PB Internet ; ping internet ok (virus Beagle) [Résolu]

Salut,

Pourquoi tu ne poursuit pas avec "sherred" ?

il est plein de "MER**" ton pc
faut nettoyer tout ca mais y a du boulot.
a tu un XP clean pres de toi pour comparer?

V-X, qu'est-ce que "sherred", une fonction d'Hijackthis ?

korhunt, j'avoue qu'il est pas clean (et je pense même que quasiment aucun PC connecté à la toile n'est pas infecté)
Donc pour trouver un XP clean à côté, il y a celui de mon frère avec lequel j'ai fait le UBCD4WIN. Il n'a pas de problèmes majeurs mais je ne peux pas affirmer qu'il est clean. Il a Antivir et Kerio (il veut tester des Firewall pour changer Zone-Alarm, j'ai hérité de Comodo...).

Re,

- le problème persiste alors je m'informe alors sur ce virus Bagle et la manière de le supprimer, je suis alors une procédure (http://sherred-aide-info-xp.forumperso.com/... qui utilise ELIBAGLA, Combofix, MAM (je la fais plusieurs fois et aussi en mode sans échec)

Poste sur sont forum au lieu de venir ici et demander de l'aide tu suis sa procédure et ensuite n'ayant pas de progrés tu vient ici ?

A++

Re,

il n'a pas posté sur son forum , il a suivi une procédure décrite sur ce forum pour supprimer Bagle ...



Voilà ce que tu vas faire :



1-IMPORTANT :
je rappelle que bagle est amené par un crack et qu'il se relance dès que tu te sers de celui ci; même si tu ne sers pas, il peut se relancer de lui même au démarrage de ton PC . En claire :
Essaye surtout de te rappeler si récemment tu n'as pas cliquer sur un "patch" ou un "keygen" pour installer un logiciel, un jeu cracké ou avoir une version complète d'un soft , et qu'il ne se soit rien passé de particulier ... C'est la que les bagles s'infiltrent ! Si tu retrouves ce crack en particulier ,scratch tout ( le crack, le soft ou encore les zip concernés). Si tu ne te rappelles plus trop , je te conseille fortement de supprimer tous les cracks qui sont sur ton PC ... ;)


2-Télécharge FindyKill de Chiquitine29 :

http://sd-1.archive-host.com/membres/up/116615172019703188/FindyKill.exe

->Enregistre le sur ton bureau et pas ailleurs !

!! Déconnecte toi et ferme toutes applications en cours !!

( Si ton anti-virus s'affolle au moment de l'enregistrement ou de l'utilisation de l'outil , ignore l'alerte ...)

-> Clique sur "FindyKill.exe" pour lancer l'installe de l'outil . Ne touche surtout pas aux paramètres d'installation.


Notes importantes :
* si tu as le prg Elibagla sur ton PC , supprime le ( risque de conflit entre les deux outils ) .

--> Double clique sur le raccourci " FindyKill " qui est sur ton bureau .
( sur la 1er fenêtre , tapes f puis [entrèe] pour la version en français ).

-->choisis l'option 1 ( recherche ) . Puis laisse travailler l'outil sans rien toucher ...

Une fois terminé, poste le rapport FindyKill.txt qui est généré ...

( Note : le rapport est sauvegardé à la racine du disque -> C:\FindyKill.txt )

PS : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.


Tuto : http://www.malekal.com/tutorial_FindyKill.php

Ok merci je fais ça tout de suite :)

Voilà :



----------------- FindyKill V4.710 ------------------

* User : Léonis - ROMAIN
* Emplacement : C:\Program Files\FindyKill
* Outils Mis a jours le 21/12/08 par Chiquitine29
* Recherche effectuée à 13:27:36 le 24/12/2008
* Windows XP - Internet Explorer 7.0.5730.13

((((((((((((((((( *** Recherche *** ))))))))))))))))))


--------------- [ Processus actifs ] ----------------


C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Fichiers communs\Intel\WirelessCommon\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\UTSCSI.EXE
C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Launchy\Launchy.exe
C:\WINDOWS\system32\RAMASST.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\igfxsrvc.exe

--------------- [ Fichiers/Dossiers infectieux ] ----------------


»»»» Presence des fichiers dans C:


»»»» Presence des fichiers dans C:\WINDOWS


»»»» Presence des fichiers dans C:\WINDOWS\Prefetch


»»»» Presence des fichiers dans C:\WINDOWS\system32


»»»» Presence des fichiers dans C:\WINDOWS\system32\config\systemprofile\AppData\Roaming


»»»» Presence des fichiers dans C:\WINDOWS\system32\drivers


»»»» Presence des fichiers dans C:\Documents and Settings\Léonis\Application Data

Found ! [23/12/2008 20:50] - "C:\Documents and Settings\Léonis\Application Data\drivers"

»»»» Presence des fichiers dans C:\DOCUME~1\LONIS~1\LOCALS~1\Temp


»»»» Presence des fichiers dans C:\Documents and Settings\Léonis\Local Settings\Temporary Internet Files\Content.IE5

Found ! [21/07/2007 18:55] - C:\Documents and Settings\All Users\Application Data\Skype\Plugins\Local Cache\26A4AFDD6DB64A03ADFA6DAB836DB8D6_more.jpg
Found ! [02/07/2007 17:10] - C:\Documents and Settings\All Users\Application Data\Skype\Plugins\Local Cache\7B5560BB781B40259A06350E9B643B6E_more.jpg
Found ! [21/07/2007 18:57] - C:\Documents and Settings\All Users\Application Data\Skype\Plugins\Local Cache\D3987B641C134048B815DB578D607F42_more.jpg
Found ! [25/06/2008 17:28] - C:\Documents and Settings\Léonis\Local Settings\Application Data\Microsoft\Media Player\Cache d’images\LocalMLS\{0A17FB11-FE13-4C83-945E-FB9588BB6415}.jpg
Found ! [15/10/2008 12:23] - C:\Documents and Settings\Léonis\Local Settings\Application Data\Microsoft\Media Player\Cache d’images\LocalMLS\{0BCA49C3-0BC9-4D69-9337-2837F0A7B647}.jpg
Found ! [09/03/2007 21:00] - C:\Documents and Settings\Léonis\Local Settings\Application Data\Microsoft\Media Player\Cache d’images\LocalMLS\{11CA2DB6-7F54-4FA8-B648-97B8E4530CC7}.jpg
Found ! [04/03/2007 11:50] - C:\Documents and Settings\Léonis\Local Settings\Application Data\Microsoft\Media Player\Cache d’images\LocalMLS\{3582C5EA-632C-4209-86CD-E182237DCB64}.jpg
Found ! [03/05/2008 12:44] - C:\Documents and Settings\Léonis\Local Settings\Application Data\Microsoft\Media Player\Cache d’images\LocalMLS\{3F1121FB-159B-4439-92FF-5B64E268A7FF}.jpg
Found ! [03/05/2008 12:21] - C:\Documents and Settings\Léonis\Local Settings\Application Data\Microsoft\Media Player\Cache d’images\LocalMLS\{4F9DB836-B799-4E15-8745-DE853B64DCF2}.jpg
Found ! [03/05/2008 13:10] - C:\Documents and Settings\Léonis\Local Settings\Application Data\Microsoft\Media Player\Cache d’images\LocalMLS\{7034CB64-2CAD-451D-A7F3-FBEC3676ED32}.jpg
Found ! [15/10/2008 14:11] - C:\Documents and Settings\Léonis\Local Settings\Application Data\Microsoft\Media Player\Cache d’images\LocalMLS\{8B64537F-60F1-48CD-91DD-85C1FBB01724}.jpg
Found ! [10/03/2007 14:07] - C:\Documents and Settings\Léonis\Local Settings\Application Data\Microsoft\Media Player\Cache d’images\LocalMLS\{97214968-3A37-43B3-89A0-BB6482C8E5B0}.jpg
Found ! [03/05/2008 13:27] - C:\Documents and Settings\Léonis\Local Settings\Application Data\Microsoft\Media Player\Cache d’images\LocalMLS\{B6463356-8C0E-4550-90D3-9CC3E406B485}.jpg
Found ! [11/12/2007 21:23] - C:\Documents and Settings\Léonis\Local Settings\Application Data\Microsoft\Media Player\Cache d’images\LocalMLS\{EB641541-42FD-4EB8-99B1-61D0C782993E}.jpg
Found ! [03/05/2008 14:43] - C:\Documents and Settings\Léonis\Mes documents\Ma musique\Citizen Cope\AlbumArt_{4C2779C1-1E02-4B64-9F35-9B9096DE2FD5}_Large.jpg
Found ! [03/05/2008 14:43] - C:\Documents and Settings\Léonis\Mes documents\Ma musique\Citizen Cope\AlbumArt_{4C2779C1-1E02-4B64-9F35-9B9096DE2FD5}_Small.jpg
Found ! [15/10/2008 14:45] - C:\Documents and Settings\Léonis\Mes documents\Ma musique\Citizen Cope\The Clarence Greenwood Recordings\AlbumArt_{4C2779C1-1E02-4B64-9F35-9B9096DE2FD5}_Large.jpg
Found ! [15/10/2008 14:45] - C:\Documents and Settings\Léonis\Mes documents\Ma musique\Citizen Cope\The Clarence Greenwood Recordings\AlbumArt_{4C2779C1-1E02-4B64-9F35-9B9096DE2FD5}_Small.jpg
Found ! [15/10/2008 14:45] - C:\Documents and Settings\Léonis\Mes documents\Ma musique\Leo Ferre\leo ferré\AlbumArt_{B64FAC24-659F-4CE5-9BAC-4BAA8C34F321}_Large.jpg
Found ! [15/10/2008 14:45] - C:\Documents and Settings\Léonis\Mes documents\Ma musique\Leo Ferre\leo ferré\AlbumArt_{B64FAC24-659F-4CE5-9BAC-4BAA8C34F321}_Small.jpg

