Message suspect

[fifi33]

bonjour

 

Depuis un certain temps j'ai un message à l'ouverture de windows XP me disant qu'il ne trouve pas le fichier is-JTIU1.exe et cela revient systématiquement même après un passage de EasyCleaner, Autoruns bref j'ai essayé plusieurs solutions sans succès. Pouvez-vous m'aider

Merci d'avance

cordialement

PS: j'ai édité un rapport HijackThis mais je ne sais pas l'interpréter

 

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 10:19:24, on 06/04/2009

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Boot mode: Normal

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Intel\Wireless\Bin\EvtEng.exe

C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe

C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\spoolsv.exe

c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe

C:\Program Files\Avira\AntiVir Desktop\sched.exe

C:\Acer\Empowering Technology\ePerformance\MemCheck.exe

C:\Program Files\Avira\AntiVir Desktop\avguard.exe

C:\Program Files\Fichiers communs\InterVideo\DeviceService\DevSvc.exe

C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe

C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLServer.exe

C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLService.exe

C:\Program Files\Windows Live\Family Safety\fsssvc.exe

C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe

C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe

C:\Program Files\Maxtor\Sync\SyncServices.exe

C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE

d:\Program Files\CDBurnerXP\NMSAccessU.exe

C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe

C:\Program Files\CyberLink\Shared Files\RichVideo.exe

C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe

C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLSched.exe

C:\WINDOWS\AGRSMMSG.exe

C:\Program Files\Maxtor\OneTouch Status\maxmenumgr.exe

C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

C:\WINDOWS\system32\wbem\wmiapsrv.exe

C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

C:\PROGRA~1\FDF\FAST2.EXE

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\wbem\unsecapp.exe

C:\WINDOWS\explorer.exe

D:\AmiFoot\AmiFoot.exe

C:\Program Files\Mozilla Firefox\firefox.exe

D:\Documents\logiciels\FIFI.exe

 

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://asmaurepasfootball.free.fr/index.php?lng=fr

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

O2 - BHO: IE7Pro - {00011268-E188-40DF-A514-835FCD78B1BF} - C:\Program Files\IEPro\iepro.dll

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: Download Manager Browser Helper Object - {19C8E43B-07B3-49CB-BFFC-6777B593E6F8} - C:\PROGRA~1\FICHIE~1\fluxDVD\DOWNLO~1\XEBDLH~1.DLL

O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - (no file)

O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll

O2 - BHO: (no name) - {206E52E0-D52E-11D4-AD54-0000E86C26F6} - C:\PROGRA~1\FRESHD~1\FRESHD~1\fdcatch.dll

O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

O2 - BHO: DealioBHO Class - {6A87B991-A31F-4130-AE72-6D0C294BF082} - C:\Program Files\Dealio\kb127\Dealio.dll

O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll

O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll

O2 - BHO: Foxit Toolbar - {73c7d5b0-7b03-444a-84c7-ce1ba03b5573} - C:\Program Files\Foxit\tbFox1.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll

O2 - BHO: PDF-XChange Viewer IE-Plugin - {C5D07EB6-BBCE-4DAE-ACBB-D13A8D28CB1F} - C:\Program Files\Tracker Software\PDF-XChange Viewer\pdf-viewer\PDFXCviewIEPlugin.dll

O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll

O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\WINDOWS\system32\eDStoolbar.dll

O3 - Toolbar: Foxit Toolbar - {73c7d5b0-7b03-444a-84c7-ce1ba03b5573} - C:\Program Files\Foxit\tbFox1.dll

O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll

O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll

O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe

O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe

O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe

O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe

O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

O4 - HKLM\..\Run: [mxomssmenu] "C:\Program Files\Maxtor\OneTouch Status\maxmenumgr.exe"

O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min

O4 - HKLM\..\RunOnce: [innoSetupRegFile.0000000001] "C:\WINDOWS\is-JTIU1.exe" /REG

O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [FAST Defrag] C:\PROGRA~1\FDF\FAST2.EXE -tray

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')

O4 - Global Startup: AutorunsDisabled

O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200

O8 - Extra context menu item: Compare Prices with &Dealio - C:\Documents and Settings\DUPIN\Application Data\Dealio\kb127\res\DealioSearch.html

