Analyse requise SVP

ClaudeR · le 22 décembre 2007

Logfile of HijackThis v1.99.1

Scan saved at 16:38:08, on 2007-12-22

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe

C:\WINDOWS\system32\Ati2evxx.exe

N:\AntiVir PersonalEdition Classic\sched.exe

N:\AntiVir PersonalEdition Classic\avguard.exe

C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe

C:\WINDOWS\system32\FreezeScreenSaver.exe

C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE

C:\Program Files\TRENDnet\TEW-424UB\SiSWLSvc.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\fxssvc.exe

C:\Program Files\MSN Messenger\usnsvc.exe

N:\iPod\bin\iPodService.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\Explorer.EXE

N:\AntiVir PersonalEdition Classic\avgnt.exe

C:\WINDOWS\system32\ElkCtrl.exe

C:\Program Files\ATI Technologies\ATI.ACE\cli.exe

L:\QUICKENW2002\QAGENT.EXE

C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe

C:\WINDOWS\system32\ctfmon.exe

C:\WINDOWS\system32\lvcomsx.exe

C:\WINDOWS\system32\mrtMngr.EXE

c:\windows\system32\rlvknlg.exe

C:\Program Files\TRENDnet\TEW-424UB\TRENDnet.exe

C:\Program Files\ATI Technologies\ATI.ACE\cli.exe

N:\DeepBurner\DeepBurner.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Documents and Settings\Compaq_Propriétaire\Bureau\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: dcads - {6FC3C36D-7635-4D43-BA62-0D9D2F2CD06E} - C:\WINDOWS\system32\nsp8.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll

O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll

O4 - HKLM\..\Run: [avgnt] "N:\AntiVir PersonalEdition Classic\avgnt.exe" /min

O4 - HKLM\..\Run: [LogitechCameraService(E)] C:\WINDOWS\system32\ElkCtrl.exe /automation

O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay

O4 - HKLM\..\Run: [QAGENT] L:\QUICKENW2002\QAGENT.EXE

O4 - HKLM\..\Run: [MotiveReportAgent] "C:\Program Files\Fichiers communs\Motive\McciBootStrapper.exe" /url="-url=file://C:\Program Files\Fichiers communs\Motive\ReportAgent.html" /browsertype=CustomMSIE /browserpath="C:\Program Files\Common Files\Motive\motivebrowser.exe" /hidden

O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe

O4 - Global Startup: Wireless Configuration Utility HW.32.lnk = ?

O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll

O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL

O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL

O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm

O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE

O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm (HKCU)

O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm (HKCU)

O10 - Unknown file in Winsock LSP: c:\windows\system32\rlls.dll

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1174783407203

O18 - Protocol: bwz0 - {DE93EC42-9FB4-4A30-A41A-D510199B8C56} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwz0s - {DE93EC42-9FB4-4A30-A41A-D510199B8C56} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSN Messenger\msgrapp.8.1.0178.00.dll

O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSN Messenger\msgrapp.8.1.0178.00.dll

O18 - Protocol: offline-8876480 - {DE93EC42-9FB4-4A30-A41A-D510199B8C56} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\

O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll

O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - N:\AntiVir PersonalEdition Classic\sched.exe

O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - N:\AntiVir PersonalEdition Classic\avguard.exe

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe

O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe

O23 - Service: FreezeScreenSaver - Unknown owner - C:\WINDOWS\system32\FreezeScreenSaver.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe

O23 - Service: iPodService - Apple Computer, Inc. - N:\iPod\bin\iPodService.exe

O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe

O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

O23 - Service: SiS WirelessLan Service (SiSWLSvc) - Unknown owner - C:\Program Files\TRENDnet\TEW-424UB\SiSWLSvc.exe

Thanos · le 22 décembre 2007

salut

Il ne faut pas hésiter à dire bonsoir et à mettre un petit mot d'explication!

1) Télécharge LSPFix de Cexx.org sur ton bureau: ne l'utilise pas maintenant.

2) Passe par le Panneau de Confguration > Ajouter Supprimer des Programmes et désinstalle les programmes suivants si tu trouves >

Relevantknowledge

Browser Optimizer Dcads

Browser Optimizer Superiorads

3) Si après ca, tu as perdu ton accès à internet, fais ceci >

Lance LSPfix et agrandis la fenêtre qui, par défaut, est trop petite et fait apparaître les ascenseurs horizontaux et verticaux, masquant un bouton.

Coche la case "I know what I'm doing" ("Je sais ce que je fais").

Sélectionne toutes les instances de la dll suivante > rlls.dll et fais les glisser du panneau de gauche, appelé "keep" au panneau de droite, appelé "Remove".

Clique sur le bouton "Finish".

4) Désactive temporairement ton antivirus pour qu'il n'interfère pas avec la procédure > Fais un clic droit sur l'icône d'Antivir dans la barre des tâches et décoche Antivir Guard enable> réactive le en fin de scan.

Télécharge combofix.exe de sUBs

Assure toi que tous les programmes sont fermés avant de lancer le fix!
Fait un double clique sur combofix.exe.
Note: Ne ferme pas la fenêtre qui vient de s'ouvrir , tu te retrouverais avec un bureau vide !
Tape sur la touche 1 pour démarrer le scan.
Lorsque le scan est terminé, un rapport sera généré : poste en le contenu dans ton prochain message.
Si le rapport est trop long, poste le en deux fois.

Modifié le 23 décembre 2007 par charles ingals

ClaudeR · le 30 décembre 2007

Allo.