--------------- [ Registre / Startup ] ----------------

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
ctfmon.exe=C:\WINDOWS\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
avgnt="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
COMODO Internet Security="C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
NvMediaCenter=RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
NvCplDaemon=RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

[HKEY_CURRENT_USER\software\local appwizard-generated applications\CPFFileSubmission]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\msmsgs]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\winupgro]

--------------- [ Registre / Clés infectieuses ] ----------------


Found ! - HKEY_USERS\S-1-5-21-3138020122-2873969652-2698996791-1005\Software\Local AppWizard-Generated Applications\winupgro
Found ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\winupgro

--------------- [ Etat / Services ] ----------------



+- Services : [ Auto=2 / Demande=3 / Désactivé=4 ]

Ndisuio - Type de démarrage = 3

EapHost - Type de démarrage = 2

/!\ Ip6Fw - Type de démarrage = 4

SharedAccess - Type de démarrage = 2

wuauserv - Type de démarrage = 2

wscsvc - Type de démarrage = 2



--------------- [ Recherche dans supports amovibles] ----------------


+- Informations :

C: - Lecteur fixe

F: - Lecteur amovible


+- presence des fichiers :



--------------- [ Registre / Mountpoint2 ] ----------------


-> Not found !


------------------- ! Fin du rapport ! --------------------

Bien ...


des restes ! ...


Impératif :

* Désactive Comodo et AntiVir le temps de la manipe !
* Supprime Elibagla sinon les deux outils risquent de se dire merde au reboot !



la suite :

1- Important :
Branche toutes tes unités externes au PC ( DD externes , clé USB , lecteur mp3, ect...) mais sans les ouvrir !
Tu les retireras après la manipe ...


2- ! Ferme toutes applications en cours !

Relance FindyKill :

-> choisis cette fois-ci l'option 2 .

/!\ ton PC va redémarrer de lui même , c'est normal !... Laisse travailler l'outil jusqu' à l'apparition du message :
"nettoyage terminé" .

Note : lors du message d'avertissement , clique sur " Ok " .

--> ensuite poste le nouveau rapport FindyKill.txt qui est généré et attends la suite ...

( Note : le rapport est sauvegardé à la racine du disque -> C:\FindyKill.txt )


PS : Si le Bureau ne réapparait pas, presse Ctrl + Alt + Suppr , Onglet "Fichier"-> "Nouvelle tâche":
tape explorer.exe et valide .

houla ptin ya de koi paniker moi ce ke je ferait c de tous remettre a zéro sa mé deja arriver a moi :-(

Voilà :




----------------- FindyKill V4.710 ------------------

* User : L‚onis - ROMAIN
* executed from : C:\Program Files\FindyKill
* Update on 21/12/08 par Chiquitine29
* Start at 13:49:18 the 24/12/2008
* Windows XP - Internet Explorer 7.0.5730.13


((((((((((((((( *** deleting *** ))))))))))))))))))


--------------- [ Active Processes ] ----------------


C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\logonui.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avwsc.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\system32\userinit.exe
C:\WINDOWS\system32\DVDRAMSV.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\WiFi\bin\EvtEng.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Fichiers communs\Intel\WirelessCommon\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\UTSCSI.EXE
C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
C:\WINDOWS\ehome\mcrdsvc.exe

--------------- [ Infected files / folders ] ----------------


»»»» Supression files in C:


»»»» Supression files in C:\WINDOWS


»»»» Supression files in C:\WINDOWS\Prefetch


»»»» Supression files in C:\WINDOWS\system32


»»»» Supression files in C:\WINDOWS\system32\config\systemprofile\AppData\Roaming


»»»» Supression files in C:\WINDOWS\system32\drivers


»»»» Supression files in C:\Documents and Settings\L‚onis\Application Data

Deleted ! - "C:\Documents and Settings\L‚onis\Application Data\drivers"

»»»» Supression files in C:\DOCUME~1\LONIS~1\LOCALS~1\Temp


»»»» Supression files in C:\Documents and Settings\L‚onis\Local Settings\Temporary Internet Files\Content.IE5

Deleted ! - C:\Documents and Settings\All Users\Application Data\Skype\Plugins\Local Cache\26A4AFDD6DB64A03ADFA6DAB836DB8D6_more.jpg
Deleted ! - C:\Documents and Settings\All Users\Application Data\Skype\Plugins\Local Cache\7B5560BB781B40259A06350E9B643B6E_more.jpg
Deleted ! - C:\Documents and Settings\All Users\Application Data\Skype\Plugins\Local Cache\D3987B641C134048B815DB578D607F42_more.jpg
Deleted ! - C:\Documents and Settings\L‚onis\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{0A17FB11-FE13-4C83-945E-FB9588BB6415}.jpg
Deleted ! - C:\Documents and Settings\L‚onis\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{0BCA49C3-0BC9-4D69-9337-2837F0A7B647}.jpg
Deleted ! - C:\Documents and Settings\L‚onis\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{11CA2DB6-7F54-4FA8-B648-97B8E4530CC7}.jpg
Deleted ! - C:\Documents and Settings\L‚onis\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{3582C5EA-632C-4209-86CD-E182237DCB64}.jpg
Deleted ! - C:\Documents and Settings\L‚onis\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{3F1121FB-159B-4439-92FF-5B64E268A7FF}.jpg
Deleted ! - C:\Documents and Settings\L‚onis\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{4F9DB836-B799-4E15-8745-DE853B64DCF2}.jpg
Deleted ! - C:\Documents and Settings\L‚onis\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{7034CB64-2CAD-451D-A7F3-FBEC3676ED32}.jpg
Deleted ! - C:\Documents and Settings\L‚onis\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{8B64537F-60F1-48CD-91DD-85C1FBB01724}.jpg
Deleted ! - C:\Documents and Settings\L‚onis\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{97214968-3A37-43B3-89A0-BB6482C8E5B0}.jpg
Deleted ! - C:\Documents and Settings\L‚onis\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{B6463356-8C0E-4550-90D3-9CC3E406B485}.jpg
Deleted ! - C:\Documents and Settings\L‚onis\Local Settings\Application Data\Microsoft\Media Player\Cache d'images\LocalMLS\{EB641541-42FD-4EB8-99B1-61D0C782993E}.jpg
Deleted ! - C:\Documents and Settings\L‚onis\Mes documents\Ma musique\Citizen Cope\AlbumArt_{4C2779C1-1E02-4B64-9F35-9B9096DE2FD5}_Large.jpg
Deleted ! - C:\Documents and Settings\L‚onis\Mes documents\Ma musique\Citizen Cope\AlbumArt_{4C2779C1-1E02-4B64-9F35-9B9096DE2FD5}_Small.jpg
Deleted ! - C:\Documents and Settings\L‚onis\Mes documents\Ma musique\Citizen Cope\The Clarence Greenwood Recordings\AlbumArt_{4C2779C1-1E02-4B64-9F35-9B9096DE2FD5}_Large.jpg
Deleted ! - C:\Documents and Settings\L‚onis\Mes documents\Ma musique\Citizen Cope\The Clarence Greenwood Recordings\AlbumArt_{4C2779C1-1E02-4B64-9F35-9B9096DE2FD5}_Small.jpg
Deleted ! - C:\Documents and Settings\L‚onis\Mes documents\Ma musique\Leo Ferre\leo ferr‚\AlbumArt_{B64FAC24-659F-4CE5-9BAC-4BAA8C34F321}_Large.jpg
Deleted ! - C:\Documents and Settings\L‚onis\Mes documents\Ma musique\Leo Ferre\leo ferr‚\AlbumArt_{B64FAC24-659F-4CE5-9BAC-4BAA8C34F321}_Small.jpg

