368dbcc_000939ae (ID = 0) 21:43: 00007374_43659345_00034059 (ID = 0) 21:43: 0000323b_435b14b9_00068d96 (ID = 0) 21:43: 00000c95_43656a17_000121f6 (ID = 0) 21:43: 00007a5a_436a5b25_000bfaf0 (ID = 0) 21:43: 00004230_435a0272_000c24e4 (ID = 0) 21:43: 00000d66_436a61aa_0005b6b1 (ID = 0) 21:43: 000063d9_43659345_000515c6 (ID = 0) 21:43: 0000074d_436a5ac5_000c0299 (ID = 0) 21:43: 00006ad4_4368fd53_000a041c (ID = 0) 21:43: 00006f11_436a67ab_00036c4b (ID = 0) 21:44: 00004dc8_43595d23_00055771 (ID = 0) 21:44: 000067a6_43656e13_000d9cbe (ID = 0) 21:44: 00006bdb_43657c4b_0004f6de (ID = 0) 21:44: 00006899_436a612b_000e8958 (ID = 0) 21:44: 00004d54_436a6685_000cb3c6 (ID = 0) 21:44: 00002bb8_43659248_000b23ac (ID = 0) 21:44: 000039ce_436a6687_000c49ab (ID = 0) 21:44: 00007028_43659a28_000c09f3 (ID = 0) 21:44: 0000138a_435a5396_0001bb9c (ID = 0) 21:44: 00007b8b_4365934e_0007e16b (ID = 0) 21:44: 00000ecc_435c0229_000a92cc (ID = 0) 21:44: 00004dc8_436a5ac9_0006bff1 (ID = 0) 21:44: 000022cd_436a6279_0005d4a0 (ID = 0) 21:44: 00003bb1_436a6689_0004d819 (ID = 0) 21:44: 00007983_436a61aa_000c6feb (ID = 0) 21:44: 00001943_4365934e_000aefcb (ID = 0) 21:44: 00005815_4364ef93_000ee5b6 (ID = 0) 21:44: 000012c2_43651465_000b2316 (ID = 0) 21:44: 00003cd5_436a612c_0000800b (ID = 0) 21:44: 00004c85_436a668d_0008e7b0 (ID = 0) 21:44: 00007e87_4368d1dd_00015498 (ID = 0) 21:44: 00000029_436a17d0_00001123 (ID = 0) 21:44: 000042cf_43659c71_00088ade (ID = 0) 21:44: 0000012f_436599a3_00074866 (ID = 0) 21:44: 00007365_43659360_000389fc (ID = 0) 21:44: 000013e9_436a612c_0003674c (ID = 0) 21:44: 00004657_436a61dc_000c01fb (ID = 0) 21:44: 0000701f_4368ddb8_0006487e (ID = 0) 21:44: 00001643_435a4dd6_0008a921 (ID = 0) 21:44: 00000ecc_435a3616_0000acbe (ID = 0) 21:44: 00004080_436a612d_0009d7e9 (ID = 0) 21:44: 0000513e_436a6691_000e091b (ID = 0) 21:44: 00005078_4369093e_0002a328 (ID = 0) 21:44: 00005753_435b8084_000728bc (ID = 0) 21:44: 00006ea1_435a72c3_000ed09f (ID = 0) 21:44: 00006d69_436a6692_0005f570 (ID = 0) 21:44: 00005887_436594ca_000cb730 (ID = 0) 21:44: 00006611_43659360_0005ada6 (ID = 0) 21:44: 00000822_435a036d_000e9a64 (ID = 0) 21:44: 0000789d_43657caa_000670c4 (ID = 0) 21:44: 0000314f_435a0216_00064d6c (ID = 0) 21:44: 0000401d_435a1a6c_000534f1 (ID = 0) 21:44: 000016d4_435a3cea_00012fca (ID = 0) 21:44: 00003807_435a3fc7_0007aa6f (ID = 0) 21:44: 00003ef6_4364430d_00096ede (ID = 0) 21:44: 00005a9f_43644f79_0009a038 (ID = 0) 21:44: 00007ac2_435c3177_0004f869 (ID = 0) 21:44: 00004a92_436591e0_000556f1 (ID = 0) 21:44: 00005f49_435b1bdd_000b4489 (ID = 0) 21:44: 00005ed0_435c2526_000e8a10 (ID = 0) 21:44: 00000a87_43651994_00085ba4 (ID = 0) 21:44: 00004cff_436518e0_000d4408 (ID = 0) 21:44: 00000732_435b174c_000d6486 (ID = 0) 21:45: 00003c61_435a112a_000899cc (ID = 0) 21:45: 00005991_435a0372_00016b2f (ID = 0) 21:45: 0000494a_435a1b11_0002b851 (ID = 0) 21:45: 00005dd5_435a1de7_0008bd59 (ID = 0) 21:45: 00000a1d_436591e2_0005feab (ID = 0) 21:45: 00004d06_435b10b0_00047bfe (ID = 0) 21:45: 000012e1_435a039e_00099144 (ID = 0) 21:45: 0000153c_435b0e1f_000750c9 (ID = 0) 21:45: 0000164a_436594cc_000061d1 (ID = 0) 21:45: 00002fff_435b8dcc_000c56b4 (ID = 0) 21:45: 00007874_435bccd7_000850e0 (ID = 0) 21:45: 00004db7_43643dcd_000e2178 (ID = 0) 21:45: 00006732_436a644e_0004d3f6 (ID = 0) 21:45: 000041bb_43596751_0006d474 (ID = 0) 21:45: 00007f4f_435ba3b5_0003b5d9 (ID = 0) 21:45: 00001003_43651466_0001af59 (ID = 0) 21:45: 000023c9_436445ef_0004417e (ID = 0) 21:45: 00003295_4364efc7_00083f28 (ID = 0) 21:45: 00001481_435c104b_0001e688 (ID = 0) 21:45: 000009ce_435c3136_000b2eb9 (ID = 0) 21:45: 0000513e_435a45e9_0007529c (ID = 0) 21:45: 00006ad4_435a1e00_00088661 (ID = 0) 21:45: 0000591d_435a3bfe_0003f277 (ID = 0) 21:45: 0000121f_435a03a2_000a443e (ID = 0) 21:45: 0000440d_435973ec_000a31d8 (ID = 0) 21:45: 000021eb_436593b0_0002167e (ID = 0) 21:45: 00005f1e_435bcb1a_00019820 (ID = 0) 21:45: 00002725_435c2ec0_000dd7cc (ID = 0) 21:45: 00004b40_435b18ba_0004ee73 (ID = 0) 21:45: 000012db_435b0c88_000dce68 (ID = 0) 21:45: 00001547_43643dde_000a60e3 (ID = 0) 21:45: 0000767d_436a5b37_00011166 (ID = 0) 21:45: 0000491c_435973f5_000b4f2e (ID = 0) 21:45: 000066bb_4368dc61_000d6a84 (ID = 0) 21:45: 000018be_43595b64_000461f4 (ID = 0) 21:45: 00001649_436a5999_000bd616 (ID = 0) 21:45: 00004509_436a5b40_00022ebc (ID = 0) 21:45: 00006b89_43643f6d_0009fa23 (ID = 0) 21:45: 00004db7_43595cf5_0001948e (ID = 0) 21:45: 0000422d_435a0c46_000b31b1 (ID = 0) 21:45: 00004dc8_43643e01_00077ae9 (ID = 0) 21:45: 00004823_4368d136_00023ec8 (ID = 0) 21:45: 00001238_436a5b4a_000c0778 (ID = 0) 21:45: 00007f61_436457f2_0000bee8 (ID = 0) 21:45: 00002ba5_435a7dc4_00077d74 (ID = 0) 21:45: 00006270_435a4272_0009d656 (ID = 0) 21:45: 000018be_4368d136_000ddbce (ID = 0) 21:46: 00006586_436591f6_0003d626 (ID = 0) 21:46: 000022ee_43644104_0000e380 (ID = 0) 21:46: 00000120_436440ba_00022a81 (ID = 0) 21:46: 0000260d_436a5c6a_000b7b20 (ID = 0) 21:46: 00002015_436593b0_0003ebeb (ID = 0) 21:46: 00005005_435c10d3_000b0048 (ID = 0) 21:46: 000000c1_435a62e2_00062db2 (ID = 0) 21:46: 00007a54_435a65e5_00084c0e (ID = 0) 21:46: 00005dd5_435be7f3_000ae6e1 (ID = 0) 21:46: 00002b0c_435bced3_000baf51 (ID = 0) 21:46: 00003f0e_43661371_000e9460 (ID = 0) 21:46: 000054d6_4364ef2d_000b20c6 (ID = 0) 21:46: 00006b89_436a5c79_00067658 (ID = 0) 21:46: 000068f5_4364e248_0005fc04 (ID = 0) 21:46: 0000138a_436a680e_0002b1e9 (ID = 0) 21:46: 00006a15_436a6698_000a85a1 (ID = 0) 21:46: 00007dd1_436a6279_0007f849 (ID = 0) 21:46: 00002cf7_4364bc8b_00095173 (ID = 0) 21:46: 0000093b_436594cc_00037031 (ID = 0) 21:46: 00005039_43644d60_0003c939 (ID = 0) 21:46: 00001edc_43651673_00093f63 (ID = 0) 21:46: 00001db5_43659249_000f2263 (ID = 0) 21:46: 00006d69_43645fe8_000d96d6 (ID = 0) 21:46: 00002332_436594cf_000e819e (ID = 0) 21:46: 000010d9_4364f7ba_000a2cc8 (ID = 0) 21:46: 0000357e_43651947_00019f99 (ID = 0) 21:46: 00005f34_43650acd_000091d0 (ID = 0) 21:46: 0000448a_43659a3c_000bb6db (ID = 0) 21:46: 000067d0_43651a39_0003bb5b (ID = 0) 21:46: 000022cd_4368f5f9_0005f2d6 (ID = 0) 21:46: 000078fe_4365184d_000f1413 (ID = 0) 21:46: 00001bd9_4364fb35_000574c6 (ID = 0) 21:46: 000062b0_4365924a_000203cc (ID = 0) 21:46: 0000412f_4364ef82_000d2604 (ID = 0) 21:46: 00003a9e_43644133_00079344 (ID = 0) 21:46: 00004c66_4364f984_0002aa60 (ID = 0) 21:46: 00006d73_43651a26_0001a22c (ID = 0) 21:46: 00004ff8_436a6698_000c0cd1 (ID = 0) 21:46: 00006486_4364f080_000a7a5b (ID = 0) 21:46: 00004efe_4364fb28_000c0bfe (ID = 0) 21:46: 00005c46_436a669a_0005ad14 (ID = 0) 21:46: 00003459_4364e2d0_0004b1b1 (ID = 0) 21:46: 00003f97_4364ef66_000a8bf9 (ID = 0) 21:46: 0000569b_436594d0_000a18cc (ID = 0) 21:46: 000001e1_4364fac3_0006ec9c (ID = 0) 21:46: 00003ee9_4364f073_000302a6 (ID = 0) 21:46: 00000d66_4368f4db_0006b18c (ID = 0) 21:46: 00002c9e_436599af_0006a130 (ID = 0) 21:46: 0000123b_436518f8_000e4063 (ID = 0) 21:46: 00000a41_4365146d_0001887c (ID = 0) 21:47: 00004dc8_4368dc3f_000c35e9 (ID = 0) 21:47: 0000486a_436a669c_0006ca29 (ID = 0) 21:47: 0000261e_436a628b_0005eba3 (ID = 0) 21:47: 00002db5_435a65ab_000afee4 (ID = 0) 21:47: 00006cf4_435c2ef2_000af7f6 (ID = 0) 21:47: 0000251f_435a423a_000c6d4e (ID = 0) 21:47: 00001916_435a1994_0006b9cf (ID = 0) 21:47: 00005