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000

O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://d:\Program Files\Free Download Manager\dlall.htm

O8 - Extra context menu item: Télécharger avec Free Download Manager - file://d:\Program Files\Free Download Manager\dllink.htm

O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://d:\Program Files\Free Download Manager\dlselected.htm

O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://d:\Program Files\Free Download Manager\dlfvideo.htm

O9 - Extra button: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\iepro.dll

O9 - Extra 'Tools' menuitem: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\iepro.dll

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll

O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll

O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe

O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL

O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Upload - {FD4E2FF8-973C-4A19-89BD-8E86B3CFCFE1} - d:\Program Files\Free Download Manager\FUM\fumiebtn.dll

O15 - Trusted Zone: *.canalplay.com

O15 - Trusted Zone: http://asmaurepasfootball.free.fr

O15 - Trusted Zone: http://phdupin.free.fr

O15 - Trusted Zone: http://onecare.live.com

O15 - Trusted Zone: *.canalplay.com (HKLM)

O15 - Trusted Zone: *.canalplusactive.com (HKLM)

O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/dow...llerControl.cab

O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204

O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab

O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/...lscbase9563.cab

O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll

O22 - SharedTaskScheduler: Fences - {EC654325-1273-C2A9-2B7C-45A29BCE2FBD} - C:\Program Files\Stardock\Fences\DesktopDock.dll

O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe

O23 - Service: Memory Check Service (AcerMemUsageCheckService) - Acer Inc. - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe

O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe

O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: Capture Device Service - InterVideo Inc. - C:\Program Files\Fichiers communs\InterVideo\DeviceService\DevSvc.exe

O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe

O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLSched.exe

O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLServer.exe

O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe

O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe

O23 - Service: Maxtor Service (Maxtor Sync Service) - Seagate Technology LLC - C:\Program Files\Maxtor\Sync\SyncServices.exe

O23 - Service: NMSAccessU - Unknown owner - d:\Program Files\CDBurnerXP\NMSAccessU.exe

O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe

O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe

O23 - Service: Intel® PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe

O23 - Service: Service CANALPLAY - Canal+ Active - d:\Program Files\Lecteur CANALPLAY\CanalPlayService.exe

O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe

 

--

End of file - 13519 bytes

[pear]

Bonjour,

 

Téléchargez Toolbar-S&D sur le Bureau.

Si vous utilisez Spybot

Pour désactiver TeaTimer qui ne sert à rien et peut faire échouer une désinfection:!

Afficher d'abord le Mode Avancé dans SpyBot

->Options Avancées :

- >menu Mode, Mode Avancé.

Une colonne de menus apparaît dans la partie gauche :

- >cliquer sur Outils,

- >cliquer sur Résident,

Dans Résident :

- >décocher Résident "TeaTimer" pour le désactiver.

 

Lancez l'installation du programme en exécutant le fichier téléchargé.

Redémarrez en mode sans échec

Double-cliquez sur le raccourci de Toolbar-S&D.

Sélectionnez la langue souhaitée en tapant la lettre de votre choix puis en validant avec la touche Entrée.

Choisisssez l'option 1 (Recherche).

Patientez jusqu'à la fin de la recherche.

Postez le rapport généré. (C:\TB.txt)

Relancez Toolbar-S&D en double-cliquant sur le raccourci. Tapez sur "2" et validez par"Entrée".

Ne fermez pas la fenêtre lors de la suppression !

Un rapport sera généré,

postez son contenu ici.

NOTE : Si le Bureau ne réapparait pas, appuyer simultanément sur Ctrl+Alt+Suppr pour ouvrir le Gestionnaire des tâches.

Allez à l'onglet "Processus". Cliquez en haut à gauche sur Fichier ->"Exécuter..."

Tapez explorer et validez.