--------------- [ Registry / Infected keys ] ----------------

Deleted ! - HKEY_CURRENT_CONFIG\System\CurrentControlSet\Enum\ROOT\LEGACY_SROSA
Deleted ! - HKEY_USERS\S-1-5-21-3138020122-2873969652-2698996791-1005\Software\Local AppWizard-Generated Applications\winupgro

--------------- [ States / Restarting of services ] ----------------



+- Services : [ Auto=2 / Request=3 / Disable=4 ]

Ndisuio - Type of startup = 3

EapHost - Type of startup = 2

Ip6Fw - Type of startup = 2

SharedAccess - Type of startup = 2

wuauserv - Type of startup = 2

wscsvc - Type of startup = 2


--------------- [ Cleaning removable drives ] ----------------

+- Informations :

C: - Lecteur fixe

F: - Lecteur amovible

G: - Lecteur amovible


+- deleting files :


--------------- [ Registry / Mountpoint2 ] ----------------


-> Not found !


--------------- [ Searching Cracks / Keygen ] ----------------

C:\Documents and Settings\L‚onis\Bureau\Chicken Invaders 3\file crack ban ga.exe
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\AOE.PPC.v1.25.Full\Crack
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\AOE.PPC.v1.25.Full\Crack\aoeppc.exe
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen.rar
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Aide installation.txt
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Meta.txt
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\tt7_keygen.exe
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\TTN_7.450.9028.cab
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Agglom_rations.bmp
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Agglom_rations.ov2
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\cline.dat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Clublibertin.bmp
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Clublibertin.ov2
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\cname.dat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\cnode.dat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\cphoneme.dat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\crpoi.dat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\cspeech_FRA.dat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Distributeurs_Bancaires.bmp
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Distributeurs_Bancaires.ov2
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Essence_Discount.bmp
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Essence_Discount.ov2
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\faces.dat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\France-14.meta
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\France-14.meta.dct
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\France-15.meta
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\France.pna
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Limitation_110.bmp
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Limitation_110.ov2
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Limitation_130.bmp
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Limitation_130.ov2
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Limitation_30.bmp
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Limitation_30.ov2
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Limitation_50.bmp
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Limitation_50.ov2
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Limitation_70.bmp
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Limitation_70.ov2
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Magasin_Lidl.bmp
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Magasin_Lidl.ov2
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\mapinfo.dat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Mcdonalds_France.bmp
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Mcdonalds_France.ov2
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Metrorer_Paris.bmp
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Metrorer_Paris.ov2
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\poi.dat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Restaurant_Quick.bmp
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Restaurant_Quick.ov2
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\RF-030.BMP
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\RF-030.OV2
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\RF-050.BMP
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\RF-050.OV2
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\RF-070.BMP
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\RF-070.OV2
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\RF-080.BMP
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\RF-080.OV2
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\RF-090.BMP
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\RF-090.OV2
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\RF-110.BMP
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\RF-110.OV2
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\RF-130.BMP
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\RF-130.OV2
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\tables.dat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\tmccodes.dat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Tout_Paris.bmp
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\Tout_Paris.ov2
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\France\traffic.dat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur00_00000,00000.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur00_00000,00000.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_00000,06400.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_00000,06400.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_00000,07120.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_00000,07120.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_00000,08560.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_00000,08560.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_00000,09280.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_00000,09280.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_00000,10000.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_00000,10000.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_00000,10720.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_00000,10720.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_00000,11440.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_00000,11440.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_00000,12160.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_00000,12160.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_01680,06400.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_01680,06400.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_01680,07120.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_01680,07120.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_01680,07840.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_01680,07840.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_01680,08560.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_01680,08560.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_01680,09280.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_01680,09280.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_01680,10000.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_01680,10000.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_01680,10720.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_01680,10720.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_01680,11440.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_01680,11440.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_01680,12160.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_01680,12160.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_03360,06400.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_03360,06400.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_03360,07120.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_03360,07120.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_03360,07840.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_03360,07840.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_03360,08560.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_03360,08560.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_03360,09280.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_03360,09280.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_03360,10000.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_03360,10000.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_03360,10720.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_03360,10720.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_03360,11440.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_03360,11440.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_03360,12160.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_03360,12160.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_18720,07224.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_18720,07224.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_18720,08024.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_18720,08024.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_18720,08824.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_18720,08824.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_18720,10424.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_18720,10424.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_18720,11224.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_18720,11224.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_18720,12024.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_18720,12024.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_18720,12824.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_18720,12824.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_20160,07224.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_20160,07224.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_20160,08024.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_20160,08024.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_20160,08824.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_20160,08824.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_20160,09624.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_20160,09624.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_20160,10424.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_20160,10424.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_20160,11224.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_20160,11224.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_20160,12024.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_20160,12024.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_20160,12824.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur01_20160,12824.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur03_00000,05760.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur03_00000,05760.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur03_00000,08160.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur03_00000,08160.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur03_00000,10560.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur03_00000,10560.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur03_03600,05760.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur03_03600,05760.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur03_03600,08160.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur03_03600,08160.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur03_03600,10560.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur03_03600,10560.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur03_18720,07224.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur03_18720,07224.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur03_18720,09624.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur03_18720,09624.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur03_18720,12024.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur03_18720,12024.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur09_00000,00000.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur09_00000,00000.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur09_00000,07200.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur09_00000,07200.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur09_00000,14400.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur09_00000,14400.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur09_18720,07200.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur09_18720,07200.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur18_00000,00000.jpg
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\eur18_00000,00000.sat
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\RASTER\europe.ver
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\collected.ini
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data00.chk
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data00.vif
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data01.chk
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data01.vif
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data02.chk
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data02.vif
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data04.chk
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data04.vif
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data05.chk
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data05.vif
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data10.chk
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data10.vif
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data11.chk
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data11.vif
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data12.chk
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data12.vif
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data13.chk
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data13.vif
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data14.chk
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data14.vif
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data15.chk
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data15.vif
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data17.chk
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data17.vif
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data18.chk
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data18.vif
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data19.chk
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data19.vif
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data20.chk
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data20.vif
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data21.chk
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data21.vif
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data22.chk
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data22.vif
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data23.chk
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data23.vif
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data24.chk
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data24.vif
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data25.chk
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data25.vif
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data26.chk
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data26.vif
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data27.chk
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data27.vif
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data28.chk
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data28.vif
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data29.chk
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data29.vif
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data46.chk
C:\Documents and Settings\L‚onis\Bureau\jeux telephone\tomtom\TomTom Navigator 7.450 (9028) + France map 720.1802 for Windows Mobile with keygen\Voices\data46.vif
C:\Documents and Settings\L‚onis\Mes documents\Archives\FASM\Fast MD5 Cracker
C:\Documents and Settings\L‚onis\Mes documents\Archives\FASM\asm\asmfr_MODESTE-INTRO-64KO-MASM32_15285\Infoticaires2002_src\utils\fsg\xt.cracktro.exe
C:\Documents and Settings\L‚onis\Mes documents\Archives\FASM\Fast MD5 Cracker\Benchmark.doc
C:\Documents and Settings\L‚onis\Mes documents\Archives\FASM\Fast MD5 Cracker\Clefs.ico
C:\Documents and Settings\L‚onis\Mes documents\Archives\FASM\Fast MD5 Cracker\Fast MD5 Cracker.Asm
C:\Documents and Settings\L‚onis\Mes documents\Archives\FASM\Fast MD5 Cracker\Fast MD5 Cracker.dlg
C:\Documents and Settings\L‚onis\Mes documents\Archives\FASM\Fast MD5 Cracker\Fast MD5 Cracker.Inc
C:\Documents and Settings\L‚onis\Mes documents\Archives\FASM\Fast MD5 Cracker\Fast MD5 Cracker.obj
C:\Documents and Settings\L‚onis\Mes documents\Archives\FASM\Fast MD5 Cracker\Fast MD5 Cracker.rap
C:\Documents and Settings\L‚onis\Mes documents\Archives\FASM\Fast MD5 Cracker\Fast MD5 Cracker.Rc
C:\Documents and Settings\L‚onis\Mes documents\Archives\FASM\Fast MD5 Cracker\Fast MD5 Cracker.RES
C:\Documents and Settings\L‚onis\Mes documents\Archives\FASM\Fast MD5 Cracker\Res
C:\Documents and Settings\L‚onis\Mes documents\Archives\FASM\Fast MD5 Cracker\Res\Fast MD5 CrackerDlg.Rc
C:\Documents and Settings\L‚onis\Mes documents\Archives\FASM\Fast MD5 Cracker\Res\Fast MD5 CrackerRes.rc
C:\Documents and Settings\L‚onis\Mes documents\Archives\setup\[APP] Alcohol 120% v1.9.2.1705 Multilanguage + serial (OK)\Alcohol 120% v1.9.2.1705 Multilanguage + serial (OK)\crack
C:\Documents and Settings\L‚onis\Mes documents\Archives\setup\[APP] Alcohol 120% v1.9.2.1705 Multilanguage + serial (OK)\Alcohol 120% v1.9.2.1705 Multilanguage + serial (OK)\crack\serial.txt
C:\Documents and Settings\L‚onis\Mes documents\jeux\Battlefield 2\crack
C:\Documents and Settings\L‚onis\Mes documents\jeux\Battlefield 2\crack\BF2.exe
C:\Documents and Settings\L‚onis\Mes documents\jeux\Battlefield 2\crack\rzr-b241.nfo
C:\Documents and Settings\L‚onis\Mes documents\Ma musique\Calvin Russel\Calvin Russel - A crack In Time
C:\Documents and Settings\L‚onis\Mes documents\Ma musique\Calvin Russel\Calvin Russel - A crack In Time\Track 01.mp3
C:\Documents and Settings\L‚onis\Mes documents\Ma musique\Calvin Russel\Calvin Russel - A crack In Time\Track 02.mp3
C:\Documents and Settings\L‚onis\Mes documents\Ma musique\Calvin Russel\Calvin Russel - A crack In Time\Track 03.mp3
C:\Documents and Settings\L‚onis\Mes documents\Ma musique\Calvin Russel\Calvin Russel - A crack In Time\Track 04.mp3
C:\Documents and Settings\L‚onis\Mes documents\Ma musique\Calvin Russel\Calvin Russel - A crack In Time\Track 05.mp3
C:\Documents and Settings\L‚onis\Mes documents\Ma musique\Calvin Russel\Calvin Russel - A crack In Time\Track 06.mp3
C:\Documents and Settings\L‚onis\Mes documents\Ma musique\Calvin Russel\Calvin Russel - A crack In Time\Track 07.mp3
C:\Documents and Settings\L‚onis\Mes documents\Ma musique\Calvin Russel\Calvin Russel - A crack In Time\Track 08.mp3
C:\Documents and Settings\L‚onis\Mes documents\Ma musique\Calvin Russel\Calvin Russel - A crack In Time\Track 09.mp3
C:\Documents and Settings\L‚onis\Mes documents\Ma musique\Calvin Russel\Calvin Russel - A crack In Time\Track 10.mp3
C:\Documents and Settings\L‚onis\Mes documents\Ma musique\Calvin Russel\Calvin Russel - A crack In Time\Track 11.mp3
C:\Documents and Settings\L‚onis\Mes documents\Ma musique\Calvin Russel\Calvin Russel - A crack In Time\Track 12.mp3
C:\Documents and Settings\L‚onis\Mes documents\Ma musique\Calvin Russel\Calvin Russel - A crack In Time\Track 13.mp3
C:\Documents and Settings\L‚onis\Mes documents\Ma musique\Calvin Russel\Calvin Russel - A crack In Time\Track 14.mp3
C:\Documents and Settings\L‚onis\Mes documents\Ma musique\Dutronc\Dutronc Crack Boum Hue.MP3
C:\Documents and Settings\L‚onis\Mes documents\Ma musique\radiohead\RADIO HEAD (F)\WINAMP-BUENO\Winamp 2.0\Winamp Crack.zip