Désolé...Bon bonsoir et merci beaucoup de votre aide..mon PC est plutôt lent j'ai des fenetres à l'occasion qui s'ouvre et internet est lent.

J'ai enlever les deux premiers PGM et j'ai fait le combox.exe ca été très très long...

voilà le résultat..

ComboFix 07-12-21.4 - Compaq_Propriétaire 2007-12-29 21:02:57.2 - NTFSx86

Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.49 [GMT -4:00]

Running from: N:\Download\ComboFix.exe

.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))

.

C:\Program Files\MyWebSearch

C:\Program Files\MyWebSearch\bar\1.bin\F3BKGERR.JPG

C:\Program Files\MyWebSearch\bar\1.bin\F3BROVLY.DLL

C:\Program Files\MyWebSearch\bar\1.bin\F3CJPEG.DLL

C:\Program Files\MyWebSearch\bar\1.bin\F3DTACTL.DLL

C:\Program Files\MyWebSearch\bar\1.bin\F3HISTSW.DLL

C:\Program Files\MyWebSearch\bar\1.bin\F3HTMLMU.DLL

C:\Program Files\MyWebSearch\bar\1.bin\F3HTTPCT.DLL

C:\Program Files\newdotnet

C:\Program Files\newdotnet\nncore.dll

C:\Program Files\newdotnet\nnrun.exe

C:\Program Files\newdotnet\readme.html

C:\Program Files\newdotnet\uninstall.exe

C:\WINDOWS\NDNuninstall6_38.exe

C:\WINDOWS\NDNuninstall7_48.exe

C:\WINDOWS\pack.epk

C:\WINDOWS\system32\bljnktcd_navtmp.dat

C:\WINDOWS\system32\f3PSSavr.scr

C:\WINDOWS\system32\model.dat

C:\WINDOWS\system32\nvs2.inf

C:\WINDOWS\system32\pmluds_navtmp.dat

C:\WINDOWS\system32\qvlpjnlfp.dat

C:\WINDOWS\system32\qvlpjnlfp.exe

C:\WINDOWS\system32\qvlpjnlfp_nav.dat

C:\WINDOWS\system32\qvlpjnlfp_navps.dat

C:\WINDOWS\system32\rlls.dll

C:\WINDOWS\system32\rlvknlg.exe

C:\WINDOWS\system32\rlxf.dll

C:\WINDOWS\system32\silc_dll.dll

C:\WINDOWS\system32\sykbwdvumv.dat

C:\WINDOWS\system32\sykbwdvumv_nav.dat

C:\WINDOWS\system32\sykbwdvumv_navps.dat

C:\WINDOWS\system32\winsub.xml

D:\Autorun.inf

.

((((((((((((((((((((((((((((( Fichiers cr‚‚s 2007-11-28 to 2007-12-30 ))))))))))))))))))))))))))))))))))))

.

2007-12-19 20:34 . 2007-12-19 20:34 <REP> d-------- C:\Program Files\Dcads Games Collection

2007-12-19 20:34 . 2007-12-19 20:34 77,360 --a------ C:\WINDOWS\system32\dcads_sidebar_uninstall.exe

2007-12-19 20:34 . 2007-12-19 20:34 40,731 --a------ C:\WINDOWS\system32\superiorads-uninst.exe

2007-12-18 10:54 . 2007-12-18 10:54 319,488 --a------ C:\WINDOWS\system32\dcads_sidebar.dll

2007-12-14 09:25 . 2007-12-14 09:25 <REP> d-------- C:\Program Files\themexp

2007-12-14 09:20 . 2007-12-14 08:46 29,952 --a------ C:\WINDOWS\system32\uxtuneup.dll

2007-12-14 09:15 . 2007-12-14 09:15 <REP> d-------- C:\Program Files\freewareboard

2007-12-14 09:15 . 2007-12-14 09:15 <REP> d-------- C:\Program Files\Fichiers communs\Wise Installation Wizard

2007-12-14 08:37 . 2007-12-14 08:37 <REP> d-------- C:\Program Files\uTorrent

2007-12-07 15:52 . 2007-12-07 15:52 <REP> d-------- C:\Documents and Settings\Adina\Contacts

2007-11-23 14:38 . 2007-11-26 19:48 <REP> d-------- C:\Program Files\Orbitdownloader

2007-11-23 14:38 . 2007-11-26 19:52 <REP> d-------- C:\Downloads

2007-11-20 18:50 . 2007-11-20 18:50 155,648 --a------ C:\WINDOWS\system32\mathlib.dll

2007-11-18 17:46 . 2007-11-22 19:49 <REP> d-------- C:\Photos filles

2007-11-18 12:00 . 2007-11-18 12:00 <REP> d---s---- C:\Documents and Settings\Gabriel\UserData

2007-11-17 22:57 . 2007-12-11 16:54 1,393 --a------ C:\WINDOWS\imsins.BAK

2007-11-17 11:22 . 2007-10-25 12:56 8,510,976 --------- C:\WINDOWS\system32\dllcache\shell32.dll

2007-11-14 03:28 . 2007-11-14 03:28 450,560 --------- C:\WINDOWS\system32\dllcache\jscript.dll

2007-11-08 17:40 . 2007-11-08 17:40 268 --ah----- C:\sqmdata05.sqm

2007-11-08 17:40 . 2007-11-08 17:40 244 --ah----- C:\sqmnoopt05.sqm

2007-11-07 19:49 . 2007-11-07 19:49 <REP> d-------- C:\WINDOWS\system32\usbdevice

2007-11-07 19:49 . 2007-11-07 19:49 <REP> d-------- C:\Program Files\TRENDnet

.

