High-Tech Santé Médecine Droit-Finances

Mettre

une vidéo

dans sa PSP

Rechercher : dans
Par :

Google devient zood search

Dernière réponse le 18 fév 2009 à 17:18:51 moeske, le 18 fév 2009 à 14:13:45 
 Signaler ce message aux modérateurs

Bonjour,
au secours c'est la catastrophe:lorsque je veux travailler avec google je suis redirigée vers zood search Que faire je ne m'en sort plus. Lapage d'accueil est sur google

Configuration: Windows Vista
Internet Explorer 7.0

Meilleures réponses pour « google devient zood search » dans :
Google - rechercher des livres Voir
Installer Google Earth sous Ubuntu VoirDeux méthodes pour installer Google Earth 1.En utilisant le fichier executable de Google 2.En utilisant les dépôts Médibuntu 1. Avec le fichier .bin de Google 1.1Installer Google Earth 1.1.1. Téléchargez Google Earth Téléchargez (un peu...
Google en arabe VoirPour accéder à Google arabe, il suffit de taper le nom de domaine, suivi du suffixe du pays, par exemple : http://www.google.com.sa/ Ou encore : http://www.google.com/intl/ar/ Voici, en bas de page, la liste de tous les Google mondiaux...
Télécharger OpenSearchFox VoirA la base, l'interface de Firefox ne comprend aucun moteur de recherche dans la barre des tâches. Ce sont les fournisseurs tels que Google et Yahoo Search qui fournissent des barres gratuites à installer. OpenSearchFox est une extension du navigateur...
Télécharger Google Earth Voir
Télécharger Google Toolbar pour Internet Explorer VoirLa barre d'outils Google permet : d'afficher le pagerank des pages visitées d'ajouter à vos favoris les pages que vous visitez fréquemment pour y accéder directement. de rendre vos recherches plus efficaces grâce aux suggestions...
Posez votre question Répondre

1

ric025, le 18 fév 2009 à 14:38:40

SAlut!

Poste un rapport Hijackthis afin de cibler l'infection, si infection il y a:

Télécharge HIJACKTHIS

Tout est expliqué pour bien l'installer et savoir l'utiliser.

Comment copier/coller le rapport:

Quand tu as le rapport à l'écran, tu fais ctrl A pour "sélectionner tout" puis ctrl C pour "copier".

Ensuite tu viens sur le forum pour me répondre et tu fais ctrl V pour "coller" le rapport.

Une explication des raccourcis clavier sont illustrés sur ce site web (merci à Geoffrey5) :

http://forum-aide-contre-virus.be/divers.html

A++ ;)

   
Répondre à ric025

2

moeske, le 18 fév 2009 à 14:44:51

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:44:40, on 18-2-2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Norman\Npm\Bin\Elogsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\Ati2evxx.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Norman\Npm\Bin\Zanda.exe
C:\Program Files\Norman\npm\bin\nvoy.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
C:\Program Files\Norman\Npm\bin\NVCSCHED.EXE
C:\Program Files\Norman\Npm\bin\NJEEVES.EXE
C:\Program Files\Norman\nse\bin\NSESVC.EXE
C:\Windows\system32\WUDFHost.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\Norman\Nvc\bin\nvcoas.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\Ati2evxx.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Windows\System32\nvraidservice.exe
C:\Windows\mondrv411.exe
C:\Program Files\Norman\Npm\Bin\Zlh.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Users\ma\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Norman\Nvc\Bin\Nip.exe
C:\Program Files\Norman\Nvc\Bin\cclaw.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Users\ma\AppData\Local\Google\Chrome\Application\chrome.e­xe
C:\Users\ma\AppData\Local\Google\Chrome\Application\chrome.e­xe
C:\Program Files\Internet Explorer\IEUser.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Macromed\Flash\FlashUtil9f.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://nl.intl.acer.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://nl.intl.acer.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=localhost:7070
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - (no file)
O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [Apanel] C:\ACERSW\config\SetApanel.cmd
O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe
O4 - HKLM\..\Run: [NVRaidService] C:\Windows\system32\nvraidservice.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [mondrv411] C:\Windows\mondrv411.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Norman ZANDA] "C:\Program Files\Norman\Npm\Bin\ZLH.EXE" /LOAD /SPLASH
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [Google Update] "C:\Users\tjo\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [NTI Scheduler] "C:\Program Files\Common Files\NewTech Infosystems\Scheduler\Schdlr32.exe" -s
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-1550018216-334285277-1096051384-1010\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'ma')
O4 - HKUS\S-1-5-18\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe (User 'SYSTEEM')
O4 - HKUS\.DEFAULT\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe (User 'Default user')
O4 - Global Startup: Empowering Technology Launcher.lnk = C:\Acer\Empowering Technology\eAPLauncher.exe
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O13 - Gopher Prefix:
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/pr01/resources/VistaMSNPUpldfr-be.cab
O16 - DPF: {54B52E52-8000-4413-BD67-FC7FE24B59F2} (EARTPatchX Class) - http://files.ea.com/downloads/rtpatch/v2/EARTPX.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game01.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O18 - Filter hijack: text/html - {0EB00690-8FA1-11D3-96C7-829E3EA50C29} - C:\Windows\ftpsconfig.dll
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe
O23 - Service: Norman eLogger service 6 (eLoggerSvc6) - Norman ASA - C:\Program Files\Norman\Npm\Bin\Elogsvc.exe
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: Norman NJeeves - Norman ASA - C:\Program Files\Norman\Npm\bin\NJEEVES.EXE
O23 - Service: Norman ZANDA - Norman ASA - C:\Program Files\Norman\Npm\Bin\Zanda.exe
O23 - Service: Norman Scanner Engine Service (nsesvc) - Norman ASA - C:\Program Files\Norman\nse\bin\NSESVC.EXE
O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\Program Files\Norman\Nvc\bin\nvcoas.exe
O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman ASA - C:\Program Files\Norman\Npm\bin\NVCSCHED.EXE
O23 - Service: Norman's Very Own supplY of resources (NVOY) - Norman ASA - C:\Program Files\Norman\npm\bin\nvoy.exe
End of file - 10441 bytes

   
Répondre à moeske

3

ric025, le 18 fév 2009 à 14:49:10

Est-ce que tu utilises Boonty Games? Je te laisse apprécier leur politique: 


"Il se peut que nous partageons aussi des informations payantes avec des tiers
qui fournissent ds services payants et partage des données regroupées montrant le type
et le nombre de jeux videos que vous téléchargez, votre age, votre sexe, vos occupations,
niveau d'éducation, localité géographique, données sur l'équipement de votre ordinateur,
internet et intérêts pour les jeux videos, activités et entrainement des jeux édités.
De plus, nous partageons les adresses email avec des tiers fournisseurs de compte mails
qui nous assistent en envoyant nos mails a de nombreux clients en même temps..."


===========

Maintenant, libre à toi. Si tu veux les virer:

Ad-Remover (par Cyril du 17 / C_XX):

Télécharge et enregistre le fichier d'installation sur ton bureau :

http://sd-1.archive-host.com/membres/up/16506160323759868/AD-R.exe

Double clique sur le programme d'installation , et installe-le dans son emplacement par défaut. ( le bureau )

Ouvre le dossier Ad-remover qui vient d'apparaître sur ton bureau par double-clic

Au menu principal tape "A" puis "Entrée" pour valider.

Patiente le temps du scan. A la fin, il te demandera de presser sur une touche pour faire apparaître le rapport. Fais-le.

Poste le dans ta prochaine réponse par copié/collé.

( le rapport est sauvegardé aussi sous C:\Ad-report.log )

(CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

Note :

Process.exe est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

   
Répondre à ric025

4

moeske, le 18 fév 2009 à 15:04:58

Je n'arrive pas à ouvrir le document mais j'ai trouvée sur le

AD-REMOVER 1.1.1.3 BY C_XX |
|___ _______________________|
\|
(\_/)
(^.^)
(")_(")
----------------------------------------------------------------------------------------
|+ +|
| Cmdow.exe By Commandline - http://www.Commandline.co.uk/cmdow/ |
| Grep.exe By ? - ? |
| IsAdmin.exe By Bill Stewart - ? |
| Nircmd.exe By Nirsoft - http://www.nirsoft.net/ |
| Process.exe By Craig Peacock - http://beyondlogic.org/ |
| Sed.exe By ? - ? |
| SWSC.exe By Steelwerx - http://www.xs4all.nl/~fstaal01/swsc-us.html |
| SwReg.exe By Steelwerx - http://www.xs4all.nl/~fstaal01/swreg-us.html |
| Find.exe By Microsoft Corporation - http://www.microsoft.com/ |
| Findstr.exe By Microsoft Corporation - http://www.microsoft.com/ |
| Reg.exe By Microsoft Corporation - http://www.microsoft.com/ |
|+ +|
----------------------------------------------------------------------------------------

CHANGELOG - ADWARES REMOVED
___________________________

- Bingo Day
- Boonty
- BoontyGames
- Casino DelRio
- Casino Elegance
- Casino Lux
- Casino Nederland
- Casino Tropez
- Casino-On-Net
- Casino.com
- EmpirePoker
- EoCalendar
- EoClock
- EoComputer
- EoDesk3d
- EoMail
- EoMap
- EoNet
- EoPhoto
- EoProgrammeTele
- EoRss
- EoSudoku
- EoTraduction
- EoWeather
- EoWiki
- Europa Casino
- Everest Casino
- Everest Poker
- Flamingo Club Casino
- Fun Web Products
- Golden Casino
- Golden Palace Casino
- Golden Riviera Casino
- GV Luxe
- It's TV
- MySpeedyAlert
- MyTotalSearch
- MyGlobalSearch
- MyQuickSearch
- MySearch
- MyWay
- My Way Speedbar
- MyWebSearch
- Pacific Poker
- PartyPoker
- Phoenician Casino
- Poker Mile
- Poker 770

   
Répondre à moeske

5

ric025, le 18 fév 2009 à 15:08:31

Non, ce n'est pas ça.

Fais ceci:

Désactive le contrôle des comptes utilisateurs (tu le réactiveras après ta désinfection):

==> Va dans "Démarrer" puis Panneau de configuration.
==> Double Clique sur l'icône Comptes d'utilisateurs et sur Activer ou désactiver le contrôle des comptes d'utilisateurs.
==> Clique sur Continuer.
==> Décoche la case Utiliser le contrôle des comptes d'utilisateurs pour vous aider à protéger votre ordinateur.
==> Valide par OK et redémarre.