---------------- ! End of report ! ------------------

Vire tous tes cracks ! Sinon t'es bon pour te réinfecter directe !!!


Supprime proprement MSN car définitivement shooter par bagle ; tu réinstalles ensuite .


Si tes défenses ne fonctionnent toujours pas ( Comodo et AntiVir ), même topo : désinstalle proprement et réinstalle .




ensuite fais ceci :



1- Télécharge CCleaner :
http://www.commentcamarche.net/telecharger/telecharger 168 ccleaner
ou http://www.pcastuces.com/logitheque/ccleaner.htm
Ce logiciel va permettre de supprimer tous les fichiers temporaires et de corriger ton registre .
Lors de l'installation:
-choisis bien "francais" en langue .
-avant de cliquer sur le bouton "installer", décoche toutes les "options supplémentaires" sauf les 2 premières.


Un tuto ( aide ):
http://perso.orange.fr/jesses/Docs/Logiciels/CCleaner.htm

---> Utilisation:
! déconnecte toi et ferme toutes applications en cours !
* va dans "nettoyeur" : fais -analyse- puis -nettoyage-
* va dans "registre" : fais -chercher les erreurs- et -réparer toutes les erreurs-
( plusieurs fois jusqu'à ce qu'il n'y est plus d'erreur ) .

( CCleaner : soft à garder sur son PC , super utile pour de bons nettoyages ... )



2- Télécharge Random's System Information Tool (RSIT) de random/random et enregistre l'exécutable sur ton Bureau.

-> http://images.malwareremoval.com/random/RSIT.exe

! Ferme bien toutes tes applications en cours !

Double-clique sur " RSIT.exe " pour le lancer .

-> Une première fenêtre s'ouvre avec en titre : " Disclaimer of warranty " .

* Devant l'option "List files/folders created ..." , tu choisis : 2 months

* clique ensuite sur " Continue " pour lancer l'analyse ...


( Note : Si la dernière version de HijackThis n'est pas détectée sur ton PC, RSIT le téléchargera et te demandera d'accepter la licence.)


-> laisse faire le scan et ne touche pas au PC ...


Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront (probablement avec le bloc-note).

Poste le contenu de " log.txt " (c'est celui qui apparait à l'écran), ainsi que de " info.txt " (que tu verras dans la barre des tâches), pour analyse et attends la suite ...

Important : poste un rapport, puis l'autre dans la réponse suivante ... si tu essaies de poster les deux en même temps,
cela risque d'être trop long pour le forum ...
Et si "log.txt" seul, ne passe pas non plus , fais le en 2 fois ... merci ...

( Note : les rapports seront en outre sauvegardés dans ce dossier -> C:\rsit )

(je connaissais CCleaner et l'utilisais souvent, entre autre, j'ai oublié de le préciser, je l'ai utilisé plusieurs fois après UBCD4WIN)

Voici log.txt :

Logfile of random's system information tool 1.05 (written by random/random)
Run by Léonis at 2008-12-24 14:24:22
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 36 GB (23%) free of 152 GB
Total RAM: 1022 MB (63% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:24:37, on 24/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\system32\DVDRAMSV.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\WiFi\bin\EvtEng.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Fichiers communs\Intel\WirelessCommon\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\UTSCSI.EXE
C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\msiexec.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Documents and Settings\Léonis\Bureau\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\Léonis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - (no file)
O2 - BHO: (no name) - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - (no file)
O3 - Toolbar: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - (no file)
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\RunOnce: [MessengerPlusLiveUninstall] "C:\DOCUME~1\LONIS~1\LOCALS~1\Temp\MsgPlusUninstall.exe" /Cleanup
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: Raccourci vers A faire.lnk = ?
O4 - Global Startup: Launchy.lnk = C:\Program Files\Launchy\Launchy.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O4 - Global Startup: RAMASST.lnk = C:\WINDOWS\system32\RAMASST.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{C765BE1D-C8C4-4610-9DC1-58BC020FADFF}: NameServer = 192.168.0.1
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\WINDOWS\system32\guard32.dll
O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - Unknown owner - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: DVD-RAM_Service - Matsushita Electric Industrial Co., Ltd. - C:\WINDOWS\system32\DVDRAMSV.exe
O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: Windows Live Contrôle parental (fsssvc) - Unknown owner - C:\Program Files\Windows Live\Family Safety\fsssvc.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Fichiers communs\Logitech\Bluetooth\LBTServ.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Fichiers communs\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: Intel® PROSet/Wireless WiFi Service (S24EventMonitor) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\S24EvMon.exe
O23 - Service: SeaPort - Unknown owner - C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (file missing)
O23 - Service: USBest Service Zero (UTSCSI) - USBest - C:\WINDOWS\system32\UTSCSI.EXE
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe

Voici le info.txt :

info.txt logfile of random's system information tool 1.05 2008-12-24 14:24:40

======Uninstall list======

-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CBBB5EED-CC92-49F2-A276-D5433F39D1EB}\Setup.exe" -l0x40c
7-Zip 4.57-->MsiExec.exe /I{23170F69-40C1-2701-0457-000001000000}
Adobe Flash Player Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
a-squared HiJackFree 3.0-->"C:\Program Files\a-squared HiJackFree\unins000.exe"
Assistant de connexion Windows Live-->MsiExec.exe /I{D6E592B3-67DA-4BBB-9783-E1838FB253A2}
Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir PersonalEdition Classic\SETUP.EXE /REMOVE
AxCrypt (Désinstaller uniquement)-->"C:\Program Files\Axon Data\AxCrypt\AxCryptU.exe"
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
CDBurnerXP-->"C:\Program Files\CDBurnerXP\unins000.exe"
CDDRV_Installer-->MsiExec.exe /I{0C826C5B-B131-423A-A229-C71B3CACCD6A}
Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}
Command & Conquer 3 Tiberium Wars(TM) Worldbuilder-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F428768A-BA63-43A5-86E9-7F0CFD174944}\setup.exe" -l0x9 -removeonly
Command & Conquer 3-->MsiExec.exe /I{DDEDAF6C-488E-4CDA-8276-1CCF5F3C5C32}
COMODO Internet Security-->C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe -u
Conexant HD Audio-->C:\Program Files\CONEXANT\CNXT_HDAUDIO\UIU32a.exe -U -I*.INF
Correctif Lecteur Windows Media 10 - KB895316-->"C:\WINDOWS\$NtUninstallKB895316$\spuninst\spuninst.exe"
Correctif n° 2 pour Windows XP Édition Media Center 2005-->C:\WINDOWS\$NtUninstallKB900325$\spuninst\spuninst.exe
Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Correctif pour Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Counter-Strike: Source (Update 11)-->C:\Games\Counter-Strike Source\CSS.Uninstaller.exe
Creative Jukebox Driver-->C:\Program Files\Creative\Jukebox 3 Drivers\DrvUnins.exe /s
DVD Decrypter (Remove Only)-->"C:\Program Files\DVD Decrypter\uninstall.exe"
DVD Shrink 3.2-->"C:\Program Files\DVD Shrink\unins000.exe"
eMule-->"C:\Program Files\eMule\Uninstall.exe"
ffdshow [rev 1703] [2007-12-15]-->"C:\Program Files\ffdshow\unins000.exe"
FindyKill-->C:\Program Files\FindyKill\Uninstal.exe
Foxit Reader-->C:\Program Files\Foxit Software\Foxit Reader\Uninstall.exe
Free Mp3 Wma Converter V 1.7.3-->"C:\Program Files\Free Audio Pack\unins000.exe"
Galerie de photos Windows Live-->MsiExec.exe /X{43563ACB-371B-4C58-8979-B192B390424C}
GIMP 2.4.7-->"C:\Program Files\GIMP-2.0\setup\unins000.exe"
Glary Utilities 2.4-->"C:\Program Files\Glary Utilities\unins000.exe"
Google Earth-->MsiExec.exe /I{1E04F83B-2AB9-4301-9EF7-E86307F79C72}
High Definition Audio Driver Package - KB888111-->"C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe"
HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
Hotfix for Windows Media Player 10 (KB903157)-->"C:\WINDOWS\$NtUninstallKB903157$\spuninst\spuninst.exe"
ImgBurn-->"C:\Program Files\ImgBurn\uninstall.exe"
Installation Windows Live-->MsiExec.exe /I{3CCB732A-E472-4CF9-B1EE-F18365341FE0}
Intel PROSet Wireless-->Intel PROSet Wireless
Intel(R) PRO Network Connections Drivers-->Prounstl.exe
Java(TM) 6 Update 4-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160040}
Java(TM) 6 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050}
Junk Mail filter update-->MsiExec.exe /I{4AB8B41B-3AF1-46BE-99B0-0ACD3B300C0A}
KhalInstallWrapper-->MsiExec.exe /I{3101CB58-3482-4D21-AF1A-7057FC935355}
Larousse Chambers Français - Anglais-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DD61D1CF-4AE4-4459-B351-CFB6C7817632}\Setup.exe" -l0x40c
Launchy 2.0-->"C:\Program Files\Launchy\unins000.exe"
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Logitech SetPoint-->C:\Program Files\InstallShield Installation Information\{F29B21BD-CAA6-445F-8EF7-A7E2B9D8B14E}\setup.exe -runfromtemp -l0x040c -removeonly
Ma-Config.com-->MsiExec.exe /X{49C3F7D7-215F-47D7-A93B-E9FC772A5E96}
Macromedia Flash Player-->MsiExec.exe /X{0456ebd7-5f67-4ab6-852e-63781e3f389c}
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Maple 9.5-->"C:\Program Files\Maple 9.5\Uninstall_Maple 9.5\Uninstall Maple 9.5.exe"
mCore-->MsiExec.exe /I{E81667C6-2856-46D6-ABEA-6A2F42166779}
MGTEK dopisp-->MsiExec.exe /I{C25D1742-3136-4B33-9D32-8F0F5E81F349}
Microsoft .NET Framework 2.0 Service Pack 1-->MsiExec.exe /I{B508B3F1-A24A-32C0-B310-85786919EF28}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft Kernel-Mode Driver Framework Feature Pack 1.5-->"C:\WINDOWS\$NtUninstallWdf01005$\spuninst\spuninst.exe"
Microsoft Motocross Madness 2-->"C:\Program Files\Microsoft Games\Motocross Madness 2\UNINSTAL.EXE" /runtemp /addremove
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Search Enhancement Pack-->MsiExec.exe /I{299CF645-48C7-4FA1-8BCD-5CE200CF180D}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft Sync Framework Runtime Native v1.0 (x86)-->MsiExec.exe /I{8A74E887-8F0F-4017-AF53-CBA42211AAA5}
Microsoft Sync Framework Services Native v1.0 (x86)-->MsiExec.exe /I{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Miranda IM 0.7.13-->C:\Program Files\Miranda IM\Uninstall.exe
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour pour Lecteur Windows Media 10 (KB913800)-->"C:\WINDOWS\$NtUninstallKB913800$\spuninst\spuninst.exe"
Mise à jour pour Lecteur Windows Media 10 (KB926251)-->"C:\WINDOWS\$NtUninstallKB926251$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Mozilla Firefox (3.0.5)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
Mozilla Thunderbird (2.0.0.18)-->C:\Program Files\Mozilla Thunderbird\uninstall\helper.exe
mProSafe-->MsiExec.exe /I{23FB368F-1399-4EAC-817C-4B83ECBE3D83}
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 6.0 Parser (KB933579)-->MsiExec.exe /I{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E}
mWlsSafe-->MsiExec.exe /I{FCA651F3-5BDA-4DDA-9E4A-5D87D6914CC4}
NVIDIA Drivers-->C:\WINDOWS\system32\nvudisp.exe UninstallGUI
oggcodecs 0.71.0946-->C:\Program Files\illiminable\oggcodecs\uninst.exe
OpenAL-->"C:\Program Files\OpenAL\oalinst.exe" /U
OpenOffice.org 2.4-->MsiExec.exe /I{A122962F-331A-4C2E-93DB-AD92D8A4FB14}
Pack Vista Inspirat 2 1.0-->C:\WINDOWS\BricoPacks\Vista Inspirat 2\Remove.exe
PeaZip 1.11-->"C:\Program Files\PeaZip\unins000.exe"
Pilote du DVD-RAM-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9D765FA6-F2BC-40AF-8145-50808F9BDF4E}\setup.exe" -l0x40c DVD-RAM Driver
QuickTime-->MsiExec.exe /I{08CA9554-B5FE-4313-938F-D4A417B81175}
Regressi-->MsiExec.exe /I{E2E164AB-1367-488F-8F1F-BA312DB2FF18}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
Skype™ 3.6-->MsiExec.exe /X{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}
Sonic Encoders-->MsiExec.exe /I{9941F0AA-B903-4AF4-A055-83A9815CC011}
Spybot - Search & Destroy 1.4-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins001.exe"
SpywareBlaster 4.0-->"C:\Program Files\SpywareBlaster\unins000.exe"
Synaptics Pointing Device Driver-->rundll32.exe "C:\Program Files\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall
Texas Instruments PCIxx21/x515/xx12 drivers.-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{4497AFF6-98C4-4F49-B073-F48F42BCBF9E} /l1036
TI Connect 1.5-->MsiExec.exe /I{A8B94669-8654-4126-BD28-D0D2412CDED6}
VideoLAN VLC media player 0.8.6e-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Warhammer 40,000: Dawn Of War - Gold Edition-->MsiExec.exe /X{D0B36BAF-3E9D-423E-8821-ED238C18DB0A}
Winamp-->"C:\Program Files\Winamp\UninstWA.exe"
Windows Driver Package - Intel (NETw5x32) net (09/25/2008 12.1.2.1)-->C:\PROGRA~1\DIFX\D6ACC4BE676423A2B130B78A4B627FC457D98997\dpinst32.exe /u C:\WINDOWS\system32\DRVSTORE\netw5x32_74BACD4A361CF37186F7E967730975606AB2E1F8\netw5x32.inf
Windows Driver Package - Intel (w29n51) net (12/19/2007 9.0.4.39)-->C:\PROGRA~1\DIFX\D6ACC4BE676423A2B130B78A4B627FC457D98997\dpinst32.exe /u C:\WINDOWS\system32\DRVSTORE\w29n51_AEF466EE116FDF742A02BFF75E6143DB4A91003C\w29n51.inf
Windows Live Call-->MsiExec.exe /I{01523985-2098-43AF-9C97-12B07BE02A9B}
Windows Live Communications Platform-->MsiExec.exe /I{F69E83CF-B440-43F8-89E6-6EA80712109B}
Windows Live Contrôle parental-->MsiExec.exe /X{EB8BAA0D-11EF-4EDC-A960-2AB7CA8F53F0}
Windows Live Mail-->MsiExec.exe /I{63DC2DA0-2A6C-4C38-9249-B75395458657}
Windows Live Messenger-->MsiExec.exe /X{059C042E-796A-4ACC-A81A-ECC2010BB78C}
Windows Live Toolbar-->MsiExec.exe /X{915809D6-1F93-45F2-9699-5F1DA64DC24B}
Windows Live Writer-->MsiExec.exe /X{2231CE39-B963-4B9D-823A-F412ECA637B1}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows XP Édition Media Center 2005 KB888316-->C:\WINDOWS\$NtUninstallKB888316$\spuninst\spuninst.exe
Windows XP Media Center Edition 2005 KB894553-->C:\WINDOWS\$NtUninstallKB894553$\spuninst\spuninst.exe
Windows XP Media Center Edition 2005 KB895678-->C:\WINDOWS\$NtUninstallKB895678$\spuninst\spuninst.exe
Windows XP Media Center Edition 2005 KB925766-->"C:\WINDOWS\$NtUninstallKB925766$\spuninst\spuninst.exe"
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
World Community Grid - BOINC Agent-->MsiExec.exe /I{97257926-3443-4DB5-93CF-2B3ADAD581CC}