(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))

.

2007-11-13 10:25 20,480 ----a-w C:\WINDOWS\system32\drivers\secdrv.sys

2007-11-07 23:49 --------- d--h--w C:\Program Files\InstallShield Installation Information

2007-11-07 23:44 314 ----a-w C:\Program Files\INSTALL.LOG

.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))

.

REGEDIT4

*Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"LDM"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe" [2007-02-25 15:53]

"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 14:00]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"avgnt"="N:\AntiVir PersonalEdition Classic\avgnt.exe" [2007-10-15 14:54]

"LogitechCameraService(E)"="C:\WINDOWS\system32\ElkCtrl.exe" [2004-11-01 17:22]

"ATICCC"="C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" [2006-01-02 15:41]

"QAGENT"="L:\QUICKENW2002\QAGENT.EXE" [2001-11-13 20:36]

"MotiveReportAgent"="C:\Program Files\Fichiers communs\Motive\McciBootStrapper.exe" []

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]

"NoResolveTrack"= 1 (0x1)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]

"NoSimpleStartMenu"= 0 (0x0)

"NoTrayItemsDisplay"= 0 (0x0)

"NoRecentDocsHistory"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^HP Digital Imaging Monitor.lnk]

backup=C:\WINDOWS\pss\HP Digital Imaging Monitor.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Lancement rapide d'Adobe Reader.lnk]

backup=C:\WINDOWS\pss\Lancement rapide d'Adobe Reader.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Logitech Desktop Messenger.lnk]

backup=C:\WINDOWS\pss\Logitech Desktop Messenger.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Microsoft Office.lnk]

backup=C:\WINDOWS\pss\Microsoft Office.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATICCC]

C:\Program Files\ATI Technologies\ATI.ACE\cli.exe runtime -Delay

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]

2004-08-05 14:00 15360 --a------ C:\WINDOWS\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]

2005-05-11 23:12 49152 --a------ N:\HP\HP Software Update\HPWuSchd2.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPBootOp]

C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe /run

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]

2005-10-18 12:58 278528 --a--c--- C:\Program Files\iTunes\iTunesHelper.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KernelFaultCheck]

C:\WINDOWS\system32\dumprep 0 -k

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechCameraAssistant]

2005-12-07 10:26 489472 --a--c--- C:\Program Files\Logitech\Video\CameraAssistant.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechVideo[inspector]]

C:\Program Files\Logitech\Video\InstallHelper.exe /inspect

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LVCOMSX]

2005-12-09 15:32 225280 --a------ C:\WINDOWS\system32\LVCOMSX.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QAGENT]

2001-11-13 20:36 94208 --a--c--- L:\QUICKENW2002\QAGENT.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]

C:\Program Files\QuickTime\qttask.exe -atboottime

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SMSERIAL]

sm56hlpr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]

L:\Steam\Steam.exe -silent

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]

2006-11-09 15:07 49263 --a--c--- C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe

R2 FreezeScreenSaver;FreezeScreenSaver;C:\WINDOWS\system32\FreezeScreenSaver.exe [2005-09-29 14:55]

R2 mrtRate;mrtRate;C:\WINDOWS\system32\drivers\mrtRate.sys [2001-02-28 11:42]

R3 LVPrcMon;Logitech LVPrcMon Driver;C:\WINDOWS\system32\drivers\LVPrcMon.sys [2005-12-09 15:37]

R3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-04 06:08]

S2 UxTuneUp;TuneUp Extension de thème (Beta);C:\WINDOWS\System32\svchost.exe -k netsvcs []

S3 dump_wmimmc;dump_wmimmc;L:\Nexon\MapleStory\GameGuard\dump_wmimmc.sys []

S3 nenum13E;nenum13E;C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\nenum13E.sys []

S3 SIS163u;SiS163 USB Wireless LAN Adapter Driver;C:\WINDOWS\system32\DRIVERS\sis163u.sys [2006-02-15 18:25]

S3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 18:58]

S3 XDva010;XDva010;C:\WINDOWS\system32\XDva010.sys []

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs

UxTuneUp

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\D]

\Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Info.exe protect.ed 480 480

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{7987110a-c9c1-11d9-b148-806d6172696f}]

\Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Info.exe protect.ed 480 480

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e010179b-5558-11dc-835a-0013d40243db}]

\Shell\AutoRun\command - M:\LaunchU3.exe -a

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e010179d-5558-11dc-835a-0013d40243db}]

\Shell\AutoRun\command - M:\LaunchU3.exe -a

.

Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es'

"2007-02-23 21:56:33 C:\WINDOWS\Tasks\Symantec NetDetect.job"

- C:\Program Files\Symantec\LiveUpdate\NDetect.exe

.

**************************************************************************

catchme 0.3.1333 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2007-12-30 15:14:25

Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully

hidden files: 0

**************************************************************************

.

Completion time: 2007-12-30 15:17:00 - machine was rebooted [Compaq_Propri‚taire]

.