===========

Relance Ad-Remover. Et suis bien ma procédure.

A+

   
Répondre à ric025

6

moeske, le 18 fév 2009 à 15:24:32

Ca reste le même je ne sais toujours pas ouvrir

   
Répondre à moeske

7

ric025, le 18 fév 2009 à 15:31:15

Je comprends pas où tu bloques...

   
Répondre à ric025

8

moeske, le 18 fév 2009 à 15:34:36

Quand le scan est termine je dois appuyer sur une touche ensuite s'ouvre un doc vide,c ecrit que le contenu ne s'est pas s'afficher,cliquer sur oui pour avoir un nouveau doc vide

   
Répondre à moeske

9

ric025, le 18 fév 2009 à 15:36:38

Regarde sur ton disque dur. Ici: C:\Ad-report.log

Tu n'as pas de rapport?

===========

Sinon, fais ceci:

! Déconnecte-toi et ferme toute application en cours !

Relance "Ad-remover" : au menu principal choisis l'option "B" .

Coche à l'écran de sélection :


1. Suppression Boonty/BoontyGames
2. Suppression Eorezo
3. Suppression Everest Poker
4. Suppression Funwebproduct/MyWay/MyWebsearch
5. Suppression It's TV
6. Suppression Sweetim


Tape le chiffre correspondant à la suppression demandée et valide par ENTREE pour le cocher.

Puis choisis "S" , le programme va travailler,

Poste le rapport qui apparait à la fin.

( le rapport est sauvegardé aussi sous C:\Ad-report(date).log )

/!\ Si le Bureau ne réapparait pas presse Ctrl +Alt +Suppr , Onglet "Fichier" , "Nouvelle tâche" , tape explorer.exe et valide

   
Répondre à ric025

10

ric025, le 18 fév 2009 à 15:38:40

PS: Tu l'as bien installé sur le bureau?

   
Répondre à ric025

11

moeske, le 18 fév 2009 à 15:39:31

Oui

   
Répondre à moeske

13

moeske, le 18 fév 2009 à 15:41:02

Tu dois pêut etre savoir que je travaille avec windows vista et google chrome

   
Répondre à moeske

12

ric025, le 18 fév 2009 à 15:40:26

Bizarre chez moi il marche.

Tente la suppression.

A+

   
Répondre à ric025

14

moeske, le 18 fév 2009 à 15:41:45

Ok j'essaie

   
Répondre à moeske

15

moeske, le 18 fév 2009 à 15:43:57

C fait

   
Répondre à moeske

16

ric025, le 18 fév 2009 à 15:44:43

Tu as eu un rapport cette fois?

   
Répondre à ric025

17

moeske, le 18 fév 2009 à 15:52:24

C'est ecrit c:/ad-report-scan-wo18.02-2 log ne sait pas etre ouvert

   
Répondre à moeske

19

moeske, le 18 fév 2009 à 15:58:42

Et si je desinstalle google et le reinstalle ensuite cela aiderai peut etre? Comme je ne sui pas une pro c pas évident

   
Répondre à moeske

18

ric025, le 18 fév 2009 à 15:54:49

Envoie un nouveau rapport hijackthis stp.

   
Répondre à ric025

20

moeske, le 18 fév 2009 à 16:00:21

Ok merci pour ta patience

   
Répondre à moeske

21

ric025, le 18 fév 2009 à 16:00:31

Non, envoie déjà le rapport stp.

   
Répondre à ric025

22

moeske, le 18 fév 2009 à 16:02:10

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:01:36, on 18-2-2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\mobsync.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Windows\System32\nvraidservice.exe
C:\Windows\mondrv411.exe
C:\Program Files\Norman\Npm\Bin\Zlh.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Users\ma\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Windows\ehome\ehmsas.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Norman\Nvc\Bin\Nip.exe
C:\Program Files\Norman\Nvc\Bin\cclaw.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\ntvdm.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://nl.intl.acer.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://nl.intl.acer.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - (no file)
O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [Apanel] C:\ACERSW\config\SetApanel.cmd
O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe
O4 - HKLM\..\Run: [NVRaidService] C:\Windows\system32\nvraidservice.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [mondrv411] C:\Windows\mondrv411.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Norman ZANDA] "C:\Program Files\Norman\Npm\Bin\ZLH.EXE" /LOAD /SPLASH
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Google Update] "C:\Users\ma\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKUS\S-1-5-18\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe (User 'SYSTEEM')
O4 - HKUS\.DEFAULT\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe (User 'Default user')
O4 - Global Startup: Empowering Technology Launcher.lnk = C:\Acer\Empowering Technology\eAPLauncher.exe
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O13 - Gopher Prefix:
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/pr01/resources/VistaMSNPUpldfr-be.cab
O16 - DPF: {54B52E52-8000-4413-BD67-FC7FE24B59F2} (EARTPatchX Class) - http://files.ea.com/downloads/rtpatch/v2/EARTPX.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game01.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O18 - Filter hijack: text/html - {0EB00690-8FA1-11D3-96C7-829E3EA50C29} - C:\Windows\ftpsconfig.dll
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe
O23 - Service: Norman eLogger service 6 (eLoggerSvc6) - Norman ASA - C:\Program Files\Norman\Npm\Bin\Elogsvc.exe
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: Norman NJeeves - Norman ASA - C:\Program Files\Norman\Npm\bin\NJEEVES.EXE
O23 - Service: Norman ZANDA - Norman ASA - C:\Program Files\Norman\Npm\Bin\Zanda.exe
O23 - Service: Norman Scanner Engine Service (nsesvc) - Norman ASA - C:\Program Files\Norman\nse\bin\NSESVC.EXE
O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\Program Files\Norman\Nvc\bin\nvcoas.exe
O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman ASA - C:\Program Files\Norman\Npm\bin\NVCSCHED.EXE
O23 - Service: Norman's Very Own supplY of resources (NVOY) - Norman ASA - C:\Program Files\Norman\npm\bin\nvoy.exe
End of file - 8067 bytes

   
Répondre à moeske

23

ric025, le 18 fév 2009 à 16:09:11

* Télécharge OtmoveIT (de Old_Timer) sur ton Bureau

http://oldtimer.geekstogo.com/OTMoveIt3.exe

* Double-clique sur OTMoveIt.exe pour le lancer.

* Assure toi que la case Unregister Dll's and Ocx's soit bien cochée.

* Copie la liste qui se trouve en gras dans la citation ci-dessous et colle-la dans le cadre de gauche de OTMoveIt sous Paste List of Files/Folders to move.


-----------------------------

:processes
explorer.exe

:files
C:\Program Files\Common Files\BOONTY Shared\

:Commands
[purity]
[emptytemp]
[start explorer]
[Reboot]

-----------------------------


* Clique sur MoveIt! pour lancer la suppression.

* Le résultat apparaitra dans le cadre "Results".

* Clique sur Exit pour fermer.

* Poste le rapport situé dans C:\_OTMoveIt\MovedFiles.

* Il te sera peut-être demandé de redémarrer le pc pour achever la suppression. Si c'est le cas accepte par Yes.

Ensuite redémarre le pc et refais un nouveau rapport hijackthis stp que tu me posteras.

A++ ;)

   
Répondre à ric025

24

moeske, le 18 fév 2009 à 16:17:04

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:14:51, on 18-2-2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Windows\System32\nvraidservice.exe
C:\Windows\mondrv411.exe
C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe
C:\Program Files\Norman\Npm\Bin\Zlh.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Users\ma\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Windows\ehome\ehmsas.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Norman\Nvc\Bin\Nip.exe
C:\Program Files\Norman\Nvc\Bin\cclaw.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://nl.intl.acer.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://nl.intl.acer.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - (no file)
O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [Apanel] C:\ACERSW\config\SetApanel.cmd
O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe
O4 - HKLM\..\Run: [NVRaidService] C:\Windows\system32\nvraidservice.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [mondrv411] C:\Windows\mondrv411.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Norman ZANDA] "C:\Program Files\Norman\Npm\Bin\ZLH.EXE" /LOAD /SPLASH
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Google Update] "C:\Users\ma\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKUS\S-1-5-18\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe (User 'SYSTEEM')
O4 - HKUS\.DEFAULT\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe (User 'Default user')
O4 - Global Startup: Empowering Technology Launcher.lnk = C:\Acer\Empowering Technology\eAPLauncher.exe
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O13 - Gopher Prefix:
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/pr01/resources/VistaMSNPUpldfr-be.cab
O16 - DPF: {54B52E52-8000-4413-BD67-FC7FE24B59F2} (EARTPatchX Class) - http://files.ea.com/downloads/rtpatch/v2/EARTPX.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game01.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O18 - Filter hijack: text/html - {0EB00690-8FA1-11D3-96C7-829E3EA50C29} - C:\Windows\ftpsconfig.dll
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe
O23 - Service: Norman eLogger service 6 (eLoggerSvc6) - Norman ASA - C:\Program Files\Norman\Npm\Bin\Elogsvc.exe
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: Norman NJeeves - Norman ASA - C:\Program Files\Norman\Npm\bin\NJEEVES.EXE
O23 - Service: Norman ZANDA - Norman ASA - C:\Program Files\Norman\Npm\Bin\Zanda.exe
O23 - Service: Norman Scanner Engine Service (nsesvc) - Norman ASA - C:\Program Files\Norman\nse\bin\NSESVC.EXE
O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\Program Files\Norman\Nvc\bin\nvcoas.exe
O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman ASA - C:\Program Files\Norman\Npm\bin\NVCSCHED.EXE
O23 - Service: Norman's Very Own supplY of resources (NVOY) - Norman ASA - C:\Program Files\Norman\npm\bin\nvoy.exe
End of file - 7900 bytes

   
Répondre à moeske

25

ric025, le 18 fév 2009 à 16:29:26

Tu as le rapport OtMoveIT?

   
Répondre à ric025

26

moeske, le 18 fév 2009 à 16:35:09

========== PROCESSES ==========
Process explorer.exe killed successfully.
========== FILES ==========
Folder move failed. C:\Program Files\Common Files\BOONTY Shared\Service scheduled to be moved on reboot.
Folder move failed. C:\Program Files\Common Files\BOONTY Shared scheduled to be moved on reboot.
========== COMMANDS ==========
File delete failed. C:\Users\ma\AppData\Local\Temp\~DF190.tmp scheduled to be deleted on reboot.
File delete failed. C:\Users\ma\AppData\Local\Temp\~DF5131.tmp scheduled to be deleted on reboot.
File delete failed. C:\Users\ma\AppData\Local\Temp\~DF5141.tmp scheduled to be deleted on reboot.
File delete failed. C:\Users\ma\AppData\Local\Temp\~DFBD82.tmp scheduled to be deleted on reboot.
File delete failed. C:\Users\ma\AppData\Local\Temp\~DFBD9A.tmp scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
Local Service Temp folder emptied.
Local Service Temporary Internet Files folder emptied.
Windows Temp folder emptied.
Temp folders emptied.
Explorer started successfully

OTMoveIt3 by OldTimer - Version 1.0.8.0 log created on 02182009_163338

   
Répondre à moeske

27

ric025, le 18 fév 2009 à 16:40:13

Ok! Bien.