[fifi33]

Merci deja pour votre aide

je crois que j'ai loupé le premier TB.txt car il a été ecrasé par le deuxieme

Apres redemmarage j'ai toujours le message

 

-----------\\ ToolBar S&D 1.2.8 XP/Vista

 

 

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )

Option : [2] ( 06/04/2009|12:05 )

 

-----------\\ SUPPRESSION

 

Supprime! - C:\Program Files\AskBarDis\bar

Supprime! - C:\Program Files\AskBarDis\unins000.dat

Supprime! - C:\Program Files\AskBarDis\unins000.exe

Supprime! - C:\DOCUME~1\DUPIN\Cookies\dupin@crawler[1].txt

Supprime! - C:\DOCUME~1\DUPIN\Cookies\dupin@dealio[2].txt

Supprime! - C:\Program Files\AskBarDis

 

-----------\\ Recherche de Fichiers / Dossiers ...

 

 

-----------\\ Extensions

 

(DUPIN) - {5bf73a30-8317-404b-bb12-bb1d7aacb90d} => fr-FR

(DUPIN) - {5bf73a30-8317-404b-bb12-bb1d7aacb90d} => frenchlocale

(DUPIN) - {0545b830-f0aa-4d7e-8820-50a4629a56fe} => clrtabs

(DUPIN) - {19503e42-ca3c-4c27-b1e2-9cdb2170ee34} => flashgot

(DUPIN) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar

(DUPIN) - {563e4790-7e70-11da-a72b-0800200c9a66} => clearcache

(DUPIN) - {73a6fe31-595d-460b-a920-fcc0f8843232} => noscript

(DUPIN) - {73c7d5b0-7b03-444a-84c7-ce1ba03b5573} => foxit

(DUPIN) - {89506680-e3f4-484c-a2c0-ed711d481eda} => showcase

(DUPIN) - {b9db16a4-6edc-47ec-a1f4-b86292ed211d} => dwhelper

(DUPIN) - {c45c406e-ab73-11d8-be73-000a95be3b12} => webdeveloper

(DUPIN) - {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} => adblockplus

(DUPIN) - {E9A1DEE0-C623-4439-8932-001E7D17607D} => ajtoolbar

(DUPIN) - {EF522540-89F5-46b9-B6FE-1829E2B572C6} => googlepreview

(DUPIN) - {fce36c1e-58d8-498a-b2a5-66ad1cedebbb} => customizegoogle

(DUPIN) - {28BA62BF-022B-44a3-88BC-D2112DDB7D58} => atbcc_button

(DUPIN) - {4dce973c-25a5-4657-8e37-6c2a85c24a7e} => contactssidebar

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-ca

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-cs

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-da

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-de

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-en-US

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-es-AR

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-es-ES

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-eu

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-fr

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-ga-IE

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-hu

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-is

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-it

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-ja-JP-mac

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-ja

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-ka

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-ko

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-lt

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-nb-NO

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-nl

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-nn-NO

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-pl

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-pt-BR

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-pt-PT

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-ro

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-ru

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-sk

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-sl

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-sv-SE

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-uk

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-zh-CN

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-zh-TW

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-ca

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-cs

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-da

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-de

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-en-US

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-es-AR

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-es-ES

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-eu

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-fr

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-ga-IE

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-hu

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-is

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-it

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-ja-JP-mac

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-ja

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-ka

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-ko

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-lt

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-nb-NO

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-nl

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-nn-NO

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-pl

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-pt-BR

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-pt-PT

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-ro

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-ru

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-sk

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-sl

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-sv-SE

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-uk

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-zh-CN

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-zh-TW

(DUPIN) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning

 

 

-----------\\ [..\Internet Explorer\Main]

 

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Start Page"="http://asmaurepasfootball.free.fr/index.php?lng=fr"

"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"'>http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"'>http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

"Search Bar"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

"Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]

"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"

"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"'>http://go.microsoft.com/fwlink/?LinkId=54896"

"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"

"Start Page"="http://www.msn.com/"

 

 

--------------------\\ Recherche d'autres infections

 

--------------------\\ Cracks & Keygens ..

 

C:\DOCUME~1\DUPIN\Mes documents\excel\jp-crack.zip

 

 

 

1 - "C:\ToolBar SD\TB_1.txt" - 06/04/2009|12:02 - Option : [1]

2 - "C:\ToolBar SD\TB_2.txt" - 06/04/2009|12:07 - Option : [2]

 

-----------\\ Fin du rapport a 12:07:09,60

Modifié le 6 avril 2009 par fifi33