2007-12-26 15:57:38 --- E O F ---

Thanos · le 31 décembre 2007

salut

1) Rend toi sur cette page afin de télécharger le fichier CFScript > http://www.sendspace.com/file/9agqci

pour cela, clique sur le lien en bas de page > Download Link: CFScript

Fait un glisser/déposer de ce fichier CFScript sur le fichier ComboFix.exe comme sur la capture
Une fenêtre bleue va apparaitre: au message qui apparait ( Type 1 to continue, or 2 to abort) , tape 1 puis valide.
Patiente le temps du scan.Le bureau va disparaitre à plusieurs reprises: c'est normal!
Ne touche à rien tant que le scan n'est pas terminé.
Une fois le scan achevé, un rapport va s'afficher: poste son contenu.
Si le fichier n'apparait pas, il se trouve ici > C:\ComboFix.txt

2) Fais un scan en ligne avec Panda > http://www.nanoscan.com/as/v1/principal.aspx?Lang=en

En images ici > http://www.malekal.com/scan_Av_en_ligne.php#mozTocId131054

Il faut choisir Full Scan (et pas QuickScan): Poste le rapport qu'il t'affichera à la fin.
Note 1: Attention!! Panda et Antivir entrent en conflit, pour pouvoir télécharger le contrôle active x de Panda, il faut que tu désactives le bouclier d'Antivir le temps du scan. (Fais un clic droit sur l'icône d'Antivir dans la barre des tâches et décoche Antivir Guard enable> réactive le en fin de scan après avoir sauvegardé le rapport)
Note 2: Tu n'es pas obligé de donner ton email, tu peux utiliser une adresse jetable si tu le souhaites : http://www.jetable.org/fr/index
Si ca ne fonctionne pas,assure toi que Internet Explorer est correctement configuré pour le scan en ligne comme indiqué ici : http://www.malekal.com/scan_Av_en_ligne.html#mozTocId898809
Plus d'infos ici > http://www.malekal.com/scan_Av_en_ligne.php#mozTocId131054

@+

Modifié le 31 décembre 2007 par charles ingals

ClaudeR · le 31 décembre 2007

Voila le rapport

;***********************************************************************************************************************************************************************************

ANALYSIS: 2007-12-31 09:55:42

PROTECTIONS: 1

MALWARE: 105

SUSPECTS: 0

;***********************************************************************************************************************************************************************************

PROTECTIONS

Description Version Active Updated

;===================================================================================================================================================================================

Avira AntiVir PersonalEdition 7.0.1.118

No Yes

;===================================================================================================================================================================================

MALWARE

Id Description Type Active Severity Disinfectable Disinfected Location

;===================================================================================================================================================================================

00000431 adware/ist.istbar Adware No 1 Yes No hkey_current_user\software\microsoft\errlook

00117819 Spyware/New.net Spyware No 1 Yes No C:\qoobox\Quarantine\C\WINDOWS\NDNuninstall6_38.exe.vir

00139059 Cookie/Traffic Marketplace TrackingCookie No 0 Yes No C:\Documents and Settings\Gabriel\Cookies\gabriel@trafficmp[1].txt

00139060 Cookie/Casalemedia TrackingCookie No 0 Yes No C:\Documents and Settings\Gabriel\Cookies\gabriel@casalemedia[1].txt

00139060 Cookie/Casalemedia TrackingCookie No 0 Yes No C:\Documents and Settings\Gabriel\Application Data\Mozilla\Firefox\Profiles\dmgug30x.default\cookies.txt[.casalemedia.com/]

00139060 Cookie/Casalemedia TrackingCookie No 0 Yes No C:\Documents and Settings\Adina\Application Data\Mozilla\Firefox\Profiles\8vdo5lsg.default\cookies.txt[.casalemedia.com/]

00139060 Cookie/Casalemedia TrackingCookie No 0 Yes No C:\Documents and Settings\Pascal\Application Data\Mozilla\Firefox\Profiles\97awli6w.default\cookies.txt[.casalemedia.com/]

00139060 Cookie/Casalemedia TrackingCookie No 0 Yes No C:\Documents and Settings\Jenni.NOM-0C9D00AA293\Application Data\Mozilla\Firefox\Profiles\sulhm4kg.default\cookies.txt[.casalemedia.com/]

00139060 Cookie/Casalemedia TrackingCookie No 0 Yes No C:\Documents and Settings\Pascal\Application Data\Mozilla\Firefox\Profiles\97awli6w.default\cookies.txt[.casalemedia.com/]

00139060 Cookie/Casalemedia TrackingCookie No 0 Yes No C:\Documents and Settings\Compaq_PropriÃ©taire\Application Data\Mozilla\Firefox\Profiles\ro9r7hx0.default\cookies.txt[.casalemedia.com/]

00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Documents and Settings\Gabriel\Cookies\gabriel@doubleclick[1].txt

00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Documents and Settings\Adina\Application Data\Mozilla\Firefox\Profiles\8vdo5lsg.default\cookies.txt[.doubleclick.net/]

00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Documents and Settings\Pascal\Application Data\Mozilla\Firefox\Profiles\97awli6w.default\cookies.txt[.doubleclick.net/]

00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Documents and Settings\Gabriel\Application Data\Mozilla\Firefox\Profiles\dmgug30x.default\cookies.txt[.doubleclick.net/]

00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Documents and Settings\Jenni.NOM-0C9D00AA293\Application Data\Mozilla\Firefox\Profiles\sulhm4kg.default\cookies.txt[.doubleclick.net/]

00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Documents and Settings\Adina\Cookies\adina@doubleclick[1].txt

00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Documents and Settings\Compaq_PropriÃ©taire\Application Data\Mozilla\Firefox\Profiles\ro9r7hx0.default\cookies.txt[.doubleclick.net/]

00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Documents and Settings\Jenni.NOM-0C9D00AA293\Cookies\jenni@doubleclick[1].txt

00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Documents and Settings\Adina\Cookies\adina@atdmt[2].txt

00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Documents and Settings\Gabriel\Cookies\gabriel@atdmt[2].txt