Redémarre ton pc, car: moved on reboot. (supprimer au redémarrage).

==================

Puis fais ce petit nettoyage, fenêtres internet fermées.

Télécharge CCleaner, version Slim, sans toolbar:

CCLEANER

Va dans "Options">>"Avancé". Décoche la première ligne.

Va dans la section "Nettoyeur". Lance l'analyse. La liste créée, lance le nettoyage deux fois de suite afin d'obtenir 0bytes supprimé!

Ensuite dans "Registre", lance une recherche des erreurs. La liste créée, fais-les réparer.

/!\ A ce moment CCleaner te demande normalement de sauvegarder le registre, fais-le. /!\

Recommence ensuite le cycle Recherche/Réparation des erreurs jusqu'à n'en trouver aucune lors de la recherche.

===================

Comment va le pc? Précise tes problèmes.

A++

   
Répondre à ric025

28

moeske, le 18 fév 2009 à 16:55:57

Toujours le même probleme lorsque je me trouve sur la page google et lance une recherche ,je suis redirigée sur zood search

   
Répondre à moeske

29

ric025, le 18 fév 2009 à 16:57:00

Télécharge LopS&D (de eric_71)

http://eric.71.mespages.googlepages.com/LopSD.exe

Enregistre le fichier sur ton bureau.
Lance l’installation.
Une fois le programme lancé tape F pour être en Français.
Puis exécute l’option 1, Recherche.
Un rapport sera généré.
Poste son intégralité ici.

Note :
Dans le cas où le rapport ne s’ouvre pas, ce dernier se trouve sur C:\LopR.txt

Petit tutorial si besoin: http://www.malekal.com/tutorial_Lop_SD.php

   
Répondre à ric025

30

moeske, le 18 fév 2009 à 17:04:55

-- Changelog Lop S&D --


==================================
Maj/Upd : 19/12/2008 ( v 4.2.5-0 )
==================================

# Switch /w (WhiteList) [Thanks to Rorschach112]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\NetPumper.exe]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Bags regs"=-
"style cool 2 city"=-
"GreatLog"=-

%Temp%\LightCertGen.exe
%Temp%\sta*.exe

Folder : AMOK WAIT COMP
Folder : AXIS DVD BOLT
Folder : bib dash 16 this
Folder : Blue Soft Mode Dog
Folder : boob dash memo
Folder : bore show bike
Folder : Browseblahamok
Folder : Browse1
Folder : Byte way data
Folder : CLOCKFREE
Folder : data blue open mail
Folder : DEAF TYPE SECT
Folder : default mode base
Folder : dog grid help
Folder : dupe two way
Folder : Fast knob warn
Folder : find tool dash meal
Folder : flap ooze seek pop
Folder : FOURTHIRDBOWSBOLD
Folder : fragupheckcurb
Folder : Funk creative amen
Folder : glue chic tick file
Folder : gpl blue
Folder : GRAMDALESCR
Folder : GreyRealHold
Folder : GreyThatBook
Folder : Grey win flag 01
Folder : GRIDMEETCOMP
Folder : hopeamoklist
Folder : Idol way city
Folder : Inter Knob Barb Jugs
Folder : internet settings clock blue
Folder : itch rdr
Folder : Jump Poll Poke Mp3
Folder : lessprocnurb
Folder : Lovethecoolhide
Folder : meet tray default settings
Folder : Meal ace base bone
Folder : memodownloadthe
Folder : Meowsupportroam
Folder : META FLAG POP
Folder : New Meet Memo
Folder : Once Dog Dupe Amok
Folder : Okay Way Sixth Exit
Folder : PEAK START ROAD
Folder : phone 16 ping
Folder : Ping Sign Byte Tool
Folder : proc log poke
Folder : Real4new
Folder : ref mess dash
Folder : Road Inter Dog Cool
Folder : safe tray tons
Folder : scrfast
Folder : size bin dale
Folder : slowlist
Folder : Tray chin multi
Folder : TrustDeleteBaitSixth
Folder : type send city
Folder : Up itch time 4
Folder : up 16 program 64
Folder : vga1user
Folder : Way real 01 dent
Folder : 2 Close
Folder : 4 flag

==================================
Maj/Upd : 30/10/2008 ( v 4.2.4-9 )
==================================

Folder : Balm Seek Media Store
Folder : BoldSlowBatBoob
Folder : Bolt extra skip
Folder : Drivebendbows
Folder : enc bait
Folder : enc jugs great user
Folder : FIND ABOUT LOGO
Folder : flagflap
Folder : HECKMEALJUMP
Folder : junkgramfour
Folder : PURESIGNNOUNFUNK
Folder : SETUP BEND FIRST 01
Floder : Shimactiveacid
Folder : Soft draw bold remote
Folder : thunk name
Folder : 16itchball

==================================
Maj/Upd : 27/10/2008 ( v 4.2.4-8 )
==================================

Folder : Gpl ooze view load
Folder : LOG LOVE BIAS
Folder : Pile Bait Multi
Folder : send find meet
Folder : StopActiveTons
Folder : 01 TRANS ACTIVE BALM

==================================
Maj/Upd : 23/10/2008 ( v 4.2.4-7 )
==================================

Folder : Axis Body Funk
Folder : Chin Bold Balm
Folder : Dent draw pure lies
Folder : DOG BIKE MEOW
Folder : manager exit list active
Folder : Owns Intra Time Log
Folder : settingsbytewindow
Folder : way global dash

==================================
Maj/Upd : 20/10/2008 ( v 4.2.4-6 )
==================================

# KoobFace detection

Folder : Aim download bolt bags
Folder : ArmyFunkWarn
Folder : BLUE LINK
Folder : bore inter bags this
Folder : cdrom curb cast
Folder : Citysurfhelp
Folder : Coolmpegencbits
Folder : DATA PROXY WAY FACE
Folder : Debug manager soft the
Folder : Drive Each
Folder : Drive flap
Folder : DRIVE STOP CORN
Folder : DRAW GLOBAL
Folder : Else Atom
Folder : extra admin acid
Folder : flap aim site
Folder : FLAPFOUR
Folder : flaw audio error data
Folder : FlawRect
Folder : Ford Proc Heart
Folder : freemore
Folder : funk bows wave
Folder : Glue comp noun
Folder : htm safe okay
Folder : Idol Mags
Folder : inside bits skip 16
Folder : internet phone mapi
Folder : itchtestless
Folder : math frag proc
Folder : mediacdromhole
Folder : Nurb live mags
Folder : PeakPlanLogo
Folder : platformsave
Folder : Platform soap settings
Folder : ProgramDateBashLogo
Folder : ProgramDeleteTime
Folder : Program meal settings
Folder : save time iso data
Folder : settings ford base
Folder : Soap lies love
Folder : theupbird
Folder : Tons balm hope 2
Folder : Tray soap
Folder : Trust dumb
Folder : Web Meta Send Glue
Folder : 1 SIGN 01

==================================
Maj/Upd : 02/10/2008 ( v 4.2.4-5 )
==================================

Folder : Admin Dart
Folder : amok user hope
Folder : BASE BOLD MAGS
Folder : bolt eq comp
Folder : Bold Grey Spam Peak
Folder : chicregs
Folder : chinblehbind
Folder : CORN GRAM DENT
Folder : Corn Mess Vga
Folder : Debugbalmcopy
Folder : Find Hole Bags
Folder : flapblahremote
Folder : flawmultiless
Folder : funk flag peak
Folder : inside readme lite
Folder : Inside web
Folder : Intra bike roam road
Folder : KNOBDENT
Folder : LocksDeafByte
Folder : lovefourjunk
Folder : math clock joy
Folder : Mess Blue Poke Slow
Folder : Once obj sixth
Folder : OptionOnceBold
Folder : PEAK DART PILE
Folder : PEAK RECT MIX
Folder : Poke admin tons bike
Folder : Programaxis
Folder : rule about cdrom thunk
Folder : Show 01
Folder : test bird meet
Folder : thatrealhole
Folder : ThunkDeafTime
Folder : Trayholesafe
Folder : UP CHIN EXIT TYPE
Folder : 32 Math Corn

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"part mags"=-

==================================
Maj/Upd : 19/09/2008 ( v 4.2.4-4 )
==================================

Folder : BASHELSEMETA
Folder : binddeadless
Folder : Bows Body Bash
Folder : chin window mail
Folder : dashshowsafe
Folder : find flaw media
Folder : Funk Thunk More
Folder : Gram new
Folder : heck nurb trans joy
Folder : Knob burn platform love
Folder : mail grey balm inter
Folder : Meal Grey Test Lies
Folder : mediaknobbowsmapi
Folder : Meow stop four mail
Folder : mp3 settings soap meal
Folder : Multi dale lies delete
Folder : objrdrpoke
Folder : play gpl wait idol
Folder : regs delete fast
Folder : SCR COPY DENT
Folder : Test Hole Time
Folder : Titledeletewipe
Folder : TOOLDEFYMEAL
Folder : TOOL TRAY WMA
Folder : transdent
Folder : Warn Mfcd Trust Download

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Base frag grid bows"=-

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"sizedrv"=-

==================================
Maj/Upd : 14/09/2008 ( v 4.2.4-3 )
==================================

Folder : Aim face support
Folder : BAITTICKACTIVE
Folder : Bold Play Media Byte
Folder : Bows obj warn
Folder : DELETE LOCKS MEDIA
Folder : ELSE LOUD ACID PART
Folder : Four Bleh Flaw Once
Folder : Glue File Five
Folder : Grim does
Folder : Iso Anti Test
Folder : itch idol
Folder : LESSTHATBORE
Folder : Mfcd Comp
Folder : open wait readme
Folder : real keep mail ping
Folder : THUNKSECOND
Folder : WEB THUNK JUGS
Folder : 16 seek
Folder : 64Thunk

==================================
Maj/Upd : 08/09/2008 ( v 4.2.4-2 )
==================================