======Security center information======

AV: Avira AntiVir PersonalEdition Classic
FW: Norton Internet Worm Protection (disabled)
FW: ZoneAlarm Firewall
FW: COMODO Firewall

System event log

Computer Name: ROMAIN
Event Code: 8032
Message: Le service Explorateur d'ordinateur a rencontré un nombre d'échecs trop important en essayant de retrouver la copie de sauvegarde de la liste sur le transport \Device\NetBT_Tcpip_{CBC4BCE1-4422-48B2-8B0C-70D157ACF286}.
L'explorateur secondaire s'arrête.

Record Number: 34910
Source Name: BROWSER
Time Written: 20081120121611.000000+240
Event Type: erreur
User:

Computer Name: ROMAIN
Event Code: 10016
Message: Les paramètres d'autorisation par défaut de l'ordinateur n'accordent pas d'autorisation Locale Activation pour l'application serveur COM avec le CLSID
{A4199E55-EBB9-49E5-AF1A-7A5408B2E206}
au SID AUTORITE NT\SERVICE RÉSEAU de l'utilisateur (S-1-5-20). Cette autorisation de sécurité peut être modifiée à l'aide de l'outil d'administration Services de composants.

Record Number: 34909
Source Name: DCOM
Time Written: 20081120121412.000000+240
Event Type: erreur
User: AUTORITE NT\SERVICE RÉSEAU

Computer Name: ROMAIN
Event Code: 10016
Message: Les paramètres d'autorisation par défaut de l'ordinateur n'accordent pas d'autorisation Locale Activation pour l'application serveur COM avec le CLSID
{A4199E55-EBB9-49E5-AF1A-7A5408B2E206}
au SID AUTORITE NT\SERVICE RÉSEAU de l'utilisateur (S-1-5-20). Cette autorisation de sécurité peut être modifiée à l'aide de l'outil d'administration Services de composants.

Record Number: 34908
Source Name: DCOM
Time Written: 20081120121412.000000+240
Event Type: erreur
User: AUTORITE NT\SERVICE RÉSEAU

Computer Name: ROMAIN
Event Code: 10016
Message: Les paramètres d'autorisation par défaut de l'ordinateur n'accordent pas d'autorisation Locale Activation pour l'application serveur COM avec le CLSID
{A4199E55-EBB9-49E5-AF1A-7A5408B2E206}
au SID AUTORITE NT\SERVICE RÉSEAU de l'utilisateur (S-1-5-20). Cette autorisation de sécurité peut être modifiée à l'aide de l'outil d'administration Services de composants.

Record Number: 34907
Source Name: DCOM
Time Written: 20081120121411.000000+240
Event Type: erreur
User: AUTORITE NT\SERVICE RÉSEAU

Computer Name: ROMAIN
Event Code: 8021
Message: L'explorateur n'a pas pu retrouver la liste des serveurs du maître explorateur \\PC-DE-CHRISTINE sur le réseau \Device\NetBT_Tcpip_{CBC4BCE1-4422-48B2-8B0C-70D157ACF286}.
La donnée est le code d'erreur.

Record Number: 34906
Source Name: BROWSER
Time Written: 20081120121351.000000+240
Event Type: Avertissement
User:

Application event log

Computer Name: ROMAIN
Event Code: 1
Message:
Record Number: 25595
Source Name: nview_info
Time Written: 20081217135545.000000+240
Event Type: erreur
User:

Computer Name: ROMAIN
Event Code: 1
Message:
Record Number: 25594
Source Name: nview_info
Time Written: 20081217135545.000000+240
Event Type: erreur
User:

Computer Name: ROMAIN
Event Code: 1
Message:
Record Number: 25593
Source Name: nview_info
Time Written: 20081217135544.000000+240
Event Type: erreur
User:

Computer Name: ROMAIN
Event Code: 1
Message:
Record Number: 25592
Source Name: nview_info
Time Written: 20081217135544.000000+240
Event Type: erreur
User:

Computer Name: ROMAIN
Event Code: 1
Message:
Record Number: 25591
Source Name: nview_info
Time Written: 20081217135544.000000+240
Event Type: erreur
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%systemroot%\system32;%systemroot%;%systemroot%\system32\wbem;C:\Program Files\Fichiers communs\Ulead Systems\MPEG;C:\Program Files\Fichiers communs\Ulead Systems\DVD;C:\Program Files\QuickTime\QTSystem;C:\Program Files\Intel\WiFi\bin
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 15 Stepping 6, GenuineIntel
"PROCESSOR_REVISION"=0f06
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"CLASSPATH"=.;C:\Program Files\Java\jre1.6.0_05\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre1.6.0_05\lib\ext\QTJava.zip
"tvdumpflags"=8

-----------------EOF-----------------

bien ....


des restes d'Avast et de ZoneAlarm ... Plus une infection par support amovible possible ...


dans l'ordre :


1- Télécharge OTMoveIt3 (de Old_Timer) sur ton Bureau.

http://oldtimer.geekstogo.com/OTMoveIt3.exe

! Déconnecte toi et ferme toutes tes applications en cours !