00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Documents and Settings\Gabriel\Application Data\Mozilla\Firefox\Profiles\dmgug30x.default\cookies.txt[.atdmt.com/]

00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Documents and Settings\Jenni.NOM-0C9D00AA293\Application Data\Mozilla\Firefox\Profiles\sulhm4kg.default\cookies.txt[.atdmt.com/]

00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Documents and Settings\Pascal\Cookies\pascal@atdmt[2].txt

00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Documents and Settings\Jenni.NOM-0C9D00AA293\Cookies\jenni@atdmt[2].txt

00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Documents and Settings\Adina\Application Data\Mozilla\Firefox\Profiles\8vdo5lsg.default\cookies.txt[.atdmt.com/]

00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Documents and Settings\Pascal\Application Data\Mozilla\Firefox\Profiles\97awli6w.default\cookies.txt[.atdmt.com/]

00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Documents and Settings\Compaq_PropriÃ©taire\Application Data\Mozilla\Firefox\Profiles\ro9r7hx0.default\cookies.txt[.atdmt.com/]

00139535 Application/Processor HackTools No 0 Yes No C:\WINDOWS\system32\Process.exe

00145393 Cookie/Tradedoubler TrackingCookie No 0 Yes No C:\Documents and Settings\Pascal\Application Data\Mozilla\Firefox\Profiles\97awli6w.default\cookies.txt[.tradedoubler.com/]

00145393 Cookie/Tradedoubler TrackingCookie No 0 Yes No C:\Documents and Settings\Compaq_PropriÃ©taire\Application Data\Mozilla\Firefox\Profiles\ro9r7hx0.default\cookies.txt[.tradedoubler.com/]

00145393 Cookie/Tradedoubler TrackingCookie No 0 Yes No C:\Documents and Settings\Pascal\Application Data\Mozilla\Firefox\Profiles\97awli6w.default\cookies.txt[.tradedoubler.com/]

00145393 Cookie/Tradedoubler TrackingCookie No 0 Yes No C:\Documents and Settings\Adina\Application Data\Mozilla\Firefox\Profiles\8vdo5lsg.default\cookies.txt[.tradedoubler.com/]

00145393 Cookie/Tradedoubler TrackingCookie No 0 Yes No C:\Documents and Settings\Gabriel\Application Data\Mozilla\Firefox\Profiles\dmgug30x.default\cookies.txt[.tradedoubler.com/]

00145393 Cookie/Tradedoubler TrackingCookie No 0 Yes No C:\Documents and Settings\Jenni.NOM-0C9D00AA293\Application Data\Mozilla\Firefox\Profiles\sulhm4kg.default\cookies.txt[.tradedoubler.com/]

00145393 Cookie/Tradedoubler TrackingCookie No 0 Yes No C:\Documents and Settings\Gabriel\Cookies\gabriel@tradedoubler[1].txt

00145393 Cookie/Tradedoubler TrackingCookie No 0 Yes No C:\Documents and Settings\Gabriel\Application Data\Mozilla\Firefox\Profiles\dmgug30x.default\cookies.txt[.tradedoubler.com/]

00145405 Cookie/RealMedia TrackingCookie No 0 Yes No C:\Documents and Settings\Adina\Application Data\Mozilla\Firefox\Profiles\8vdo5lsg.default\cookies.txt[.247realmedia.com/]

00145405 Cookie/RealMedia TrackingCookie No 0 Yes No C:\Documents and Settings\Jenni.NOM-0C9D00AA293\Application Data\Mozilla\Firefox\Profiles\sulhm4kg.default\cookies.txt[.247realmedia.com/]

00145405 Cookie/RealMedia TrackingCookie No 0 Yes No C:\Documents and Settings\Pascal\Application Data\Mozilla\Firefox\Profiles\97awli6w.default\cookies.txt[.247realmedia.com/]

00145405 Cookie/RealMedia TrackingCookie No 0 Yes No C:\Documents and Settings\Compaq_PropriÃ©taire\Application Data\Mozilla\Firefox\Profiles\ro9r7hx0.default\cookies.txt[.247realmedia.com/]

00145405 Cookie/RealMedia TrackingCookie No 0 Yes No C:\Documents and Settings\Gabriel\Application Data\Mozilla\Firefox\Profiles\dmgug30x.default\cookies.txt[.247realmedia.com/]

00145405 Cookie/RealMedia TrackingCookie No 0 Yes No C:\Documents and Settings\Gabriel\Cookies\gabriel@247realmedia[2].txt

00145405 Cookie/RealMedia TrackingCookie No 0 Yes No C:\Documents and Settings\Gabriel\Application Data\Mozilla\Firefox\Profiles\dmgug30x.default\cookies.txt[.247realmedia.com/]

00145405 Cookie/RealMedia TrackingCookie No 0 Yes No C:\Documents and Settings\Compaq_PropriÃ©taire\Application Data\Mozilla\Firefox\Profiles\ro9r7hx0.default\cookies.txt[.247realmedia.com/]

00145433 Cookie/Mammamediasolutions TrackingCookie No 0 Yes No C:\Documents and Settings\Pascal\Application Data\Mozilla\Firefox\Profiles\97awli6w.default\cookies.txt[.targetnet.com/]

00145453 Cookie/Bfast TrackingCookie No 0 Yes No C:\Documents and Settings\Pascal\Application Data\Mozilla\Firefox\Profiles\97awli6w.default\cookies.txt[.bfast.com/]