Folder : bias grim user enc
Folder : byte loud style cool
Folder : drv atom pile
Folder : Else Ball
Folder : flap axis
Folder : List bias eggs 1
Folder : Obj bows dumb

==================================
Maj/Upd : 06/09/2008 ( v 4.2.4-1 )
==================================

Folder : aciddoesreal
Folder : active move body safe
Folder : bore draw ping
Folder : chin corn owns
Folder : eggshidebind
Folder : fastplatformreal
Folder : Idle bind itch live
Folder : Internet mpeg fork
Folder : knobfragdash
Folder : Iso sign frag chic
Folder : Lies shim upload curb
Folder : one draw support
Folder : phone move locks
Folder : Stop Great
Folder : THUNK BAIT

==================================
Maj/Upd : 04/09/2008 ( v 4.2.4-0 )
==================================

# New language : Finnish (Thanks to Shaba for translations)

Folder : atomsite
Folder : Creativeview
Folder : phoneburn

==================================
Maj/Upd : 02/09/2008 ( v 4.2.3-9 )
==================================

# New language : Dutch (Thanks to Thunder for translations)

Folder : activelicenseintranew
Folder : BASE GREY KIND POKE
Folder : bash win the junk
Folder : bluejunk
Folder : Campscr
Folder : DeafOnlineSite
Folder : else online five
Folder : film start link joy
Folder : the rect
Folder : 2 body
Folder : 2 Cake Meet
Folder : 16 skip

==================================
Maj/Upd : 31/08/2008 ( v 4.2.3-8 )
==================================

Folder : Dumb creative
Folder : jump delete hold
Folder : PHONEPLANMULTI

==================================
Maj/Upd : 30/08/2008 ( v 4.2.3-7 )
==================================

Folder : DRVUSERENCPILE
Folder : EXTRABYTE
Folder : Flaw Hide
Folder : Remote Audio New
Folder : soft dead ooze build
Folder : Trans Once Mess Frag
Folder : 01 Kind Beep

==================================
Maj/Upd : 27/08/2008 ( v 4.2.3-6 )
==================================

Folder : Defy Memo Find Trust
Folder : peakbodymore
Folder : surflitecopy
Folder : Up Creative Skip

==================================
Maj/Upd : 26/08/2008 ( v 4.2.3-5 )
==================================

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\WinZix.exe]

Folder : body meow bolt
Folder : curbstupidref
Folder : data audio intra bat
Folder : Enc corn close play
Folder : Eqhtmskip
Folder : gram delete for
Folder : love ford manager
Folder : Slow Option Window
Folder : Slow owns
Folder : THATAXISCAMPJUNK
Folder : trans bird
Folder : WARN STUPID EACH STOP

==================================
Maj/Upd : 23/08/2008 ( v 4.2.3-4 )
==================================

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\TorrentSpeeder_is1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\BitRoll_is1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D5792AA9-D373-4039-8670-2CDAB6A71F15}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2473BF2D-CA0A-11DA-88DB-0050BF2938E1}]

[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\TorrentSpeeder]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\NetPumper]

[-HKEY_CLASSES_ROOT\CLSID\{D5792AA9-D373-4039-8670-2CDAB6A71F15}]
[-HKEY_CLASSES_ROOT\CLSID\{2473BF2D-CA0A-11DA-88DB-0050BF2938E1}]

Folder : Bib Dog Flap Long
Folder : chinhole
Folder : copymessbatnew
Folder : DateBowsLoadBash
Folder : GLUE RECT MOVE
Folder : GLUE TONS ERROR WIN
Folder : Greycake
Folder : Jugssupporteach
Folder : ShowDateDumb
Folder : Up corn

==================================
Maj/Upd : 21/08/2008 ( v 4.2.3-3 )
==================================

[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance\{773B1AAD-A8DD-4010-A903-CDB32938F595}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{773B1AAD-A8DD-4010-A903-CDB32938F595}]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\DivoCodec.exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\GalaPlayer.exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\PluginDL.exe]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DivoCodec]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GalaPlayer]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PluginDL]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\DownloadPlugin.DLPlugin]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\DownloadPlugin.DLPlugin.1]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"GalaPlayer"=-

%Programfiles%\Mozilla Firefox\Plugins\npdlplug.dll
%Windir%\Prefetch\GALAPLAYER*.pf
%Programfiles%\GalaPlayer
%Common Programs%\GalaPlayer
%Desktop%\GalaPlayer.lnk
%Cookies%\*.livemediasrv*.txt
%Cookies%\*.galaplayer*.txt
%Temp%\ns*
%Temp%\pldl*
%Temp%\codec_dv*
%Temp%\DivoCodec*

Processes - GalaPlayer.exe

==================================
Maj/Upd : 20/08/2008 ( v 4.2.3-2 )
==================================

Folder : Extra hold two
Folder : film build inter site
Folder : knob build
Folder : Less mfcd sixth
Folder : 1logofunk
Folder : 64 dvd

==================================
Maj/Upd : 19/08/2008 ( v 4.2.3-1 )
==================================

%ProgramFiles%\Adverts
%ProgramFiles%\Bitdownload
%ProgramFiles%\BitGrabber
%ProgramFiles%\BitRoll
%ProgramFiles%\BitTorrent Fastest Tool
%ProgramFiles%\Circle Developement
%ProgramFiles%\CiD Help
%ProgramFiles%\CiD Manager
%ProgramFiles%\C2Media
%ProgramFiles%\DivoCodec
%ProgramFiles%\DivoPlayer
%ProgramFiles%\DomPlayer
%ProgramFiles%\Download Plugin
%ProgramFiles%\Get-Torrent
%ProgramFiles%\KitPlayer
%ProgramFiles%\Multi_Media
%ProgramFiles%\Multi_Media_France
%ProgramFiles%\MultiMedia France Toolbar
%ProgramFiles%\NetPumper
%ProgramFiles%\PluginDL
%ProgramFiles%\TorrentGamers
%ProgramFiles%\TorrentQ
%ProgramFiles%\TorrentSoftware
%ProgramFiles%\TorrentSpeeder
%ProgramFiles%\Torrent101
%ProgramFiles%\Winzix
%ProgramFiles%\3wPlayer

%ProgramData%\Adverts
%ProgramData%\Bitdownload
%ProgramData%\BitGrabber
%ProgramData%\BitRoll
%ProgramData%\BitTorrent Fastest Tool
%ProgramData%\Circle Developement
%ProgramData%\CiD Help
%ProgramData%\CiD Manager
%ProgramData%\C2Media
%ProgramData%\DivoCodec
%ProgramData%\DivoPlayer
%ProgramData%\DomPlayer
%ProgramData%\Download Plugin
%ProgramData%\Get-Torrent
%ProgramData%\KitPlayer
%ProgramData%\Multi_Media
%ProgramData%\Multi_Media_France
%ProgramData%\MultiMedia France Toolbar
%ProgramData%\NetPumper
%ProgramData%\PluginDL
%ProgramData%\TorrentGamers
%ProgramData%\TorrentQ
%ProgramData%\TorrentSoftware
%ProgramData%\TorrentSpeeder
%ProgramData%\Torrent101
%ProgramData%\Winzix
%ProgramData%\3wPlayer

%CommonProgramFiles%\Adverts
%CommonProgramFiles%\Bitdownload
%CommonProgramFiles%\BitGrabber
%CommonProgramFiles%\BitRoll
%CommonProgramFiles%\BitTorrent Fastest Tool
%CommonProgramFiles%\Circle Developement
%CommonProgramFiles%\CiD Help
%CommonProgramFiles%\CiD Manager
%CommonProgramFiles%\C2Media
%CommonProgramFiles%\DivoCodec
%CommonProgramFiles%\DivoPlayer
%CommonProgramFiles%\DomPlayer
%CommonProgramFiles%\Download Plugin
%CommonProgramFiles%\Get-Torrent
%CommonProgramFiles%\KitPlayer
%CommonProgramFiles%\Multi_Media
%CommonProgramFiles%\Multi_Media_France
%CommonProgramFiles%\MultiMedia France Toolbar
%CommonProgramFiles%\NetPumper
%CommonProgramFiles%\PluginDL
%CommonProgramFiles%\TorrentGamers
%CommonProgramFiles%\TorrentQ
%CommonProgramFiles%\TorrentSoftware
%CommonProgramFiles%\TorrentSpeeder
%CommonProgramFiles%\Torrent101
%CommonProgramFiles%\Winzix
%CommonProgramFiles%\3wPlayer

%Common Programs%\Adverts
%Common Programs%\Bitdownload
%Common Programs%\BitGrabber
%Common Programs%\BitRoll
%Common Programs%\BitTorrent Fastest Tool
%Common Programs%\DivoCodec
%Common Programs%\DivoPlayer
%Common Programs%\DomPlayer
%Common Programs%\Download Plugin
%Common Programs%\Get-Torrent
%Common Programs%\KitPlayer
%Common Programs%\Multi_Media
%Common Programs%\Multi_Media_France
%Common Programs%\NetPumper
%Common Programs%\PluginDL
%Common Programs%\TorrentGamers
%Common Programs%\TorrentQ
%Common Programs%\TorrentSoftware
%Common Programs%\TorrentSpeeder
%Common Programs%\Torrent101
%Common Programs%\Winzix
%Common Programs%\3wPlayer

%AppData%(s)\Bitdownload
%AppData%(s)\BitGrabber
%AppData%(s)\BitRoll
%AppData%(s)\Circle Developement
%AppData%(s)\C2Media
%AppData%(s)\DivoCodec
%AppData%(s)\DivoPlayer
%AppData%(s)\DomPlayer
%AppData%(s)\Get-Torrent
%AppData%(s)\KitPlayer
%AppData%(s)\Multi_Media
%AppData%(s)\Multi_Media_France
%AppData%(s)\NetPumper
%AppData%(s)\TorrentGamers
%AppData%(s)\TorrentQ
%AppData%(s)\TorrentSoftware
%AppData%(s)\TorrentSpeeder
%AppData%(s)\Torrent101
%AppData%(s)\Winzix

%Desktop%\Bitdownload.lnk
%Desktop%\BitGrabber.lnk
%Desktop%\BitRoll.lnk
%Desktop%\C2Media.lnk
%Desktop%\DivoCodec.ink
%Desktop%\DivoPlayer.ink
%Desktop%\DomPlayer.ink
%Desktop%\Get-Torrent.lnk
%Desktop%\KitPlayer.ink
%Desktop%\Multi_Media.lnk
%Desktop%\Multi_Media_France.lnk
%Desktop%\NetPumper.lnk
%Desktop%\TorrentGamers.lnk
%Desktop%\TorrentQ.lnk
%Desktop%\TorrentSoftware.lnk
%Desktop%\TorrentSpeeder.ink
%Desktop%\Torrent101.lnk
%Desktop%\Winzix.lnk

%Cookies%\*.Bitdownload*.txt
%Cookies%\*.BitGrabber*.txt
%Cookies%\*.BitRoll*.txt
%Cookies%\*.Circle Developement*.txt
%Cookies%\*.C2Media*.txt
%Cookies%\*.DivoCodec*.txt
%Cookies%\*.DivoPlayer*.txt
%Cookies%\*.DomPlayer*.txt
%Cookies%\*.Get-Torrent*.txt
%Cookies%\*.KitPlayer*.txt
%Cookies%\*.Multi_Media*.txt
%Cookies%\*.Multi_Media_France*.txt
%Cookies%\*.NetPumper*.txt
%Cookies%\*.TorrentGamers*.txt
%Cookies%\*.TorrentQ*.txt
%Cookies%\*.TorrentSoftware*.txt
%Cookies%\*.TorrentSpeeder*.txt
%Cookies%\*.Torrent101*.txt
%Cookies%\*.Winzix*.txt
%Cookies%\*.adserver5*.txt
%Cookies%\*.adultfriend*.txt
%Cookies%\*.advertising*.txt
%Cookies%\*.bblast*.txt
%Cookies%\*.bigpoint*.txt
%Cookies%\*.casinoking*.txt
%Cookies%\*.cotedazurpalace*.txt
%Cookies%\*.euroclick*.txt
%Cookies%\*.pacificpoker*.txt
%Cookies%\*.partygaming*.txt
%Cookies%\*.partypoker*.txt
%Cookies%\*.seafight*.txt
%Cookies%\*.vegas*.txt
%Cookies%\*.www.lop*.txt
%Cookies%\*.2xMoinscher*.txt
%Cookies%\*.@888*.txt

%Windir%\Prefetch\Bitdownload*.pf
%Windir%\Prefetch\BitGrabber*.pf
%Windir%\Prefetch\BitRoll*.pf
%Windir%\Prefetch\Circle Developement*.pf
%Windir%\Prefetch\C2Media*.pf
%Windir%\Prefetch\DivoCodec*.pf
%Windir%\Prefetch\DivoPlayer*.pf
%Windir%\Prefetch\DomPlayer*.pf
%Windir%\Prefetch\Get-Torrent*.pf
%Windir%\Prefetch\KitPlayer*.pf
%Windir%\Prefetch\Multi_Media*.pf
%Windir%\Prefetch\Multi_Media_France*.pf
%Windir%\Prefetch\NetPumper*.pf
%Windir%\Prefetch\TorrentGamers*.pf
%Windir%\Prefetch\TorrentQ*.pf
%Windir%\Prefetch\TorrentSoftware*.pf
%Windir%\Prefetch\TorrentSpeeder*.pf
%Windir%\Prefetch\Torrent101*.pf
%Windir%\Prefetch\Winzix*.pf
%Windir%\Prefetch\random_name(lop).exe*.pf

%windir%\Tasks\????????8???????.job
%windir%\Tasks\????????9???????.job

%temp%\bis*.exe
%temp%\HtmlControl*
%temp%\minime*
%temp%\msgpl_*
%temp%\nse*
%temp%\torrent_*

===================================

Processes - Bitdownload.exe
Processes - BitGrabber.exe
Processes - BitP.exe
Processes - BitRoll.exe
Processes - Get-Torrent.exe
Processes - Iexplore.exe
Processes - NetPumper.exe
Processes - NetPumperIEProxy.exe
Processes - TorrentGamers.exe
Processes - TorrentQ.exe
Processes - TorrentSoftware.exe
Processes - TorrentSpeeder.exe
Processes - Torrent101.exe
Processes - WakeService.exe
Processes - Winzix.exe
Processes - 3wPlayer.exe
Processes - random_name(lop).exe

===================================

Folder : About extra corn
Folder : ABOUT HOLD WAIT
Folder : About Inter
Folder : ABOUT TEAM INFO SECT
Folder : acebitssite
Folder : Ace license more
Folder : acidthatmail
Folder : Acid Type Mode
Folder : AcidProgramAntiAtom
Folder : Acid Wait City Ooze
Folder : Acid64Boob
Folder : Active Eggs Body Support
Folder : Active the bore sect
Folder : Admin Dart Noun
Folder : Admin Inter 1 Mags
Folder : adminlivemore
Folder : Admin meta
Folder : ADMIN MOVE DALE
Folder : Admin Rect Ace License
Folder : Admin Tool Owns Dvd
Folder : adminup
Folder : aim mix proc pure
Folder : aim rect help creative
Folder : AmenDownloadVga
Folder : AmenFunkBowsInside
Folder : AmenHopeNew
Folder : amok curb type bind
Folder : Anteeq
Folder : Ante Funk
Folder : ante nurb city
Folder : Antiadmintitle
Folder : antieach
Folder : AntiFreeMetaBody
Folder : antionline
Folder : anti platform
Folder : AntiTons
Folder : armybikeeggs
Folder : Army Delete Less
Folder : Atom ante comp mags
Folder : atom bike mode
Folder : atom bird more
Folder : atom book wait
Folder : atom bows burn dumb
Folder : Atom close sixth trans
Folder : AtomCurbCopyDefault
Folder : Atom Dash
Folder : Atom Dent Logo
Folder : ATOM DRAW MP3 ONLINE
Folder : Atom Eggs One Barb
Folder : Atom Fast Link Win
Folder : Atom Find
Folder : Atom Find Defy Tray
Folder : Atom Idle Dash Bend
Folder : atom idol safe warn
Folder : atom mpeg love each
Folder : Atom nurb base eq
Folder : atom seek live this
Folder : Atom Third Eggs More
Folder : Atomtonsmags
Folder : atom trust okay loud
Folder : atom 16 close creative
Folder : Audio Find Real Gram
Folder : AUDIO SCR BIAS POP
Folder : audio two view
Folder : Audio 4 part browse
Folder : axis dvd 4
Folder : axis else camp ball
Folder : Axis face active
Folder : Axis Readme Second Bat
Folder : Axis that
Folder : axis wait the bone
Folder : AXIS WAY
Folder : Bags Browse Face
Folder : bags gram base
Folder : Bags loud rect corn
Folder : Bags Plus Online Chin
Folder : bags readme locks tick
Folder : BAGSTONSJUMP
Folder : BAITBENDBAT
Folder : Bait cake roam slow
Folder : bait grid bore
Folder : Baitholebarb
Folder : Bait nurb roam real
Folder : Ball mapi owns ping
Folder : Ball Shim Dupe Tick
Folder : BallStupidBiasHeck
Folder : Ball 32 for
Folder : balmdatamultilive
Folder : BalmReadmeMemo
Folder : Balmscrjump
Folder : BALM START BIRD ARMY
Folder : Barb Base Hold
Folder : Barb Info Hold Audio
Folder : Barbjunkloud
Folder : Barb Sect Mapi
Folder : Barb 16 jump
Folder : Base Debug Internet One
Folder : BasePlanBody
Folder : bash army tool 01
Folder : Bash Dvd Hold Data
Folder : Bash Keep Title Dent
Folder : BASH OOZE WAVE DEFY
Folder : BashOwnsLoad
Folder : Bash Site Log
Folder : bat date
Folder : bat glue time dash
Folder : beep axis mode free
Folder : Bendboobchiceggs
Folder : bend ooze mags
Folder : BEND RECT ISO
Folder : Bend Settings Dupe
Folder : bend team hole trans
Folder : bend2eggs
Folder : bib fork bend
Folder : Bib option date
Folder : bibspamplanopen
Folder : bib 32 view mags
Folder : bike bold move shim
Folder : Bike Drive Bird
Folder : bike road bin
Folder : bin cast tray user
Folder : BindAimTrayBone
Folder : Bind army eggs joy
Folder : Bind Bird Bend Nurb
Folder : BINDGREATSEND
Folder : BIND INTER LOAD POKE
Folder : Bind Pile
Folder : Bin Wait Ante Cast
Folder : Bird Multi User
Folder : bits bike mode book
Folder : bits chin bind drive
Folder : bits love axis thunk
Folder : Blah User
Folder : blehbeep
Folder : blehbitssetupthird
Folder : bleh build
Folder : bleheach
Folder : Bleh kind cool memo
Folder : Bleh stupid wipe five
Folder : bleh that name
Folder : BlehThisMail
Folder : blue burn
Folder : Blue comp media
Folder : BLUEDARTROAM
Folder : blue lite
Folder : bluelogo
Folder : Blue Ref Option That
Folder : blue shim axis memo
Folder : blue tray
Folder : Body bait bin base
Folder : body copy second city
Folder : Body16city
Folder : Bold Bows Tray Dvd
Folder : Bolt chin wave
Folder : BoltCloseEq
Folder : bolt date book
Folder : Bolt error second
Folder : BOLTSTYLEWINDOW
Folder : Bolt 64 team
Folder : BONE ABOUT BOOK BOWS
Folder : bonemetafork
Folder : bonepilenoun
Folder : bone win film
Folder : Bonewipebuild
Folder : boobdeletesizetime
Folder : boob jump time
Folder : boob pile ace
Folder : Boob tray find
Folder : boob trust axis film
Folder : Book Slow Axis Web
Folder : BOOKTRUSTBOLD
Folder : BORE IDOL SKIP
Folder : borelistbags
Folder : BoreLoadPile
Folder : borepokefast
Folder : Bore Seek Intra Media
Folder : bore tick active
Folder : Boretrustuser
Folder : Bows Ball Meal Deaf
Folder : bowsitchreal
Folder : BOWS 16 JUGS FORD
Folder : Browse Dent Win Base
Folder : Browsedrawbend
Folder : BROWSE LOCKS BAT
Folder : BROWSE MP3 LIES
Folder : BROWSE PROGRAM STYLE FOR
Folder : BROWSE WINDOW DRV NAME
Folder : buildextradent
Folder : build ping dead more
Folder : burn download defy inside
Folder : burn spam ping upload
Folder : bytebatdate
Folder : Byte bat software
Folder : byte blah less
Folder : Byte Meow Send
Folder : Cakeeachlovehope
Folder : CakeSafeSectMail
Folder : campbagsbody
Folder : camp bits bags
Folder : Camp Mess Warn Pop
Folder : Camp Meta Joy
Folder : Camp 16 Mess
Folder : cast dale way math
Folder : Cash Dash Chin
Folder : cash error default
Folder : Cash Idol Bows Mode
Folder : Cast ping base frag
Folder : Cdromlogjunksite
Folder : Cdrom support more start
Folder : Cdrom Window
Folder : cdrom 1
Folder : chic htm show four
Folder : Chic slow bind base
Folder : Chic This
Folder : Chin dead way platform
Folder : Chin glue
Folder : chinencmeta
Folder : city about store file
Folder : citydashamokdraw
Folder : City download curb
Folder : city each safe move
Folder : city program ball
Folder : city wave win enc
Folder : clockaxis
Folder : clock bend
Folder : clock flag base love
Folder : Clock Regs Upload Copy
Folder : clockthisdoesamok
Folder : CloseDoes
Folder : CLOSELOADBOOB
Folder : closemultimedia
Folder : close poke frag ooze
Folder : closetwo
Folder : Close upload noun internet
Folder : COAL FUNK LONG
Folder : Coallinklicense
Folder : comp bike active
Folder : Compblahmanager
Folder : comp bolt eggs
Folder : COMPDVDSIGNMANAGER
Folder : comp inter vc
Folder : Comp Jugs Ball That
Folder : comp two long internet
Folder : cool deaf size
Folder : Cool Eggs The Locks
Folder : Coolflawthisflag
Folder : CoolFunkLong
Folder : CopyFaceLong
Folder : Copy Peak 01
Folder : CopyShowFile
Folder : creative bike site dog
Folder : CreativeBold
Folder : CreativeShimCorn
Folder : creativeglue
Folder : Creative One
Folder : creativeatomfind
Folder : creative16
Folder : Curb Axis Rect
Folder : dale dog ball
Folder : Dale Road Date Fast
Folder : DALE SECT BOLT
Folder : Dart cash mail burn
Folder : dart iso bolt
Folder : dash chin meow
Folder : dashinternetplayload
Folder : Data bend four
Folder : Data ford bolt
Folder : data trust heck that
Folder : Debug Jump Delete
Folder : DEFYSETUPPLUSGLUE
Folder : delete dead remote
Folder : DeleteLessMail
Folder : Deadfirstlog
Folder : Deadsoapchinjugs
Folder : Dead Stupid Web User
Folder : default about bolt hold
Folder : default five wave tick
Folder : defaultlogomode
Folder : defy build seek
Folder : Defy Memo Find Trust
Folder : Defy 2 Bait
Folder : deletemovethirdclock
Folder : dent base bolt close
Folder : Dent that bait
Folder : does dog two city
Folder : does mfcd amok play
Folder : does trans sign
Folder : Dogblahbias
Folder : dog inter pile proxy
Folder : Dogloudnew
Folder : dog nurb debug
Folder : Dog Start New Blue
Folder : Download Grey Settings
Folder : DrawUpload
Folder : drive bore bone
Folder : drive fast license
Folder : Drv Audio Dog About
Folder : Drvblehbash
Folder : Drv book build
Folder : drvjoy
Folder : dumb axis seek
Folder : DumbBatFour
Folder : dumb heck program four
Folder : dumb pure bind support
Folder : Dupe About Kind Mp3
Folder : Dupe bags amok
Folder : dupeoozemore32
Folder : DupeSeekFlawThird
Folder : Dupe 4 tick each
Folder : Dvd Dupe Mail
Folder : DVD FAST
Folder : Dvd open
Folder : each four heart
Folder : Each New Axis Love
Folder : EggsHideMessMeow
Folder : eggsmailmeow
Folder : eggs sign this meow
Folder : Eggs wait hole burn
Folder : ElseBleh
Folder : ELSE DEAD META MAGS
Folder : ElseGplView
Folder : Else Inter Send
Folder : ELSE PLUS
Folder : Else Roam Soap
Folder : Else Show
Folder : Elsesizeinsidecamp
Folder : elsesurfcoal
Folder : enc idol store 01
Folder : ENCMATH
Folder : Enc safe that grid
Folder : Enc Size Copy Pure
Folder : eq barb date
Folder : Error Dumb Readme Face
Folder : Errormags
Folder : espionServerData
Folder : EXITDVDDASH
Folder : exitglue
Folder : Exit lite file
Folder : exit mapi
Folder : ExitPlus
Folder : Exit Win Less Cdrom
Folder : Extra anti
Folder : extra link pile
Folder : Extraonlinedeadbows
Folder : FaceGlobalBarbBeep
Folder : facejumpway
Folder : Face Loud Mp3 Readme
Folder : FaceReadmeHeart
Folder : FaceThirdMeal
Folder : fast hide wma
Folder : File Blah Nurb
Folder : file cash army online
Folder : File dvd base road
Folder : File Joy Proc Deaf
Folder : FileWmaStopSurf
Folder : Film audio long
Folder : filmchicpartbind
Folder : film meet that mode
Folder : filmtimeupcurb
Folder : findantimulti
Folder : FIND BALM SEEK BAGS
Folder : FindBoltForkNew
Folder : find slow debug flaw
Folder : first platform grid store
Folder : Firstonegluevga
Folder : Five Anti Log Great
Folder : Five Option Obj Bait
Folder : Fivethiscake
Folder : Five01Locks
Folder : flag ace stupid data
Folder : flag ball size enc
Folder : flag barb cake wipe
Folder : Flag Copy
Folder : FlagInternetHole
Folder : flagliessetup
Folder : Flag Memo
Folder : flagmpegvccoal
Folder : Flag Proc Win Deaf
Folder : Flag Surf
Folder : FLAG THUNK
Folder : flap hold
Folder : flagjump
Folder : FLAP NEW
Folder : flap peak
Folder : Flap Store
Folder : flaw cake
Folder : flaw online bows
Folder : Flaw Play Data Burn
Folder : foraxistrustuser
Folder : FORD ACE HOLD
Folder : ford does hold option
Folder : Ford drive four file
Folder : Ford Error Hide
Folder : FORDKINDOOZE
Folder : For extra
Folder : For five regs bat
Folder : for global skip
Folder : forpilepurebrowse
Folder : Fork Intra Live
Folder : fork option
Folder : fork wma dupe
Folder : fourbookclockmp3
Folder : Four film keep
Folder : Four Meow Name
Folder : Four ping warn
Folder : Frag Bows Mess
Folder : Frag great bend logo
Folder : Frag program
Folder : FREEDATEAMEN
Folder : Free Dvd Two Gpl
Folder : Free glue browse title
Folder : Funk Cast Love
Folder : Funk Curb Soap
Folder : funk draw rect
Folder : Funk Heck Okay
Folder : funk hide store bat
Folder : funk scr online about
Folder : Funk way lies
Folder : global book move
Folder : global dead funk does
Folder : globalheartbits
Folder : Global program pure
Folder : GlobalWaveBait
Folder : Gluedeaddoes
Folder : gluejumpmeal
Folder : glue pop
Folder : GLUE SAVE
Folder : Glue User Defy About
Folder : Gpl active
Folder : Gpl active roam each
Folder : Gpl Bib
Folder : GplBirdHeartLogo
Folder : gpl data
Folder : Gpl Send 1 Support
Folder : gpltitle
Folder : Gpl16IsoFive
Folder : GramCopy
Folder : Gramjumproad
Folder : gramplaysixthcamp
Folder : gram safe
Folder : Gram View 4
Folder : Gram 32 Drv Wipe
Folder : great coal love default
Folder : Great Fork Draw Wma
Folder : Greatinteritchdebug
Folder : great long way
Folder : great scr logo
Folder : Great the ping
Folder : grey ante kind mess
Folder : Grey Deaf
Folder : greymode
Folder : greynewcash
Folder : greyroameqgrim
Folder : Grey Third Intra Long
Folder : Greythunkcast
Folder : Grid Blue Memo Site
Folder : griddeadbird
Folder : Gridfastbarb
Folder : Grid Gpl
Folder : grid keep
Folder : GridLies
Folder : Grim Dvd Size
Folder : grimloudmeal
Folder : grimplay
Folder : grim tons active test
Folder : heartremoteplatformroad
Folder : heart wave amok film
Folder : HeckGramFace
Folder : Heck Less Real
Folder : Help Show Pol
Folder : Help Test Bias File
Folder : hide bolt proc dent
Folder : hide cool shim link
Folder : holdbirdpoll
Folder : Hold Trust Amok Mode
Folder : Hold Wait Boob Vga
Folder : Hold way amok
Folder : Hope army browse bat
Folder : hope dent bash view
Folder : hopemessbook
Folder : hope ping mail
Folder : HoleBalmDefaultFor
Folder : HOLE BEND CLOCK META
Folder : Holeboltcast
Folder : HoleBowsMoreLocks
Folder : hole copy eq drv
Folder : Hole curb time soft
Folder : HOLE NOUN CAST
Folder : Htm Exit
Folder : htmrealloadball
Folder : Htm Support Bait Deaf
Folder : idlebows
Folder : idleplay
Folder : idle wma bin ford
Folder : IdleWmaFor
Folder : idol eq
Folder : Idol flag base
Folder : idolmathcurb
Folder : idol mp3 plus cake
Folder : IDOL OBJ POKE PROXY
Folder : idol setup dale frag
Folder : IdolSupport
Folder : idol time
Folder : infodata
Folder : Info Drive
Folder : info flag way
Folder : INFO STOP
Folder : INFO TWO
Folder : INFO16DART
Folder : inside free link
Folder : Inside Mfcd Mess Creative
Folder : Inside Play Amok
Folder : inside tool surf
Folder : interdefault
Folder : INTERKINDBLEH
Folder : Internet debug mess great
Folder : Internet else ford view
Folder : INTERNET SPAM SUPPORT AUDIO
Folder : internet trans media
Folder : Inter that wipe
Folder : Intrabags
Folder : intra copy
Folder : INTRAFLAP
Folder : intra funk
Folder : IntraLongMailBike
Folder : Iso does cool
Folder : isostopcash
Folder : Iso Web Bags Else
Folder : Itchcashpure
Folder : Itch Stupid
Folder : Itch32Bat
Folder : Joy coal mpeg heck
Folder : Joy Download Pure
Folder : joy heck ford cash
Folder : Joy pure rule
Folder : joyvgarulehtm
Folder : JugsSoftMapiByte
Folder : jugs rect move
Folder : Jump Poll Poke Mp3
Folder : JUNK BIN
Folder : Junk Book Iso
Folder : junk exit scr wait
Folder : junkhopecake
Folder : KEEP AXIS
Folder : Kindcreativecdromdoes
Folder : kind rule skip
Folder : kindtypeglobalshim
Folder : knobanti
Folder : knob start mapi third
Folder : lesseachhidebike
Folder : LessExitGridOwns
Folder : Lesssecondscrkind
Folder : LICENSE ADMIN OPTION BIB
Folder : LICENSE FORD HOPE DRAW
Folder : licensebagstwo
Folder : license draw cast
Folder : License settings bait
Folder : lies grim cdrom bash
Folder : Lies Jugs Readme Start
Folder : Lies List Aim
Folder : lies more hide
Folder : Link Axis Bat Wave
Folder : Link remote ball
Folder : Listoozefunk
Folder : LiteAntiMoreAtom
Folder : Litecastdefault
Folder : liveantigrimstyle
Folder : live drv owns
Folder : Live keep wait open
Folder : Live Locks Build
Folder : live manager trans barb
Folder : LivePartPeak
Folder : LiveWmaExitDog
Folder : live 64 math does
Folder : LOADNURBBORE
Folder : LOAD VGA BEND
Folder : locks bone film mpeg
Folder : log camp shim audio
Folder : Log Htm Lite Each
Folder : logo idle copy mail
Folder : Logo style sect remote
Folder : LogProcEggs
Folder : Log 32 cast
Folder : Long sect rule
Folder : Long slow road itch
Folder : LongSlowSiteCorn
Folder : Loud Dash Live Coal
Folder : Loud spam else tool
Folder : Loudway16meet
Folder : love aim ace
Folder : Love amok junk
Folder : loveproxyballtons
Folder : LOVE 01 BLAH FREE
Folder : magsmanagerwait
Folder : Mags Mapi Joy Bike
Folder : Mail For File Wave
Folder : ManagerBlueBind
Folder : Manager Thunk Bows Cast
Folder : mapidownloadcoalfrag
Folder : mapi info wait that
Folder : Mapi Live City Acid
Folder : Mapi Meta Book Bits
Folder : Mapi soft poke
Folder : mapi trust settings proc
Folder : math dvd skip
Folder : math remote bib exit
Folder : mathsafemfcdmags
Folder : mathtraydog
Folder : mealbikedale
Folder : MEALGLOBALAMOK
Folder : Meal Memo Free View
Folder : Mealmfcdaudio
Folder : meet scr funk else
Folder : meetstupidliesexit
Folder : Meet Web Hope
Folder : memobarbbias
Folder : memodatecomp
Folder : Memo Drive Vc Log
Folder : memo meow idle browse
Folder : Memo save stupid creative
Folder : Meow axis readme
Folder : MeowBagsNew
Folder : meow four dale link
Folder : Meow Intra Bait Face
Folder : meow less bolt
Folder : Messsendcopympeg
Folder : Messtworefmapi
Folder : meta grid two
Folder : Meta Multi Axis Dumb
Folder : META SETTINGS DATA
Folder : meta user regs
Folder : mfcdgpl
Folder : Mfcd Thunk Tool
Folder : Mfcd upload army browse
Folder : Mix Balm Manager
Folder : Mix jugs default aim
Folder : mixtestlogomanager
Folder : Mode Dog Debug
Folder : modeonedaleroad
Folder : Mode Rule 64 Inter
Folder : More dvd dale ref
Folder : Morefirstproxyloud
Folder : Move Bore Curb Tool
Folder : moveflagnoun
Folder : MpegBoneSaveBody
Folder : MPEG ELSE ONE VIEW
Folder : mpegidol
Folder : mpeg wait type
Folder : mp3anti
Folder : mp3bore
Folder : Mp3 online
Folder : mp3rulesecond
Folder : Mp3 Shim
Folder : multidatajoy
Folder : MultiMealChicMemo
Folder : Name beep copy real
Folder : name play type
Folder : newfileidolreadme
Folder : newforgreybias
Folder : new math hold
Folder : new second meal mess
Folder : NEW SIGN LIES
Folder : nounbyteboltcake
Folder : NounCdromHole
Folder : NounLinkMove
Folder : Noun Love Bits Peak
Folder : Noun Sect Jump Scr
Folder : Nurb Knob Audio
Folder : nurbproxywait
Folder : Obj comp that free
Folder : obj gpl
Folder : OBJ META UP BURN
Folder : Obj Send Meow
Folder : okay active sign
Folder : Okaycakeless
Folder : okaymapilog
Folder : Okay meta anti lite
Folder : okay peak 64 blue
Folder : Oncedead
Folder : Once jugs long
Folder : Oncemapiroad
Folder : ONCEMOVE
Folder : one idol dupe
Folder : One idol win data
Folder : Onesafe
Folder : OneSoapNoun
Folder : One Vga
Folder : Online Acid
Folder : Online gram
Folder : OozeBind
Folder : ooze seek
Folder : ooze this corn
Folder : Open Ante Anti Dog
Folder : open anti bin
Folder : openblehdownload
Folder : open jump cast
Folder : openpile
Folder : open trust pure
Folder : Option ace ref
Folder : optionacid
Folder : OPTIONAUDIO
Folder : Option Camp Pure Team
Folder : option load logo
Folder : option okay ford bird
Folder : owns copy pop
Folder : Owns else chic defy
Folder : OwnsForFilm
Folder : part dead amok eggs
Folder : PartDeleteLog
Folder : Part Hide Grey Pop
Folder : Part Long Boob Idle
Folder : Part site hole fast
Folder : PeakCreativeHeart
Folder : Peak Dead Date
Folder : peakmodeskip
Folder : Peak ooze date army
Folder : Phone Ante
Folder : Phone close
Folder : PHONEFOUR
Folder : Phonereadmeskip
Folder : Phone64Ref
Folder : Pile Trans Wipe
Folder : PingDrawKnobPlan
Folder : PingNameSafe
Folder : Ping Sign Byte Tool
Folder : plananti
Folder : plandraw
Folder : Plan Admin Browse Does
Folder : Plan Atom Sect
Folder : PlanBookBurnFind
Folder : Plannounwait
Folder : PLAN PART
Folder : Plan Test
Folder : Plan that
Folder : PLANSETUPLESS
Folder : plan 2
Folder : PLATFORMCAKESECONDONE
Folder : platform dupe draw memo
Folder : platform style setup
Folder : Play Close
Folder : Play grim the extra
Folder : Play mp3 eggs
Folder : playplusonewma
Folder : PlusCreative
Folder : Plus gram save
Folder : PlusGreatByteNoun
Folder : plusmail
Folder : plusmove
Folder : Plus Team Mix Exit
Folder : Poke dupe setup htm
Folder : PokeGrimSlowDead
Folder : PokeMessBorePure
Folder : pokenurbhope
Folder : polleachruleprogram
Folder : poll funk copy
Folder : pop inter coal
Folder : pop ping file
Folder : proc admin
Folder : procante
Folder : Procbikethatjoy
Folder : Proc Clock
Folder : proc creative
Folder : proc dash bags stop
Folder : PROC DATE CAST
Folder : Proc film manager hide
Folder : Proc Flaw
Folder : Program bib coal
Folder : program corn logo
Folder : Program Dead Film
Folder : programidle
Folder : Programtime
Folder : program2audiosupport
Folder : proxy dash
Folder : Proxy Long Chin Ping
Folder : Proxy Option Upload Acid
Folder : Proxyplus
Folder : proxyroad
Folder : Proxy Spam Sign
Folder : PureBiasBold
Folder : pure coal bone thunk
Folder : readme error trans title
Folder : readme great send balm
Folder : Readme Live Axis Tons
Folder : real blue meal find
Folder : Real jugs
Folder : real save pure
Folder : RectHideTitle
Folder : Ref Amen Curb
Folder : Ref Phone Roam
Folder : REF VIEW AMEN
Folder : Regs Eq Cdrom Funk
Folder : Remote bib
Folder : remote lite more
Folder : Remote User 01
Folder : road about owns
Folder : roadjugsrulebarb
Folder : RoadJunkMixManager
Folder : road manager lies camp
Folder : Roam Program Comp About
Folder : rule extra meal
Folder : rulevchope
Folder : Safe boob sixth
Folder : Save bat bags
Folder : savebodyhoperef
Folder : SaveFilmKnobWipe
Folder : Save scr pure
Folder : save third bin data
Folder : Scr Bird Does
Folder : Scrgreyfind
Folder : scr style mp3 glue
Folder : second regs grim software
Folder : Sect Build Bash
Folder : sect burn file once
Folder : seekaxishide
Folder : SEEKBOOBPOP
Folder : Seek Corn Drive Eq
Folder : seek film amok web
Folder : Send acid copy bin
Folder : Sendelsesign
Folder : SEND LIVE TEST
Folder : SENDPOLLBIND
Folder : settings blue film frag
Folder : settings plan way
Folder : setup bind funk
Folder : setup bolt beep
Folder : Setup Download Amok
Folder : setup film inter bib
Folder : Setup Roam Part
Folder : Shimarmy
Folder : Shim Cdrom Cast Surf
Folder : Shimcreativeball
Folder : Shim Dvd Skip
Folder : shimliveeq
Folder : SHIM MAGS ELSE
Folder : Showbatwin
Folder : SHOW CDROM COPY
Folder : ShowDashNurb
Folder : Show Inside Title
Folder : sign atom long
Folder : Sign Camp Dead Cast
Folder : SIGNLITE
Folder : SiteDartSlowOnce
Folder : Sitedatabibdeaf
Folder : SiteExitWeb
Folder : site extra bend
Folder : site mess grim build
Folder : SITE ONLINE DOWNLOAD BAT
Folder : siteupcreativewait
Folder : SIXTHBATMULTI
Folder : sixth junk 2
Folder : size bin fork
Folder : SizeBrowseCake
Folder : Skip Window Junk
Folder : Slow Internet 1
Folder : Slow Wma Time
Folder : SOAP BROWSE AUDIO MULTI
Folder : SOAPCDROMHEARTCAMP
Folder : SOAPCLOCKANTIRDR
Folder : soap scr enc wma
Folder : soap thunk lies soft
Folder : softboldcoal
Folder : Softboobdelete
Folder : soft chic meet great
Folder : soft ref platform bind
Folder : software joy link
Folder : Software rule flag owns
Folder : SOFTWARESKIPREAL
Folder : spam ball
Folder : Spam bold book
Folder : Start second cool
Folder : STOP BIB
Folder : StopCastTick
Folder : storedrvcoal
Folder : StoreHope
Folder : STORE LESS JUGS SURF
Folder : Store Name Math
Folder : Store Scr Audio
Folder : Store scr roam
Folder : STORETONS
Folder : stupid eggs bows
Folder : Stupid fast
Folder : StupidHold
Folder : STUPID TITLE
Folder : Stupid Vc Soft Defy
Folder : StyleEachShimThird
Folder : Style Trust Pile Heart
Folder : StyleTwoCloseMore
Folder : StyleTwoNewWindow
Folder : supportoncelocks
Folder : support setup second
Folder : surf each pure anti
Folder : SurfElseSize
Folder : surf pop bolt
Folder : surftickbuild
Folder : SURF TWO MESS
Folder : teambiasamenbody
Folder : team bows copy
Folder : team byte bore
Folder : Team Idol Readme
Folder : team pure
Folder : Team Wave Body
Folder : Test dent coal
Folder : test jugs web
Folder : Test pop second data
Folder : Test pure each
Folder : test sect regs kind
Folder : that balm road soft
Folder : That Beep Info Bash
Folder : that deaf send
Folder : That Face Camp Shim
Folder : Thatping
Folder : That Size Part Chin
Folder : That tick wipe
Folder : The Bat Settings
Folder : the gpl
Folder : the grim
Folder : thegrim
Folder : The link
Folder : The mapi web sign
Folder : the twi bikt
Folder : The two bolt
Folder : Third army
Folder : Third Build Default
Folder : THIRDDOG
Folder : Thirdgridbold
Folder : Third Joy Wma List
Folder : third lies itch ford
Folder : this anti
Folder : This Base Error Blah
Folder : This bash seek owns
Folder : this bird mags
Folder : This Comp
Folder : This comp locks list
Folder : This Hope
Folder : Thisslowokay
Folder : this spam hole
Folder : THIS STYLE COPY
Folder : ThunkAmenDashChin
Folder : Thunk Dog
Folder : thunk else
Folder : thunkonline
Folder : THUNK PURE
Folder : Tick Find Close Surf
Folder : Timechinbind
Folder : Time Dead Warn Default
Folder : timemultiactive
Folder : title new joy beep
Folder : title tool face bin
Folder : Tons bird logo
Folder : Tons byte send
Folder : Tons bows test
Folder : tonsmailcompcake
Folder : Tool Eggs Less City
Folder : trans default
Folder : Trans draw once less
Folder : Transthat
Folder : Tray Free
Folder : Tray Obj Shim Face
Folder : TRAY PART
Folder : tray rule
Folder : tray sign locks
Folder : Trust Bin
Folder : trust cake second
Folder : TrustLogoCash
Folder : trust okay
Folder : TWO CITY BOLT
Folder : twodefymail
Folder : Two Idol Wave Flag
Folder : two setup mode load
Folder : Two Site Ford
Folder : Type Bits More
Folder : Type Camp Roam
Folder : Up Aim Axis Third
Folder : up creative first dumb
Folder : up inter 64 dumb
Folder : up joy style date
Folder : upload beep third lies
Folder : upload bib view
Folder : Upload seek acid
Folder : Userbirdwaylicense
Folder : user first axis bows
Folder : vc third tick
Folder : vctooltitle
Folder : ViewAxisStupid01
Folder : View Bash Locks Rdr
Folder : view name beep for
Folder : Wait Find Browse New
Folder : Wait Send Grim Bird
Folder : WAITSIXTHSKIP
Folder : Wave Heck First
Folder : wave junk
Folder : wave log show title
Folder : wave readme free load
Folder : wayarmyhopesetup
Folder : way rdr ford mpeg
Folder : Web bait lies
Folder : web cdrom dead
Folder : WEBMPEG
Folder : Web Okay Five 01
Folder : Window Byte Free Meal
Folder : window five meal this
Folder : window move pile
Folder : Win knob owns four
Folder : Win mail bash city
Folder : wipebuildbits
Folder : Wipe More Boob
Folder : Wipe obj dumb
Folder : wipeownsbat
Folder : WmaLiteDefaultCamp
Folder : wma pile does two
Folder : WmaSettingsAdminBoob
Folder : 01dashmags
Folder : 01PLATFORMMOVE
Folder : 01thisdate
Folder : 1 aim roam
Folder : 1 copy
Folder : 2 Axis Dent
Folder : 2 clock build
Folder : 2 dog
Folder : 2FordBase
Folder : 2 fork
Folder : 2 SOFTWARE MEDIA
Folder : 2 Thunk Win
Folder : 2 tray tick inside
Folder : 2waitsoap
Folder : 4 Curb Loud Idol
Folder : 4elseproxycdrom
Folder : 16campbarbhtm
Folder : 16 Dead
Folder : 16LoudFunk
Folder : 16more
Folder : 16 new ping long
Folder : 16peak
Folder : 16realkeep
Folder : 32 coal bike
Folder : 32 Global File Mode
Folder : 32obj
Folder : 32 Online Open Drive
Folder : 32pure
Folder : 32 rule sign
Folder : 32 USER
Folder : 64 camp copy
Folder : 64FLAP
Folder : 64WaitList

===================================

[-HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\RANDOM_NAME(Lop)]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RANDOM_NAME(Lop)"=-

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RANDOM_NAME(Lop)"=-

===================================

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7009fcd4-05be-44f4-9583-93fe419ab7b0}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D5792AA9-D373-4039-8670-2CDAB6A71F15}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2E208C77-0097-DB40-1B6B-352EC62D41DD}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{f14b0ccd-aa41-4406-ab68-c5de9d85b4a3}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FAD02E73-97E2-5865-0385-4C09C811071F}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b5146c40-189a-4311-bda9-fbae3e023187}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0C6DCFAA-53FF-AC04-6A41-A845AD498CD6}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4A425451-241C-74E5-33AA-E58F1EBDD92D}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{7009fcd4-05be-44f4-9583-93fe419ab7b0}"=-
"{f14b0ccd-aa41-4406-ab68-c5de9d85b4a3}"=-
"{b5146c40-189a-4311-bda9-fbae3e023187}"=-

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{7009fcd4-05be-44f4-9583-93fe419ab7b0}"=-
"{b5146c40-189a-4311-bda9-fbae3e023187}"=-

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\DivoPlayer_is1]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved]
"{EE91F4CC-6BA2-424C-A1FE-64910CCB6A42}"=-

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BitDownload_is1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BitDownload]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BitGrabber_is1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BitGrabber]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BitRoll_is1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BitRoll]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DivoPlayer_is1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DivoPlayer]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Get-Torrent_is1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Get-Torrent]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\NetPumper_is1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\NetPumper]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\TorrentQ_is1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\TorrentQ]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\TorrentSoftware_is1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\TorrentSoftware]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\TorrentSpeeder_is1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\TorrentSpeeder]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Torrent101_is1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Torrent101]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinZix_is1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinZix]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\3wPlayer_is1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\3wPlayer]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Download Plugin (ActiveX)]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{2473BF20-CA0A-11DA-88DB-0050BF2938E1}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{2473BF2C-CA0A-11DA-88DB-0050BF2938E1}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F7258F6E-9F60-49C0-8C82-F0A0993D68E0}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{1145A909-A836-44B8-B03A-48D858B0F43E}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{10954590-2B3A-41EC-97BB-C95A5E646DA9}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{5A445F80-DAB5-4CD9-8A05-CD09AC145AA2}]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E19B133D-184E-4BBA-8A70-38489C9DD31B}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1AA406AB-F581-42AB-B4D1-31D2E13819EF}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EE91F4CC-6BA2-424C-A1FE-64910CCB6A42}]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{41CA7D4D-AE77-4B13-9459-E9AB7EFECAAD}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{A8B0F390-E6BF-4027-A4D4-1E4363F5E27B}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{A9E33220-0B05-11D7-88D2-444553540000}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E0ABBF96-17DC-44CA-96D0-6217064A97BA}]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/x-netpumper-detector]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\WinZixManager]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\WinZixManager]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\WinZixManager]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\NetPumperNNProxy.NetscapeInterface]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WinZixManager.WinZixShell]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WinZixManager.WinZixShell.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\BitDownload]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\BitGrabber]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\BitRoll]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Get-Torrent]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\NetPumper.AddUrl]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TorrentQ]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TorrentSoftware]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Torrent101]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winzix]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.zix]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.xnpd]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.torrent]

[-HKEY_LOCAL_MACHINE\SOFTWARE\NetPumper]

[-HKEY_CURRENT_USER\Software\NetPumper]
[-HKEY_CURRENT_USER\Software\WakeNet\BitDownload]
[-HKEY_CURRENT_USER\Software\WakeNet\BitGrabber]
[-HKEY_CURRENT_USER\Software\WakeNet\BitRoll]
[-HKEY_CURRENT_USER\Software\WakeNet\Get-Torrent]
[-HKEY_CURRENT_USER\Software\WakeNet\TorrentQ]
[-HKEY_CURRENT_USER\Software\WakeNet\WinZix]
[-HKEY_CURRENT_USER\Software\WakeNet]
[-HKEY_CURRENT_USER\Software\Download Plugin]

[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\BitDownload]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\BitGrabber]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\BitRoll]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\DivoPlayer]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Get-Torrent]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\TorrentQ]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\

   
Répondre à moeske

31

ric025, le 18 fév 2009 à 17:08:26

C'est pas du tout ça!!

Lis ça bien le tuto: http://www.malekal.com/tutorial_Lop_SD.php

Et veille à ce que l'UAC soit désactivé.

Désactive le contrôle des comptes utilisateurs (tu le réactiveras après ta désinfection):

==> Va dans "Démarrer" puis Panneau de configuration.
==> Double Clique sur l'icône Comptes d'utilisateurs et sur Activer ou désactiver le contrôle des comptes d'utilisateurs.
==> Clique sur Continuer.
==> Décoche la case Utiliser le contrôle des comptes d'utilisateurs pour vous aider à protéger votre ordinateur.
==> Valide par OK et redémarre.

   
Répondre à ric025

32

moeske, le 18 fév 2009 à 17:13:21

Ok mais j'arrete pour aujourd'hui car le ménage et le repas ne se font pas seul
merci de ton aide

   
Répondre à moeske

33

 ric025, le 18 fév 2009 à 17:18:51

ok mais j'arrete pour aujourd'hui car le ménage et le repas ne se font pas seul

--> Malheureusement!!

Ok, alors à plus tard.

A+ ;)

   
Répondre à ric025
Posez votre question Répondre
Ils ont besoin de votre aide