Salut ! Encore un fois je commence mon message par des remerciments car vous les méritez bien! Je poursuis en vous dissant qu'après le scan de spy sweeper après qu'il a effacer les truc qu'il a trouvé il a souhaité arreter tout les processus et là il a bossé 1h avant que je le redémarre à la barbar... et au rédémarrage j'ai eu droit à un plantage de windows avant l'écran de login mais sur le fond bleu similaire à la page de login il me lister certains fichiers qui avaient supprimer par spy sweeper du style c:\program files\netinrar\cache\00004a80_43644558_000aded6. Je me rappelle aussi de certain fichier log du style ai_29-10-2005.log (ID = 0) voici le log de sweeper: ******** 01:17: | Start of Session, vendredi 4 novembre 2005 | 01:17: Spy Sweeper started 01:17: Sweep initiated using definitions version 564 01:17: Starting Memory Sweep 01:20: Memory Sweep Complete, Elapsed Time: 00:02:16 01:20: Starting Registry Sweep 01:20: Registry Sweep Complete, Elapsed Time:00:00:09 01:20: Starting Cookie Sweep 01:20: Cookie Sweep Complete, Elapsed Time: 00:00:00 01:20: Starting File Sweep 01:41: File Sweep Complete, Elapsed Time: 00:21:22 01:41: Full Sweep has completed. Elapsed time 00:23:53 01:41: Traces Found: 0 ******** 01:17: | Start of Session, vendredi 4 novembre 2005 | 01:17: Spy Sweeper started 01:17: Sweep initiated using definitions version 564 01:17: Starting Memory Sweep 01:17: Sweep Canceled 01:17: Memory Sweep Complete, Elapsed Time: 00:00:05 01:17: Traces Found: 0 01:17: Deletion from quarantine initiated 01:17: Processing: xiti cookie 01:17: Deletion from quarantine completed. Elapsed time 00:00:00 01:17: | End of Session, vendredi 4 novembre 2005 | ******** 00:35: | Start of Session, vendredi 4 novembre 2005 | 00:35: Spy Sweeper started 00:35: Sweep initiated using definitions version 564 00:35: Starting Memory Sweep 00:37: Memory Sweep Complete, Elapsed Time: 00:01:50 00:37: Starting Registry Sweep 00:37: Registry Sweep Complete, Elapsed Time:00:00:07 00:37: Starting Cookie Sweep 00:37: Found Spy Cookie: xiti cookie 00:37: salmon@xiti[1].txt (ID = 3717) 00:37: Cookie Sweep Complete, Elapsed Time: 00:00:02 00:37: Starting File Sweep 01:06: File Sweep Complete, Elapsed Time: 00:29:03 01:06: Full Sweep has completed. Elapsed time 00:31:05 01:06: Traces Found: 1 01:16: Removal process initiated 01:17: Quarantining All Traces: xiti cookie 01:17: Removal process completed. Elapsed time 00:00:01 01:17: | End of Session, vendredi 4 novembre 2005 | ******** 00:33: | Start of Session, vendredi 4 novembre 2005 | 00:33: Spy Sweeper started 00:33: Sweep initiated using definitions version 564 00:33: Starting Memory Sweep 00:33: Sweep Canceled 00:33: Memory Sweep Complete, Elapsed Time: 00:00:04 00:33: Traces Found: 0 00:35: Deletion from quarantine initiated 00:35: Processing: apropos 00:35: Processing: bluestreak cookie 00:35: Processing: hbmediapro cookie 00:35: Processing: icannnews 00:35: Processing: potentially rootkit-masked files 00:35: Processing: trafficmp cookie 00:35: Deletion from quarantine completed. Elapsed time 00:00:01 00:35: | End of Session, vendredi 4 novembre 2005 | ******** 23:32: | Start of Session, jeudi 3 novembre 2005 | 23:32: Spy Sweeper started 23:32: Sweep initiated using definitions version 564 23:32: Starting Memory Sweep 23:34: Found Adware: icannnews 23:34: Detected running threat: C:\WINDOWS\system32\jzcript.dll (ID = 83) 23:34: Detected running threat: C:\WINDOWS\system32\hDl.dll (ID = 83) 23:34: Memory Sweep Complete, Elapsed Time: 00:02:04 23:34: Starting Registry Sweep 23:35: Registry Sweep Complete, Elapsed Time:00:00:07 23:35: Starting Cookie Sweep 23:35: Found Spy Cookie: hbmediapro cookie 23:35: [email protected][2].txt (ID = 2768) 23:35: Found Spy Cookie: bluestreak cookie 23:35: salmon@bluestreak[1].txt (ID = 2314) 23:35: Found Spy Cookie: trafficmp cookie 23:35: salmon@trafficmp[2].txt (ID = 3581) 23:35: Cookie Sweep Complete, Elapsed Time: 00:00:00 23:35: Starting File Sweep 23:36: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:36: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:36: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:36: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:36: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:36: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:36: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:36: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:37: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:37: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:37: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:37: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:37: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:37: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:37: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:37: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:39: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:39: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:39: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:39: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:39: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:39: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:39: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:39: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:39: Found Adware: effective-i toolbar 23:39: 664edb3c-2731-4c28-a182-7b1f23 (ID = 106574) 23:40: Found Adware: apropos 23:40: wingenerics.dll (ID = 50187) 23:40: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:40: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:40: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:40: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:40: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:40: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:40: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:40: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:41: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:41: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:41: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:41: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:41: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:41: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:41: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:41: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:43: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:43: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:43: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:43: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:43: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:43: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:43: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:43: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:44: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:44: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:44: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:44: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:44: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:44: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:44: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:44: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:44: atmtd.dll._ (ID = 166754) 23:45: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:45: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:45: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:45: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:45: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:45: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:45: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:45: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:46: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:46: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:46: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:46: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:46: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:46: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:46: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:46: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:47: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:47: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:47: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:47: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:47: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:47: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:47: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:47: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:49: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:49: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:49: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:49: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:49: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:49: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:49: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:49: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:50: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:50: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:50: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:50: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:50: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:50: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:50: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:50: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:50: atmtd.dll (ID = 166754) 23:51: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:51: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:51: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:51: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:51: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:51: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:51: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:51: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:52: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:52: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:52: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:52: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:52: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:52: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:52: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:52: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:54: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:54: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:54: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:54: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:54: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:54: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:54: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:54: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:55: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:55: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:55: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:55: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:55: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:55: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:55: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:55: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:57: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:57: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:57: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:57: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:57: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:57: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:57: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:57: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:58: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:58: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:58: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:58: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:58: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:58: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:58: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:58: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:59: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:59: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:59: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:59: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:59: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:59: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 23:59: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 23:59: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 00:00: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 00:00: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 00:00: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 00:00: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 00:00: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 00:00: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 00:00: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 00:00: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 00:02: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 00:02: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 00:02: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 00:02: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 00:02: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 00:02: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 00:02: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 00:02: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 00:03: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 00:03: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 00:03: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 00:03: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 00:03: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 00:03: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 00:03: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 00:03: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 00:04: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 00:04: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 00:04: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 00:04: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 00:04: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 00:04: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 00:04: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 00:04: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 00:06: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 00:06: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 00:06: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 00:06: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 00:06: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 00:06: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 00:06: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 00:06: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 00:07: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 00:07: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 00:07: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 00:07: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 00:07: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 00:07: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 00:07: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 00:07: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 00:08: File Sweep Complete, Elapsed Time: 00:33:00 00:08: Full Sweep has completed. Elapsed time 00:35:14 00:08: Traces Found: 9 00:08: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 00:08: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 00:08: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 00:08: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 00:08: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 00:08: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 00:08: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 00:08: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 00:10: Removal process initiated 00:10: Quarantining All Traces: apropos 00:10: Quarantining All Traces: effective-i toolbar 00:10: Quarantining All Traces: icannnews 00:10: Quarantining All Traces: bluestreak cookie 00:10: Quarantining All Traces: hbmediapro cookie 00:10: Quarantining All Traces: trafficmp cookie 00:10: Warning: Launched explorer.exe 00:10: Warning: Quarantine process could not restart Explorer. 00:12: Preparing to restart your computer. Please wait... 00:12: Removal process completed. Elapsed time 00:02:00 ******** 23:32: | Start of Session, jeudi 3 novembre 2005 | 23:32: Spy Sweeper started 23:32: Sweep initiated using definitions version 564 23:32: Starting Memory Sweep 23:32: Sweep Canceled 23:32: Memory Sweep Complete, Elapsed Time: 00:00:03 23:32: Traces Found: 0 23:32: | End of Session, jeudi 3 novembre 2005 | ******** 20:45: | Start of Session, jeudi 3 novembre 2005 | 20:45: Spy Sweeper started 20:45: Sweep initiated using definitions version 564 20:45: Starting Memory Sweep 20:45: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:45: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:45: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:45: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:45: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:45: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:45: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:45: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:45: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:45: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:45: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:45: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:46: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:46: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:46: Found Adware: icannnews 20:46: Detected running threat: C:\WINDOWS\system32\i4060edseh060.dll (ID = 83) 20:46: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:46: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:46: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:46: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:46: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:46: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:46: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:46: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:46: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:46: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:46: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:46: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:46: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:46: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:46: Detected running threat: C:\WINDOWS\system32\jzcript.dll (ID = 83) 20:47: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:47: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:47: Memory Sweep Complete, Elapsed Time: 00:02:39 20:47: Starting Registry Sweep 20:47: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:47: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:47: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:47: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:47: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:47: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:48: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:48: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:48: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:48: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:48: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:48: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:48: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:48: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:48: Found Adware: look2me 20:48: HKLM\software\microsoft\windows nt\currentversion\winlogon\notify\policies\ || dllname (ID = 911234) 20:48: Registry Sweep Complete, Elapsed Time:00:00:25 20:48: Starting Cookie Sweep 20:48: Found Spy Cookie: hbmediapro cookie 20:48: [email protected][2].txt (ID = 2768) 20:48: Found Spy Cookie: bluestreak cookie 20:48: salmon@bluestreak[1].txt (ID = 2314) 20:48: Found Spy Cookie: trafficmp cookie 20:48: salmon@trafficmp[2].txt (ID = 3581) 20:48: Cookie Sweep Complete, Elapsed Time: 00:00:02 20:48: Starting File Sweep 20:48: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:48: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:49: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:49: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:49: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:49: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:49: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:49: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:49: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:49: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:49: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:49: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:49: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:49: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:49: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:49: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:49: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:49: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:49: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:49: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:49: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:49: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:50: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:50: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:50: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:50: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:50: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:50: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:50: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:50: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:50: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:50: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:50: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:50: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:50: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:50: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:51: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:51: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:51: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:51: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:51: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:51: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:51: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:51: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:51: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:51: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:52: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:52: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:52: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:52: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:52: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:52: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:52: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:52: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:52: Found Adware: effective-i toolbar 20:52: 664edb3c-2731-4c28-a182-7b1f23 (ID = 106574) 20:52: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:52: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:52: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:52: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:52: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:52: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:52: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:52: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:52: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:52: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:52: Found Adware: apropos 20:52: wingenerics.dll (ID = 50187) 20:52: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:52: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:52: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:52: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:53: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:53: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:53: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:53: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:53: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:53: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:53: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:53: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:53: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:53: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:53: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:53: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:53: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:53: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:54: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:54: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:54: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:54: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:54: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:54: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:54: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:54: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:54: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:54: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:54: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:54: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:54: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:54: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:54: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:54: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:55: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:55: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:55: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:55: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:55: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:55: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:55: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:55: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:55: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:55: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:55: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:55: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:55: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:55: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:55: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:55: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:56: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:56: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:56: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:56: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:56: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:56: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:56: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:56: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:56: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:56: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:56: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:56: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:57: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:57: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:57: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:57: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:57: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:57: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:57: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:57: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:57: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:57: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:57: atmtd.dll._ (ID = 166754) 20:58: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:58: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:58: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:58: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:58: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:58: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:58: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:58: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:58: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:58: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:58: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:58: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:58: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:58: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:58: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:58: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:59: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:59: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:59: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:59: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:59: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:59: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:59: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:59: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 20:59: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 20:59: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:00: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:00: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:00: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:00: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:00: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:00: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:00: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:00: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:00: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:00: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:00: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:00: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:00: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:00: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:00: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:00: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:01: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:01: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:01: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:01: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:01: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:01: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:01: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:01: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:01: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:01: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:01: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:01: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:02: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:02: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:02: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:02: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:03: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:03: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:03: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:03: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:03: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:03: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:03: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:03: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:04: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:04: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:04: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:04: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:04: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:04: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:04: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:04: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:04: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:04: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:04: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:04: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:04: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:04: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:04: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:04: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:04: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:04: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:04: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:04: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:04: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:04: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:05: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:05: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:05: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:05: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:05: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:05: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:05: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:05: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:05: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:05: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:05: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:05: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:05: atmtd.dll (ID = 166754) 21:06: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:06: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:06: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:06: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:06: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:06: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:06: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:06: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:06: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:06: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:06: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:06: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:06: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:06: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:07: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:07: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:07: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:07: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:07: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:07: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:07: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:07: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:07: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:07: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:07: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:07: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:07: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:07: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:07: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:07: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:08: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:08: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:08: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:08: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:08: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:08: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:08: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:08: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:08: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:08: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:08: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:08: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:08: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:08: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:09: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:09: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:09: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:09: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:09: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:09: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:09: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:09: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:09: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:09: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:09: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:09: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:10: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:10: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:10: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:10: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:10: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:10: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:10: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:10: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:11: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:11: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:11: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:11: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:11: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:11: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:11: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:11: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:11: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:11: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:11: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:11: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:11: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:11: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:11: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:11: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:11: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:11: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:11: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:11: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:12: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:12: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:12: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:12: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:12: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:12: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:12: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:12: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:12: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:12: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:12: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:12: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:12: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:12: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:13: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:13: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:13: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:13: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:13: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:13: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:13: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:13: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:13: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:13: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:14: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:14: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:14: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:14: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:14: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:14: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:14: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:14: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:14: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:14: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:14: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:14: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:14: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:14: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:15: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:15: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:15: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:15: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:15: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:15: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:15: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:15: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:15: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:15: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:15: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:15: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:15: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:15: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:16: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:16: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:16: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:16: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:16: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:16: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:16: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:16: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:16: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:16: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:16: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:16: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:16: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:16: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:16: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:16: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:17: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:17: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:17: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:17: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:17: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:17: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:17: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:17: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:17: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:17: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:17: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:17: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:17: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:17: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:17: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:17: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:17: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:17: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:18: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:18: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:18: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:18: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:18: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:18: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:18: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:18: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:19: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:19: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:19: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:19: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:19: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:19: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:19: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:19: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 21:19: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:19: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:20: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:20: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 21:20: The Spy Communication shield has blocked access to:

Ok charle je fais ça pour demain car la le labo ou je travail ferme! Merci les amis

spy sweeper m'a trouver des truc et ca à l'air de marcher mais vérifie quand même Voilà!! Logfile of HijackThis v1.99.1 Scan saved at 23:41:09, on 03/11/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\S24EvMon.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Network Associates\Common Framework\FrameworkService.exe C:\Program Files\Network Associates\VirusScan\Mcshield.exe C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe C:\WINDOWS\system32\RegSrvc.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\rundll32.exe C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe C:\Program Files\Microsoft AntiSpyware\gcasServ.exe C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe C:\Program Files\Nokia\PC Suite for Nokia 3650\connmngmntbox.exe C:\Program Files\Nokia\PC Suite for Nokia 3650\ectaskscheduler.exe C:\PROGRA~1\Nokia\PCSUIT~1\Elogerr.exe C:\Program Files\Intuwave\Shared\mRouterRunTime\mRouterRuntime.exe C:\PROGRA~1\Nokia\PCSUIT~1\BROADC~1.EXE C:\PROGRA~1\Nokia\PCSUIT~1\SCRFS.exe C:\WINDOWS\system32\taskmgr.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Documents and Settings\salmon\Bureau\Spyware Doctor\Nouveau dossier\hijackthis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.yahoo.com/ R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.yahoo.com/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O4 - HKLM\..\Run: [bluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM\..\Run: [shStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe" O4 - HKLM\..\Run: [PRONoMgr.exe] c:\Program Files\Intel\PROSetWireless\NCS\PROSet\PRONoMgr.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe" O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [spySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray O4 - HKCU\..\Run: [WINSOS VERIFY] "C:\Program Files\WINSOS\WINSOS.EXE" MINI O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - Global Startup: PCSuiteForNokia3650 Detect.lnk = ? O4 - Global Startup: PCSuiteForNokia3650 TS.lnk = ? O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\WINDOWS\system32\shdocvw.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com/download/cult.cab O16 - DPF: {D1B09964-F8F7-4FAB-8F2D-B8B2AC3D3BD3} (INIwallet_Eng Control) - http://plugin.inicis.com/INIwallet_Eng.cab O20 - Winlogon Notify: Unimodem - C:\WINDOWS\system32\jzcript.dll O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe O23 - Service: RegSrvc - Intel Corporation - C:\WINDOWS\system32\RegSrvc.exe O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\WINDOWS\system32\S24EvMon.exe O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe

merci à toi! juste 2 questions: -mon log précédent ne donne pas assez d'info? -dois je démarrer en mode sans echec pour le nouveau log ? francehement merci pour votre service!!

Salut me voilà de retour Charly! J'ai suivi à la lettre la recette et voilà mon log: Logfile of HijackThis v1.99.1 Scan saved at 19:30:05, on 03/11/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\Explorer.EXE C:\Documents and Settings\salmon\Bureau\Spyware Doctor\Nouveau dossier\hijackthis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.yahoo.com/ R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.yahoo.com/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O4 - HKLM\..\Run: [bluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM\..\Run: [shStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe" O4 - HKLM\..\Run: [PRONoMgr.exe] c:\Program Files\Intel\PROSetWireless\NCS\PROSet\PRONoMgr.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe" O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKCU\..\Run: [WINSOS VERIFY] "C:\Program Files\WINSOS\WINSOS.EXE" MINI O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - Global Startup: PCSuiteForNokia3650 Detect.lnk = ? O4 - Global Startup: PCSuiteForNokia3650 TS.lnk = ? O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\WINDOWS\system32\shdocvw.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com/download/cult.cab O16 - DPF: {D1B09964-F8F7-4FAB-8F2D-B8B2AC3D3BD3} (INIwallet_Eng Control) - http://plugin.inicis.com/INIwallet_Eng.cab O20 - Winlogon Notify: RunOnceEx - C:\WINDOWS\system32\g440lehm1h4a.dll O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe O23 - Service: RegSrvc - Intel Corporation - C:\WINDOWS\system32\RegSrvc.exe O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\WINDOWS\system32\S24EvMon.exe Que dois je fixer maintenant?

j'ai une urgence là (je doit emener q à la gare je te poste tous ça pour demain) merci (vous êtes trop rapide!) Bonne soirée