00145457 Cookie/FastClick TrackingCookie No 0 Yes No C:\Documents and Settings\Pascal\Application Data\Mozilla\Firefox\Profiles\97awli6w.default\cookies.txt[.fastclick.net/]

00145457 Cookie/FastClick TrackingCookie No 0 Yes No C:\Documents and Settings\Compaq_PropriÃ©taire\Application Data\Mozilla\Firefox\Profiles\ro9r7hx0.default\cookies.txt[.fastclick.net/]

00145457 Cookie/FastClick TrackingCookie No 0 Yes No C:\Documents and Settings\Gabriel\Application Data\Mozilla\Firefox\Profiles\dmgug30x.default\cookies.txt[.fastclick.net/]

00145457 Cookie/FastClick TrackingCookie No 0 Yes No C:\Documents and Settings\Adina\Application Data\Mozilla\Firefox\Profiles\8vdo5lsg.default\cookies.txt[.fastclick.net/]

00145457 Cookie/FastClick TrackingCookie No 0 Yes No C:\Documents and Settings\Gabriel\Application Data\Mozilla\Firefox\Profiles\dmgug30x.default\cookies.txt[.fastclick.net/]

00145457 Cookie/FastClick TrackingCookie No 0 Yes No C:\Documents and Settings\Adina\Application Data\Mozilla\Firefox\Profiles\8vdo5lsg.default\cookies.txt[.fastclick.net/]

00145457 Cookie/FastClick TrackingCookie No 0 Yes No C:\Documents and Settings\Jenni.NOM-0C9D00AA293\Application Data\Mozilla\Firefox\Profiles\sulhm4kg.default\cookies.txt[.fastclick.net/]

00145457 Cookie/FastClick TrackingCookie No 0 Yes No C:\Documents and Settings\Gabriel\Cookies\gabriel@fastclick[1].txt

00145457 Cookie/FastClick TrackingCookie No 0 Yes No C:\Documents and Settings\Jenni.NOM-0C9D00AA293\Cookies\jenni@fastclick[2].txt

00145457 Cookie/FastClick TrackingCookie No 0 Yes No C:\Documents and Settings\Pascal\Application Data\Mozilla\Firefox\Profiles\97awli6w.default\cookies.txt[.fastclick.net/]

00145457 Cookie/FastClick TrackingCookie No 0 Yes No C:\Documents and Settings\Gabriel\Application Data\Mozilla\Firefox\Profiles\dmgug30x.default\cookies.txt[.fastclick.net/]

00145457 Cookie/FastClick TrackingCookie No 0 Yes No C:\Documents and Settings\Pascal\Application Data\Mozilla\Firefox\Profiles\97awli6w.default\cookies.txt[.fastclick.net/]

00145457 Cookie/FastClick TrackingCookie No 0 Yes No C:\Documents and Settings\Gabriel\Application Data\Mozilla\Firefox\Profiles\dmgug30x.default\cookies.txt[.fastclick.net/]

00145457 Cookie/FastClick TrackingCookie No 0 Yes No C:\Documents and Settings\Pascal\Application Data\Mozilla\Firefox\Profiles\97awli6w.default\cookies.txt[.fastclick.net/]

00145731 Cookie/Tribalfusion TrackingCookie No 0 Yes No C:\Documents and Settings\Gabriel\Cookies\gabriel@tribalfusion[1].txt

00145731 Cookie/Tribalfusion TrackingCookie No 0 Yes No C:\Documents and Settings\Pascal\Application Data\Mozilla\Firefox\Profiles\97awli6w.default\cookies.txt[.tribalfusion.com/]

00145731 Cookie/Tribalfusion TrackingCookie No 0 Yes No C:\Documents and Settings\Gabriel\Application Data\Mozilla\Firefox\Profiles\dmgug30x.default\cookies.txt[.tribalfusion.com/]

00145731 Cookie/Tribalfusion TrackingCookie No 0 Yes No C:\Documents and Settings\Jenni.NOM-0C9D00AA293\Application Data\Mozilla\Firefox\Profiles\sulhm4kg.default\cookies.txt[.tribalfusion.com/]

00145731 Cookie/Tribalfusion TrackingCookie No 0 Yes No C:\Documents and Settings\Jenni.NOM-0C9D00AA293\Cookies\jenni@tribalfusion[1].txt

00145731 Cookie/Tribalfusion TrackingCookie No 0 Yes No C:\Documents and Settings\Compaq_PropriÃ©taire\Application Data\Mozilla\Firefox\Profiles\ro9r7hx0.default\cookies.txt[.tribalfusion.com/]

00145731 Cookie/Tribalfusion TrackingCookie No 0 Yes No C:\Documents and Settings\Adina\Application Data\Mozilla\Firefox\Profiles\8vdo5lsg.default\cookies.txt[.tribalfusion.com/]

00145732 Cookie/Falkag TrackingCookie No 0 Yes No C:\Documents and Settings\Adina\Application Data\Mozilla\Firefox\Profiles\8vdo5lsg.default\cookies.txt[.as-eu.falkag.net/]

00145732 Cookie/Falkag TrackingCookie No 0 Yes No C:\Documents and Settings\Adina\Cookies\adina@as-eu.falkag[2].txt

00145738 Cookie/Mediaplex TrackingCookie No 0 Yes No C:\Documents and Settings\Compaq_PropriÃ©taire\Application Data\Mozilla\Firefox\Profiles\ro9r7hx0.default\cookies.txt[.mediaplex.com/]

00145738 Cookie/Mediaplex TrackingCookie No 0 Yes No C:\Documents and Settings\Jenni.NOM-0C9D00AA293\Cookies\jenni@mediaplex[1].txt