Double clique sur "OTMoveIt3.exe" pour ouvrir le prg .
Puis copie ce qui se trouve en citation ci-dessous,

:Processes
explorer.exe

:Services
ayxdgx74
vsdatant
vsmon

:Reg
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce] 
""=-

:Files
C:\WINDOWS\tasks\Analyse antivirus Avast!.job
C:\WINDOWS\System32\vsdatant.sys 
C:\WINDOWS\system32\ZoneLabs\vsmon.exe 

:Commands
[purity]
[emptytemp]
[start explorer]
[Reboot]

et colle le dans le cadre de gauche de OTMoveIt3 :
Paste Instructions for items to be moved.
(ne touche à rien d'autre !)

-> clique sur MoveIt! pour lancer la suppression.
-> laisse travailler l'outil ...

( Note : ton bureau va disparaitre puis réapparaitre, c'est normal .)

-> une fois finis , un petite fenêtre s'ouvre : clique sur " Yes " .

Ton PC va redémarrer de lui même ...

-->Poste le contenu du rapport qui se trouve dans le dossier "C:\_OTMoveIt\MovedFiles"
( " xxxx2008_xxxxxx.log " où les "x" correspondent au jour et à l'heure de l'utilisation ).

======================

2- Télécharge UsbFix ( de Chiquitine29 et Chimay8 ) sur ton bureau :

http://sd-1.archive-host.com/membres/up/116615172019703188/UsbFix.exe

! Déconnecte toi d'internet et ferme toutes applications en cours !

--> Double-clique sur l' .exe pour lancer l'installation de l'outil ( ne touche pas aux paramètres d'installe ) .

Impératif :
Branche toutes tes unités externes à ton PC (clé USB, DD externe, flash disk, lecteur MP3, etc...) succeptibles d'avoir été infectés, ainsi que les CD et DVD rom dont tu te sers éventuellement le plus souvent ( mais sans les ouvrir ! ) .


--> Double-clique sur le raccourci "UsbFix" qui est sur ton bureau pour lancer l'outil :

* Tape sur 1 ( option " nettoyage " ) puis sur [entrée] et suis les instructions ...

--> Le pc va redémarrer ... laisse travailler l'outil et ne touche à rien ...
( Note : pour les unités externes non utlisées, clique sur "continuer" lors du message d'avertissement )


--> Une fois de retour à ton bureau , attends le message de fin du nettoyage ,
puis appuie sur une touche pour que le rapport "UsbFix.txt" s'affiche .

Fais un copier/coller de son contenu dans ta prochaine réponse pour analyse et attends la suite ....

( Note : le rapport UsbFix.txt est sauvegardé a la racine du disque dur > C:\UsbFix.txt )


PS : Si le Bureau ne réapparait pas, presse Ctrl + Alt + Suppr , Onglet "Fichier"-> "Nouvelle tâche":
tape explorer.exe et valides .

==========================

3- Refais un scan RSIT , poste le nouveau rapport "log.txt" obtenu et attends la suite ...

Voilà le rapport de OTMoveIT3 :

========== PROCESSES ==========
Process explorer.exe killed successfully.
========== SERVICES/DRIVERS ==========
Unable to stop service ayxdgx74 .
Unable to stop service vsdatant .
Service vsmon stopped successfully.
Service vsmon deleted successfully.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\ deleted successfully.
========== FILES ==========
C:\WINDOWS\tasks\Analyse antivirus Avast!.job moved successfully.
File move failed. C:\WINDOWS\System32\vsdatant.sys scheduled to be moved on reboot.
File move failed. C:\WINDOWS\system32\ZoneLabs\vsmon.exe scheduled to be moved on reboot.
========== COMMANDS ==========
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat scheduled to be deleted on reboot.
Local Service Temp folder emptied.
Local Service Temporary Internet Files folder emptied.
Windows Temp folder emptied.
Java cache emptied.
FireFox cache emptied.
Temp folders emptied.
Explorer started successfully

OTMoveIt3 by OldTimer - Version 1.0.7.2 log created on 12242008_145026

Files moved on Reboot...
File move failed. C:\WINDOWS\System32\vsdatant.sys scheduled to be moved on reboot.
File move failed. C:\WINDOWS\system32\ZoneLabs\vsmon.exe scheduled to be moved on reboot.
File move failed. C:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat scheduled to be moved on reboot.
File move failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\index.dat scheduled to be moved on reboot.
File move failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat scheduled to be moved on reboot.

Voilà celui de USBFIX :



-------------- UsbFix V2.413.7 ---------------

* User : L‚onis - ROMAIN
* Outils mis a jours le 24/12/2008 par Chiquitine29 et Chimay8
* Recherche effectuée à 15:00:14 le 24/12/2008
* Windows Xp - Internet Explorer 7.0.5730.13


--------------- [ Processus actifs ] ----------------


C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\logonui.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\system32\DVDRAMSV.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\WiFi\bin\EvtEng.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Fichiers communs\Intel\WirelessCommon\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\UTSCSI.EXE
C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\userinit.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wbem\wmiprvse.exe

--------------- [ Informations lecteurs ] ----------------

C: - Lecteur fixe

F: - Lecteur amovible


--------------- [ Lecteur C ] ----------------

C: - Lecteur fixe


+- Listing des fichiers présents :

[21/03/2006 12:11][--a------] C:\AUTOEXEC.BAT
[10/08/2004 17:00][-rahs----] C:\NTDETECT.COM
[18/11/2006 18:14][--ahs----] C:\boot.ini
[18/11/2006 18:14][--ahs----] C:\index.ini
[24/11/2007 22:27][--a------] C:\Detections.txt
[24/11/2007 22:27][--a------] C:\log.txt
[24/11/2007 22:27][--a------] C:\SWSTAMP.TXT
[24/11/2007 22:27][--a------] C:\TCleaner.txt
[24/11/2007 22:27][--a------] C:\UsbFix.txt
[24/11/2007 22:27][--a------] C:\Win-Files.txt
[21/03/2006 12:11][--a------] C:\CONFIG.SYS
[21/03/2006 12:11][--a------] C:\hiberfil.sys
[21/03/2006 12:11][--a------] C:\IO.SYS
[21/03/2006 12:11][--a------] C:\MSDOS.SYS
[21/03/2006 12:11][--a------] C:\pagefile.sys

--------------- [ Lecteur F ] ----------------

F: - Lecteur amovible


+- Listing des fichiers présents :

[24/12/2008 14:18][--a------] F:\RSIT.exe
[24/12/2008 14:18][--a------] F:\KillBox.exe
[24/12/2008 14:18][--a------] F:\ccsetup215.exe
[24/12/2008 14:18][--a------] F:\ToolsCleaner2.exe
[24/12/2008 14:18][--a------] F:\SafeBootKeyRepair.exe
[24/12/2008 14:18][--a------] F:\HJTInstall.exe
[24/12/2008 14:18][--a------] F:\miranda-im-v0.7.13-unicode.exe
[24/12/2008 14:18][--a------] F:\FindyKill.exe
[19/12/2008 14:23][--a------] F:\adresse mail.txt
[19/12/2008 14:23][--a------] F:\FindyKill.txt

--------------- [ Registre / Startup ] ----------------

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
ctfmon.exe=C:\WINDOWS\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
avgnt="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
COMODO Internet Security="C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
NvMediaCenter=RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
NvCplDaemon=RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

--------------- [ Registre / Mountpoint2 ] ----------------

Supprimé ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{0f50eaa6-b919-11db-8bf7-9d31a364ac43}\Shell\AutoRun\command
Supprimé ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{780a2c97-910f-11db-8bae-0018de08e904}\Shell\AutoRun\command
Supprimé ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{7f868c37-4cdc-11dc-8d02-0018de08e904}\Shell\AutoRun\command
Supprimé ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{d42d0171-9e16-11db-8bc6-0018de08e904}\Shell\AutoRun\command
Supprimé ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{f2425b99-b413-11db-8bf0-0018de08e904}\Shell\AutoRun\command

--------------- [ Nettoyage des disques ] ----------------


--------------- [ Resumé ] ----------------

-> /!\ Le resultat doit etre interprété par un spécialiste /!\

[21/03/2006 12:11][--a------] C:\AUTOEXEC.BAT
[10/08/2004 17:00][-rahs----] C:\NTDETECT.COM
[18/11/2006 18:14][--ahs----] C:\boot.ini
[18/11/2006 18:14][--ahs----] C:\index.ini
[24/12/2008 14:18][--a------] F:\RSIT.exe
[24/12/2008 14:18][--a------] F:\KillBox.exe
[24/12/2008 14:18][--a------] F:\ccsetup215.exe
[24/12/2008 14:18][--a------] F:\ToolsCleaner2.exe
[24/12/2008 14:18][--a------] F:\SafeBootKeyRepair.exe
[24/12/2008 14:18][--a------] F:\HJTInstall.exe
[24/12/2008 14:18][--a------] F:\miranda-im-v0.7.13-unicode.exe
[24/12/2008 14:18][--a------] F:\FindyKill.exe

Joyeuses fetes a tous de la part de T'Chiki et Chimay ...et merci a toutes les personnes ayant,
de pret ou de loin participé a UsbFix durant l annee 2008 , merci a eux !