00145738 Cookie/Mediaplex TrackingCookie No 0 Yes No C:\Documents and Settings\Gabriel\Cookies\gabriel@mediaplex[1].txt

00145738 Cookie/Mediaplex TrackingCookie No 0 Yes No C:\Documents and Settings\Pascal\Application Data\Mozilla\Firefox\Profiles\97awli6w.default\cookies.txt[.mediaplex.com/]

00145738 Cookie/Mediaplex TrackingCookie No 0 Yes No C:\Documents and Settings\Compaq_PropriÃ©taire\Application Data\Mozilla\Firefox\Profiles\ro9r7hx0.default\cookies.txt[.mediaplex.com/]

00145738 Cookie/Mediaplex TrackingCookie No 0 Yes No C:\Documents and Settings\Gabriel\Application Data\Mozilla\Firefox\Profiles\dmgug30x.default\cookies.txt[.mediaplex.com/]

00145738 Cookie/Mediaplex TrackingCookie No 0 Yes No C:\Documents and Settings\Adina\Cookies\adina@mediaplex[1].txt

00145738 Cookie/Mediaplex TrackingCookie No 0 Yes No C:\Documents and Settings\Gabriel\Application Data\Mozilla\Firefox\Profiles\dmgug30x.default\cookies.txt[.mediaplex.com/]

00145738 Cookie/Mediaplex TrackingCookie No 0 Yes No C:\Documents and Settings\Jenni.NOM-0C9D00AA293\Application Data\Mozilla\Firefox\Profiles\sulhm4kg.default\cookies.txt[.mediaplex.com/]

00145738 Cookie/Mediaplex TrackingCookie No 0 Yes No C:\Documents and Settings\Adina\Application Data\Mozilla\Firefox\Profiles\8vdo5lsg.default\cookies.txt[.mediaplex.com/]

00145792 Cookie/SexList TrackingCookie No 0 Yes No C:\Documents and Settings\Gabriel\Cookies\gabriel@sexlist[2].txt

00145792 Cookie/SexList TrackingCookie No 0 Yes No C:\Documents and Settings\Gabriel\Application Data\Mozilla\Firefox\Profiles\dmgug30x.default\cookies.txt[.sexlist.com/]

00145807 Cookie/Linksynergy TrackingCookie No 0 Yes No C:\Documents and Settings\Gabriel\Application Data\Mozilla\Firefox\Profiles\dmgug30x.default\cookies.txt[.linksynergy.com/]

00146967 Cookie/PayCounter TrackingCookie No 0 Yes No C:\Documents and Settings\Gabriel\Cookies\gabriel@paycounter[1].txt

00147036 Cookie/Adverserve TrackingCookie No 0 Yes No C:\Documents and Settings\Adina\Application Data\Mozilla\Firefox\Profiles\8vdo5lsg.default\cookies.txt[.adverserve.net/]

00147036 Cookie/Adverserve TrackingCookie No 0 Yes No C:\Documents and Settings\Adina\Cookies\adina@adverserve[1].txt

00147806 Cookie/7search TrackingCookie No 0 Yes No C:\Documents and Settings\Adina\Cookies\adina@7search[1].txt

00147824 Cookie/Clickbank TrackingCookie No 0 Yes No C:\Documents and Settings\Pascal\Application Data\Mozilla\Firefox\Profiles\97awli6w.default\cookies.txt[.clickbank.net/]

00159564 Cookie/WUpd TrackingCookie No 0 Yes No C:\Documents and Settings\Compaq_PropriÃ©taire\Application Data\Mozilla\Firefox\Profiles\ro9r7hx0.default\cookies.txt[.revenue.net/]

00159564 Cookie/WUpd TrackingCookie No 0 Yes No C:\Documents and Settings\Gabriel\Application Data\Mozilla\Firefox\Profiles\dmgug30x.default\cookies.txt[.revenue.net/]

00159564 Cookie/WUpd TrackingCookie No 0 Yes No C:\Documents and Settings\Compaq_PropriÃ©taire\Application Data\Mozilla\Firefox\Profiles\ro9r7hx0.default\cookies.txt[.revenue.net/]

00159564 Cookie/WUpd TrackingCookie No 0 Yes No C:\Documents and Settings\Jenni.NOM-0C9D00AA293\Application Data\Mozilla\Firefox\Profiles\sulhm4kg.default\cookies.txt[.revenue.net/]

00159564 Cookie/WUpd TrackingCookie No 0 Yes No C:\Documents and Settings\Pascal\Application Data\Mozilla\Firefox\Profiles\97awli6w.default\cookies.txt[.revenue.net/]

00159564 Cookie/WUpd TrackingCookie No 0 Yes No C:\Documents and Settings\Adina\Application Data\Mozilla\Firefox\Profiles\8vdo5lsg.default\cookies.txt[.revenue.net/]

00159564 Cookie/WUpd TrackingCookie No 0 Yes No C:\Documents and Settings\Pascal\Application Data\Mozilla\Firefox\Profiles\97awli6w.default\cookies.txt[.revenue.net/]

00160284 Cookie/Findwhat TrackingCookie No 0 Yes No C:\Documents and Settings\Gabriel\Cookies\gabriel@findwhat[1].txt

00160284 Cookie/Findwhat TrackingCookie No 0 Yes No C:\Documents and Settings\Gabriel\Application Data\Mozilla\Firefox\Profiles\dmgug30x.default\cookies.txt[.findwhat.com/]

00160284 Cookie/Findwhat TrackingCookie No 0 Yes No C:\Documents and Settings\Compaq_PropriÃ©taire\Application Data\Mozilla\Firefox\Profiles\ro9r7hx0.default\cookies.txt[.findwhat.com/]

00167642 Cookie/Com.com TrackingCookie No 0 Yes No C:\Documents and Settings\Gabriel\Application Data\Mozilla\Firefox\Profiles\dmgug30x.default\cookies.txt[.com.com/]

00167642 Cookie/Com.com TrackingCookie No 0 Yes No C:\Documents and Settings\Pascal\Application Data\Mozilla\Firefox\Profiles\97awli6w.default\cookies.txt[.com.com/]

00167642 Cookie/Com.com TrackingCookie No 0 Yes No C:\Documents and Settings\Compaq_PropriÃ©taire\Application Data\Mozilla\Firefox\Profiles\ro9r7hx0.default\cookies.txt[.com.com/]

00167642 Cookie/Com.com TrackingCookie No 0 Yes No C:\Documents and Settings\Adina\Application Data\Mozilla\Firefox\Profiles\8vdo5lsg.default\cookies.txt[.com.com/]

00167642 Cookie/Com.com TrackingCookie No 0 Yes No C:\Documents and Settings\Gabriel\Cookies\gabriel@com[1].txt

00167672 Cookie/DomainSponsor TrackingCookie No 0 Yes No C:\Documents and Settings\Pascal\Application Data\Mozilla\Firefox\Profiles\97awli6w.default\cookies.txt[landing.domainsponsor.com/]

00167677 Cookie/WebPower TrackingCookie No 0 Yes No C:\Documents and Settings\Gabriel\Application Data\Mozilla\Firefox\Profiles\dmgug30x.default\cookies.txt[.webpower.com/]

00167684 Cookie/Hitbox TrackingCookie No 0 Yes No C:\Documents and Settings\Pascal\Application Data\Mozilla\Firefox\Profiles\97awli6w.default\cookies.txt[.ehg-ati.hitbox.com/]

00167704 Cookie/Xiti TrackingCookie No 0 Yes No C:\Documents and Settings\Pascal\Application Data\Mozilla\Firefox\Profiles\97awli6w.default\cookies.txt[.xiti.com/]

00167704 Cookie/Xiti TrackingCookie No 0 Yes No C:\Documents and Settings\Jenni.NOM-0C9D00AA293\Application Data\Mozilla\Firefox\Profiles\sulhm4kg.default\cookies.txt[.xiti.com/]

00167704 Cookie/Xiti TrackingCookie No 0 Yes No C:\Documents and Settings\Jenni.NOM-0C9D00AA293\Cookies\jenni@xiti[1].txt

00167704 Cookie/Xiti TrackingCookie No 0 Yes No C:\Documents and Settings\Compaq_PropriÃ©taire\Application Data\Mozilla\Firefox\Profiles\ro9r7hx0.default\cookies.txt[.xiti.com/]

00167704 Cookie/Xiti TrackingCookie No 0 Yes No C:\Documents and Settings\Gabriel\Application Data\Mozilla\Firefox\Profiles\dmgug30x.default\cookies.txt[.xiti.com/]

00167704 Cookie/Xiti TrackingCookie No 0 Yes No C:\Documents and Settings\Adina\Application Data\Mozilla\Firefox\Profiles\8vdo5lsg.default\cookies.txt[.xiti.com/]

00167704 Cookie/Xiti TrackingCookie No 0 Yes No C:\Documents and Settings\Gabriel\Cookies\gabriel@xiti[1].txt

00167747 Cookie/Azjmp TrackingCookie No 0 Yes No C:\Documents and Settings\Gabriel\Cookies\gabriel@azjmp[1].txt

00167747 Cookie/Azjmp TrackingCookie No 0 Yes No C:\Documents and Settings\Gabriel\Application Data\Mozilla\Firefox\Profiles\dmgug30x.default\cookies.txt[.azjmp.com/]

00167749 Cookie/Toplist TrackingCookie No 0 Yes No C:\Documents and Settings\Gabriel\Cookies\gabriel@toplist[1].txt

00167753 Cookie/Statcounter TrackingCookie No 0 Yes No C:\Documents and Settings\Compaq_PropriÃ©taire\Application Data\Mozilla\Firefox\Profiles\ro9r7hx0.default\cookies.txt[.statcounter.com/]

00167753 Cookie/Statcounter TrackingCookie No 0 Yes No C:\Documents and Settings\Gabriel\Application Data\Mozilla\Firefox\Profiles\dmgug30x.default\cookies.txt[.statcounter.com/]

00167753 Cookie/Statcounter TrackingCookie No 0 Yes No C:\Documents and Settings\Compaq_PropriÃ©taire\Application Data\Mozilla\Firefox\Profiles\ro9r7hx0.default\cookies.txt[.statcounter.com/]

00167753 Cookie/Statcounter TrackingCookie No 0 Yes No C:\Documents and Settings\Adina\Application Data\Mozilla\Firefox\Profiles\8vdo5lsg.default\cookies.txt[.statcounter.com/]

00167753 Cookie/Statcounter TrackingCookie No 0 Yes No C:\Documents and Settings\Gabriel\Application Data\Mozilla\Firefox\Profiles\dmgug30x.default\cookies.txt[.statcounter.com/]

00167753 Cookie/Statcounter TrackingCookie No 0 Yes No C:\Documents and Settings\Pascal\Application Data\Mozilla\Firefox\Profiles\97awli6w.default\cookies.txt[.statcounter.com/]