--------------- ! Fin du rapport ! ----------------

Et le log.txt de RSIT :

Logfile of random's system information tool 1.05 (written by random/random)
Run by Léonis at 2008-12-24 15:03:16
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 39 GB (26%) free of 152 GB
Total RAM: 1022 MB (67% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:03:22, on 24/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\system32\DVDRAMSV.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\WiFi\bin\EvtEng.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Fichiers communs\Intel\WirelessCommon\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\UTSCSI.EXE
C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Launchy\Launchy.exe
C:\WINDOWS\system32\RAMASST.exe
C:\Documents and Settings\Léonis\Bureau\RSIT.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Trend Micro\HijackThis\Léonis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - (no file)
O2 - BHO: (no name) - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - (no file)
O3 - Toolbar: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - (no file)
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: Raccourci vers A faire.lnk = ?
O4 - Global Startup: Launchy.lnk = C:\Program Files\Launchy\Launchy.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O4 - Global Startup: RAMASST.lnk = C:\WINDOWS\system32\RAMASST.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{C765BE1D-C8C4-4610-9DC1-58BC020FADFF}: NameServer = 192.168.0.1
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\WINDOWS\system32\guard32.dll
O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - Unknown owner - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: DVD-RAM_Service - Matsushita Electric Industrial Co., Ltd. - C:\WINDOWS\system32\DVDRAMSV.exe
O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: Windows Live Contrôle parental (fsssvc) - Unknown owner - C:\Program Files\Windows Live\Family Safety\fsssvc.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Fichiers communs\Logitech\Bluetooth\LBTServ.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Fichiers communs\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: Intel® PROSet/Wireless WiFi Service (S24EventMonitor) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\S24EvMon.exe
O23 - Service: SeaPort - Unknown owner - C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (file missing)
O23 - Service: USBest Service Zero (UTSCSI) - USBest - C:\WINDOWS\system32\UTSCSI.EXE
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe (file missing)
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe

Bien ...

mais les reste de ZoneAlarme font de la résistance ...


fais ceci :


A- Impératif : Démarrer en mode sans echec .

/!\ Ne jamais démarrer en mode sans échec via MSCONFIG /!\

Comment aller en Mode sans échec :
1) Redémarre ton ordi .
2) Tapote la touche F8 immédiatement, (F5 sur certains PC) juste après le "Bip" .
3) Tu tapotes jusqu' à l'apparition de l'écran avec les options de démarrage .
4) Choisis la première option : Sans Échec , et valide en tapant sur [Entrée] .
5) Choisis ton compte habituel ( et pas Administrateur ).
attention : pas de connexion possible en mode sans échec , donc copie ou imprime bien la manipe pour éviter les erreurs ...


Double clique sur "OTMoveIt3.exe" pour ouvrir le prg .
Puis copie ce qui se trouve en citation ci-dessous,

:Processes
explorer.exe

:Services
vsmon
TrueVector Internet Monitor
vsdatant

:Reg

:Files
C:\WINDOWS\system32\ZoneLabs\vsmon.exe 
C:\WINDOWS\system32\ZoneLabs
C:\WINDOWS\System32\vsdatant.sys
C:\WINDOWS\Internet Logs 

:Commands
[emptytemp]
[start explorer]
[Reboot]

et colle le dans le cadre de gauche de OTMoveIt3 :
Paste Instructions for items to be moved.
(ne touche à rien d'autre !)

-> clique sur MoveIt! pour lancer la suppression.
-> laisse travailler l'outil ...

( Note : ton bureau va disparaitre puis réapparaitre, c'est normal .)

-> une fois finis , un petite fenêtre s'ouvre : clique sur " Yes " .

Ton PC va redémarrer de lui même ...

-->Poste le contenu du rapport qui se trouve dans le dossier "C:\_OTMoveIt\MovedFiles"
( " xxxx2008_xxxxxx.log " où les "x" correspondent au jour et à l'heure de l'utilisation ).



B - Refais un scan RSIT ( en mode normal ) et poste le nouveau log.txt obtenu pour contrôle ....

Voilà le log de OTMoveIT3 :

========== PROCESSES ==========
Process explorer.exe killed successfully.
========== SERVICES/DRIVERS ==========
Service vsmon stopped successfully.
Service vsmon deleted successfully.
Unable to stop service TrueVector Internet Monitor .
Service vsdatant stopped successfully.
Service vsdatant deleted successfully.
========== REGISTRY ==========
========== FILES ==========
C:\WINDOWS\system32\ZoneLabs\vsmon.exe moved successfully.
C:\WINDOWS\system32\ZoneLabs\Updates moved successfully.
C:\WINDOWS\system32\ZoneLabs\streamapi\imslsp moved successfully.
C:\WINDOWS\system32\ZoneLabs\streamapi\httpblocker moved successfully.
C:\WINDOWS\system32\ZoneLabs\streamapi moved successfully.
C:\WINDOWS\system32\ZoneLabs\plugins\vsmon_plugin moved successfully.
C:\WINDOWS\system32\ZoneLabs\plugins\rpc_server moved successfully.
C:\WINDOWS\system32\ZoneLabs\plugins moved successfully.
C:\WINDOWS\system32\ZoneLabs\lib\pyd moved successfully.
C:\WINDOWS\system32\ZoneLabs\lib moved successfully.
C:\WINDOWS\system32\ZoneLabs\avsys\instdrivers\x32 moved successfully.
C:\WINDOWS\system32\ZoneLabs\avsys\instdrivers\w2kxp32 moved successfully.
C:\WINDOWS\system32\ZoneLabs\avsys\instdrivers moved successfully.
C:\WINDOWS\system32\ZoneLabs\avsys\bases moved successfully.
C:\WINDOWS\system32\ZoneLabs\avsys moved successfully.
C:\WINDOWS\system32\ZoneLabs moved successfully.
C:\WINDOWS\System32\vsdatant.sys moved successfully.
C:\WINDOWS\Internet Logs moved successfully.
========== COMMANDS ==========
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
Local Service Temp folder emptied.
Local Service Temporary Internet Files folder emptied.
Windows Temp folder emptied.
Java cache emptied.
FireFox cache emptied.
Temp folders emptied.
Explorer started successfully

OTMoveIt3 by OldTimer - Version 1.0.7.2 log created on 12242008_153922

Le log de RSIT :

Logfile of random's system information tool 1.05 (written by random/random)
Run by Léonis at 2008-12-24 15:43:51
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 39 GB (26%) free of 152 GB
Total RAM: 1022 MB (67% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:43:56, on 24/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\DVDRAMSV.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\WiFi\bin\EvtEng.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Fichiers communs\Intel\WirelessCommon\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\UTSCSI.EXE
C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Launchy\Launchy.exe
C:\WINDOWS\system32\RAMASST.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Documents and Settings\Léonis\Bureau\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\Léonis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - (no file)
O2 - BHO: (no name) - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - (no file)
O3 - Toolbar: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - (no file)
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: Raccourci vers A faire.lnk = ?
O4 - Global Startup: Launchy.lnk = C:\Program Files\Launchy\Launchy.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O4 - Global Startup: RAMASST.lnk = C:\WINDOWS\system32\RAMASST.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{C765BE1D-C8C4-4610-9DC1-58BC020FADFF}: NameServer = 192.168.0.1
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\WINDOWS\system32\guard32.dll
O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - Unknown owner - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: DVD-RAM_Service - Matsushita Electric Industrial Co., Ltd. - C:\WINDOWS\system32\DVDRAMSV.exe
O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: Windows Live Contrôle parental (fsssvc) - Unknown owner - C:\Program Files\Windows Live\Family Safety\fsssvc.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Fichiers communs\Logitech\Bluetooth\LBTServ.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Fichiers communs\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: Intel® PROSet/Wireless WiFi Service (S24EventMonitor) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\S24EvMon.exe
O23 - Service: SeaPort - Unknown owner - C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (file missing)
O23 - Service: USBest Service Zero (UTSCSI) - USBest - C:\WINDOWS\system32\UTSCSI.EXE
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe (file missing)
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe