| 1 jlpjlp, le 26 mar 2008 à 19:00:19 | 4 pom, le 26 mar 2008 à 19:25:55Merci
pas de cid ou msn plus dans panneau de config
voici rapport combofix
ComboFix 08-03-25.4 - User 2008-03-26 19:12:04.1 - NTFSx86
Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6000.0.1252.1.1036.18.1608 [GMT 1:00]
Endroit: C:\Users\User\Desktop\Combo-Fix.exe
* Création d'un nouveau point de restauration
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\Program Files\Adssite Games Collection
C:\Program Files\Adssite Games Collection\BattlesOfHelicopters.exe
C:\Program Files\Adssite Games Collection\BobAndBill.exe
C:\Program Files\Adssite Games Collection\CrazyBlocks.exe
C:\Program Files\Adssite Games Collection\Lines.exe
C:\Program Files\Adssite Games Collection\uninstall.exe
C:\Program Files\Adssite Games Collection\VideoPool.exe
C:\Program Files\PlayMP3z
C:\Program Files\PlayMP3z\PlayMP3.exe
C:\Program Files\PlayMP3z\uninstall.exe
C:\ProgramData\Microsoft\Network\Downloader\qmgr0.dat
C:\ProgramData\Microsoft\Network\Downloader\qmgr1.dat
C:\Users\User\AppData\Roaming\urlredir.cfg
C:\Windows\system32\adssite-remove.exe
C:\Windows\system32\iebrowserc.dll
C:\Windows\system32\rightonadz-uninst.exe
C:\Windows\system32\x64
----- BITS: Possible sites infectés -----
hxxp://www.downlõj
.
((((((((((((((((((((((((((((( Fichiers créés 2008-02-26 to 2008-03-26 ))))))))))))))))))))))))))))))))))))
.
2008-03-13 19:09 . 2008-03-13 19:09 <REP> d-------- C:\VundoFix Backups
2008-03-12 18:31 . 2007-12-16 23:50 1,060,920 --a------ C:\Windows\System32\drivers\ntfs.sys
2008-03-12 18:31 . 2007-12-16 10:56 41,984 --a------ C:\Windows\System32\drivers\monitor.sys
2008-03-10 20:02 . 2008-03-10 19:51 691,545 --a------ C:\Windows\unins000.exe
2008-03-10 20:02 . 2008-03-10 20:02 2,541 --a------ C:\Windows\unins000.dat
2008-03-10 19:42 . 2008-03-10 21:08 <REP> d-------- C:\Users\All Users\Spybot - Search & Destroy
2008-03-10 19:42 . 2008-03-10 21:08 <REP> d-------- C:\ProgramData\Spybot - Search & Destroy
2008-03-10 19:42 . 2008-03-10 21:07 <REP> d-------- C:\Program Files\Spybot - Search & Destroy
2008-03-08 10:15 . 2008-03-08 10:15 49 --a------ C:\Windows\NeroDigital.ini
2008-03-07 18:57 . 2008-03-26 09:17 <REP> d-------- C:\Users\User\AppData\Roaming\AVG7
2008-03-07 18:57 . 2008-03-07 18:57 <REP> d-------- C:\Users\All Users\Grisoft
2008-03-07 18:57 . 2008-03-08 10:20 <REP> d-------- C:\Users\All Users\avg7
2008-03-07 18:57 . 2008-03-07 18:57 <REP> d-------- C:\ProgramData\Grisoft
2008-03-07 18:57 . 2008-03-08 10:20 <REP> d-------- C:\ProgramData\avg7
2008-03-07 18:57 . 2008-03-07 18:57 499,712 --a------ C:\Windows\System32\msvcp71.dll
2008-03-07 18:57 . 2008-03-07 18:57 9,216 --a------ C:\Windows\System32\avgwlntf.dll
2008-03-07 08:25 . 2008-03-26 19:12 <REP> d-------- C:\Users\User\AppData\Roaming\BitDownload
2008-03-07 08:20 . 2008-03-07 08:20 <REP> d-------- C:\Users\All Users\Time Dead Warn Default
2008-03-07 08:20 . 2008-03-07 08:20 <REP> d-------- C:\ProgramData\Time Dead Warn Default
2008-03-07 08:19 . 2008-03-07 08:20 <REP> d-------- C:\Users\All Users\Comp Part Web
2008-03-07 08:19 . 2008-03-07 08:20 <REP> d-------- C:\ProgramData\Comp Part Web
2008-03-07 08:18 . 2008-03-07 08:26 <REP> d-------- C:\Program Files\BitDownload
2008-03-04 09:58 . 2008-03-04 09:58 212,393,472 --a------ C:\Windows\MEMORY.DMP
2008-03-03 03:01 . 2008-01-02 17:07 920,088 --a------ C:\Windows\System32\igxpun.exe
2008-03-03 03:01 . 2006-11-10 16:25 319,456 --a------ C:\Windows\System32\difxapi.dll
2008-02-26 18:17 . 2006-10-26 19:56 32,592 --a------ C:\Windows\System32\msonpmon.dll
2008-02-26 18:16 . 2008-02-26 18:16 <REP> d-------- C:\Program Files\Microsoft Works
2008-02-26 18:15 . 2008-02-26 18:15 <REP> d-------- C:\Program Files\Microsoft.NET
2008-02-26 18:13 . 2008-02-26 18:13 <REP> d-------- C:\Program Files\Microsoft Visual Studio 8
2008-02-26 18:12 . 2008-03-20 18:54 <REP> d-------- C:\Users\All Users\Microsoft Help
2008-02-26 18:12 . 2008-03-20 18:54 <REP> d-------- C:\ProgramData\Microsoft Help
2008-02-26 18:10 . 2008-02-26 18:10 <REP> dr-h----- C:\MSOCache
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-03-26 17:02 --------- d-----w C:\Program Files\Common Files\Symantec Shared
2008-03-26 17:00 --------- d-----w C:\Program Files\Norton Security Scan
2008-03-26 08:16 --------- d-----w C:\Users\User\AppData\Roaming\OpenOffice.org2
2008-03-25 20:07 --------- d-----w C:\ProgramData\Google Updater
2008-03-14 15:30 --------- d-----w C:\ProgramData\Symantec
2008-03-14 10:46 --------- d-----w C:\Program Files\ContextAdvisor
2008-03-13 07:14 --------- d-----w C:\Program Files\Windows Mail
2008-03-10 19:32 --------- d-----w C:\Users\User\AppData\Roaming\LimeWire
2008-02-26 17:16 --------- d-----w C:\Program Files\MSBuild
2008-02-20 09:18 --------- d-----w C:\ProgramData\eMule
2008-02-20 09:17 --------- d-----w C:\Program Files\eMule
2008-02-20 08:59 84,763 ----a-w C:\Windows\System32\mysidesearch_sidebar_uninstall.exe
2008-02-20 08:59 46,300 ----a-w C:\Windows\System32\AdssiteSocial-uninstall.exe
2008-02-20 08:44 --------- d-----w C:\Program Files\FBrowsingAdvisor
2008-02-20 08:44 --------- d-----w C:\Program Files\FBrowserAdvisor
2008-02-14 07:31 194,560 ----a-w C:\Windows\System32\WebClnt.dll
2008-02-14 07:31 110,080 ----a-w C:\Windows\system32\drivers\mrxdav.sys
2008-02-14 07:28 45,112 ----a-w C:\Windows\system32\drivers\pciidex.sys
2008-02-14 07:28 3,504,696 ----a-w C:\Windows\System32\ntkrnlpa.exe
2008-02-14 07:28 3,470,392 ----a-w C:\Windows\System32\ntoskrnl.exe
2008-02-14 07:28 21,560 ----a-w C:\Windows\system32\drivers\atapi.sys
2008-02-14 07:28 17,464 ----a-w C:\Windows\system32\drivers\intelide.sys
2008-02-14 07:28 154,624 ----a-w C:\Windows\system32\drivers\nwifi.sys
2008-02-14 07:28 15,928 ----a-w C:\Windows\system32\drivers\pciide.sys
2008-02-14 07:28 109,624 ----a-w C:\Windows\system32\drivers\ataport.sys
2008-02-14 07:27 803,328 ----a-w C:\Windows\system32\drivers\tcpip.sys
2008-02-14 07:27 537,600 ----a-w C:\Windows\AppPatch\AcLayers.dll
2008-02-14 07:27 449,536 ----a-w C:\Windows\AppPatch\AcSpecfc.dll
2008-02-14 07:27 4,247,552 ----a-w C:\Windows\System32\GameUXLegacyGDFs.dll
2008-02-14 07:27 24,064 ----a-w C:\Windows\System32\netcfg.exe
2008-02-14 07:27 22,016 ----a-w C:\Windows\System32\netiougc.exe
2008-02-14 07:27 216,632 ----a-w C:\Windows\system32\drivers\netio.sys
2008-02-14 07:27 2,144,256 ----a-w C:\Windows\AppPatch\AcGenral.dll
2008-02-14 07:27 173,056 ----a-w C:\Windows\AppPatch\AcXtrnal.dll
2008-02-14 07:27 167,424 ----a-w C:\Windows\System32\tcpipcfg.dll
2008-02-14 07:27 1,686,528 ----a-w C:\Windows\System32\gameux.dll
2008-02-14 07:25 824,832 ----a-w C:\Windows\System32\wininet.dll
2008-02-14 07:25 56,320 ----a-w C:\Windows\System32\iesetup.dll
2008-02-14 07:25 52,736 ----a-w C:\Windows\AppPatch\iebrshim.dll
2008-02-14 07:25 26,624 ----a-w C:\Windows\System32\ieUnatt.exe
2008-02-12 07:24 --------- d-----w C:\Program Files\MSXML 4.0
2008-02-11 14:01 339,968 ----a-w C:\Windows\System32\mysidesearch_sidebar.dll
2008-02-11 08:31 --------- d-----w C:\Program Files\Common Files\Adobe
2008-02-11 08:28 --------- d-----w C:\Program Files\Google
2008-02-10 13:23 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-02-10 13:18 --------- d-----w C:\Program Files\Samsung
2008-02-10 13:17 --------- d-----w C:\Program Files\Common Files\InstallShield
2008-02-10 08:25 --------- d-----w C:\Users\User\AppData\Roaming\Ahead
2008-02-06 19:16 --------- d-----w C:\Program Files\Java
2008-02-06 19:11 --------- d-----w C:\Program Files\Common Files\Java
2008-02-06 07:31 211,000 ----a-w C:\Windows\system32\drivers\volsnap.sys
2008-02-05 06:56 174 --sha-w C:\Program Files\desktop.ini
2008-02-05 06:54 --------- d-----w C:\Program Files\Windows Sidebar
2008-02-05 06:54 --------- d-----w C:\Program Files\Windows Calendar
2008-02-04 21:59 704,000 ----a-w C:\Windows\System32\PhotoScreensaver.scr
2008-02-04 21:59 67,584 ----a-w C:\Windows\System32\wlanhlp.dll
2008-02-04 21:59 542,720 ----a-w C:\Windows\System32\sysmain.dll
2008-02-04 21:59 502,784 ----a-w C:\Windows\System32\wlansvc.dll
2008-02-04 21:59 47,104 ----a-w C:\Windows\System32\wlanapi.dll
2008-02-04 21:59 297,984 ----a-w C:\Windows\System32\wlansec.dll
2008-02-04 21:59 290,816 ----a-w C:\Windows\System32\wlanmsm.dll
2008-02-04 21:59 258,232 ----a-w C:\Windows\system32\drivers\acpi.sys
2008-02-04 21:59 24,064 ----a-w C:\Windows\System32\wtsapi32.dll
2008-02-04 21:59 2,923,520 ----a-w C:\Windows\explorer.exe
2008-02-04 21:59 2,027,008 ----a-w C:\Windows\System32\win32k.sys
2008-02-04 21:57 8,147,968 ----a-w C:\Windows\System32\wmploc.DLL
2008-02-04 21:57 7,680 ----a-w C:\Windows\System32\spwmp.dll
2008-02-04 21:57 4,096 ----a-w C:\Windows\System32\dxmasf.dll
2008-02-04 21:57 356,864 ----a-w C:\Windows\System32\MediaMetadataHandler.dll
2008-02-04 21:56 1,191,936 ----a-w C:\Windows\System32\msxml3.dll
2008-02-04 21:55 1,327,104 ----a-w C:\Windows\System32\quartz.dll
2008-02-04 21:54 9,728 ----a-w C:\Windows\System32\LAPRXY.DLL
2008-02-04 21:54 223,232 ----a-w C:\Windows\System32\WMASF.DLL
2008-02-04 21:54 1,335,296 ----a-w C:\Windows\System32\msxml6.dll
2008-02-04 21:52 84,480 ----a-w C:\Windows\System32\INETRES.dll
2008-02-04 21:52 737,792 ----a-w C:\Windows\System32\inetcomm.dll
2008-02-04 21:52 11,776 ----a-w C:\Windows\System32\sbunattend.exe
2008-02-04 21:51 84,992 ----a-w C:\Windows\system32\drivers\srvnet.sys
2008-02-04 21:51 788,992 ----a-w C:\Windows\System32\rpcrt4.dll
2008-02-04 21:51 58,368 ----a-w C:\Windows\system32\drivers\mrxsmb20.sys
2008-02-04 21:51 130,048 ----a-w C:\Windows\system32\drivers\srv2.sys
2008-02-04 21:51 101,888 ----a-w C:\Windows\system32\drivers\mrxsmb.sys
2008-02-04 21:50 750,080 ----a-w C:\Windows\System32\qmgr.dll
2008-02-04 19:25 --------- d-----w C:\Program Files\Microsoft LifeCam
2008-02-04 18:24 --------- dcsh--w C:\Program Files\Common Files\WindowsLiveInstaller
2008-02-04 18:24 --------- d-----w C:\Program Files\Windows Live
2008-02-04 18:19 --------- d-----w C:\ProgramData\WLInstaller
2008-02-04 14:39 53,080 ----a-w C:\Windows\System32\wuauclt.exe
2008-02-04 14:39 43,352 ----a-w C:\Windows\System32\wups2.dll
2008-02-04 14:39 1,712,984 ----a-w C:\Windows\System32\wuaueng.dll
2008-02-04 14:39 1,524,224 ----a-w C:\Windows\System32\wucltux.dll
2008-02-04 14:38 80,896 ----a-w C:\Windows\System32\wudriver.dll
2008-02-04 14:38 549,720 ----a-w C:\Windows\System32\wuapi.dll
2008-02-04 14:38 33,624 ----a-w C:\Windows\System32\wups.dll
2008-02-04 14:38 31,232 ----a-w C:\Windows\System32\wuapp.exe
2008-02-04 14:38 163,000 ----a-w C:\Windows\System32\wuwebv.dll
2008-02-04 14:34 32 ----a-w C:\Windows\system32\drivers\adidsl.cfg
2008-02-04 14:32 --------- d-----w C:\Users\User\AppData\Roaming\InstallShield
2008-02-04 14:32 --------- d-----w C:\Program Files\SAGEM
2008-02-04 14:27 --------- d-----w C:\Program Files\Wanadoo
.
((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{DDFA1356-E6ED-42a5-9D62-93211D424A90}]
2008-02-11 15:01 339968 --a------ C:\Windows\system32\mysidesearch_sidebar.dll
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [2008-02-04 22:52 1232896]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2006-12-23 18:05 143360]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-02-11 09:24 68856]
"MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [2007-10-18 11:34 5724184]
"campgrim"="C:\ProgramData\Bodybuildbuild.qdmxuk" [2008-03-08 16:28 4112]
"warn default inter for"="C:\ProgramData\Else Audio Enc.914v2c" [2008-03-07 08:20 307216]
"BitDownload"="C:\Program Files\BitDownload\BitDownload.exe" [2007-04-04 14:18 1103360]
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-01-28 11:43 2097488]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2007-07-30 16:51 1006264]
"NeroFilterCheck"="C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe" [2006-01-12 15:40 155648]
"SoundMAXPnP"="C:\Program Files\Analog Devices\Core\smax4pnp.exe" [2006-12-18 14:34 868352]
"LifeCam"="C:\Program Files\Microsoft LifeCam\LifeExp.exe" [2007-01-13 02:48 275800]
"VX1000"="C:\Windows\vVX1000.exe" [2006-12-06 00:38 707360]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11 132496]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-05-11 03:06 40048]
"GrooveMonitor"="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" [2007-08-24 07:00 33648]
"IgfxTray"="C:\Windows\system32\igfxtray.exe" [2008-01-02 17:07 141848]
"HotKeysCmds"="C:\Windows\system32\hkcmd.exe" [2008-01-02 17:06 166424]
"Persistence"="C:\Windows\system32\igfxpers.exe" [2008-01-02 17:07 133656]
"AVG7_CC"="C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [2008-03-07 18:57 579072]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"AVG7_Run"="C:\PROGRA~1\Grisoft\AVG7\avgw.exe" [2008-03-07 18:57 219136]
C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 2.0.lnk - C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe [2005-09-23 13:36:42 61440]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
Outil de mise … jour Google.lnk - C:\Program Files\Google\Google Updater\GoogleUpdater.exe [2008-02-11 09:24:57 125624]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgwlntf]
avgwlntf.dll 2008-03-07 18:57 9216 C:\Windows\System32\avgwlntf.dll
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{E4E0E471-AAD2-4534-81EF-C20937CAFEF0}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
"{45DDEEDF-B588-44BD-8E03-0AEBE19082CC}"= UDP:C:\Program Files\Microsoft LifeCam\LifeCam.exe:LifeCam.exe
"{6C5F8476-2661-4C6F-9364-1EB03D9F31FD}"= TCP:C:\Program Files\Microsoft LifeCam\LifeCam.exe:LifeCam.exe
"{B487EF37-9D40-4F90-8D11-CBE3C29F8404}"= UDP:C:\Program Files\Microsoft LifeCam\LifeExp.exe:LifeExp.exe
"{9DF15668-6664-4CDB-90E4-A015E3FB9D43}"= TCP:C:\Program Files\Microsoft LifeCam\LifeExp.exe:LifeExp.exe
"{4C079B24-BCE7-48AF-973A-6C6F1B80208A}"= UDP:C:\Program Files\LimeWire\LimeWire.exe:LimeWire
"{691EB71E-EA05-4A5F-A48C-6D4BF3C87225}"= TCP:C:\Program Files\LimeWire\LimeWire.exe:LimeWire
"{5DB0772F-54D3-45D6-A854-02275C8DB16B}"= TCP:6004|C:\Program Files\Microsoft Office\Office12\outlook.exe:Microsoft Office Outlook
"{C79C298F-4CFF-4983-8DB3-3B80B72AC4E7}"= UDP:C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:Microsoft Office Groove
"{A7233D01-ABC8-4222-94E2-6CB67A9198D8}"= TCP:C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:Microsoft Office Groove
"{B3144D83-4846-49AD-AB66-37A4AED19353}"= UDP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{342BFC4B-3CA8-466D-9D99-89E8BA1F9491}"= TCP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\RestrictedServices\Static\System]
"DFSR-1"= RPort=5722|UDP:%SystemRoot%\system32\svchost.exe|Svc=DFSR:Allow inbound TCP traffic|
R2 MSCamSvc;MSCamSvc;"C:\Program Files\Microsoft LifeCam\MSCamS32.exe" [2007-01-04 23:13]
R2 SBSDWSCService;SBSD Security Center Service;C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe [2008-01-28 11:43]
R3 e4usbaw;USB ADSL2 WAN Adapter;C:\Windows\system32\DRIVERS\e4usbaw.sys [2007-01-04 13:48]
R3 igfx;igfx;C:\Windows\system32\DRIVERS\igdkmd32.sys [2008-01-02 16:48]
R3 VX1000;VX-1000;C:\Windows\system32\DRIVERS\VX1000.sys [2006-12-06 00:39]
S2 E4LOADER;General Purpose USB Driver (e4ldr.sys);C:\Windows\system32\Drivers\e4ldr.sys [2007-01-04 13:47]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{745a172e-d30e-11dc-9196-001bfc31b720}]
\shell\AutoRun\command - J:\LaunchU3.exe
*Newly Created Service* - ERASERUTILDRV10741
.
Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
"2008-03-26 17:58:20 C:\Windows\Tasks\Norton Security Scan.job"
- C:\Program Files\Norton Security Scan\Nss.exe
"2008-03-26 09:06:05 C:\Windows\Tasks\User_Feed_Synchronization-{7A77724C-F666-405A-8211-94754C0DF96A}.job"
- C:\Windows\system32\msfeedssync.exe
.
**************************************************************************
catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-03-26 19:14:07
Windows 6.0.6000 NTFS
Balayage processus cachés ...
Balayage caché autostart entries ...
Balayage des fichiers cachés ...
Scan terminé avec succès
Les fichiers cachés: 0
**************************************************************************
.
Temps d'accomplissement: 2008-03-26 19:14:39
ComboFix-quarantined-files.txt 2008-03-26 18:14:36
.
2008-03-26 08:23:51 --- E O F --- | 5 jlpjlp, le 26 mar 2008 à 19:35:22Parfait , une partie a été nettoyée
colle un hijakchits | 6 pom, le 26 mar 2008 à 19:40:56Voici le rapport hijack
Logfile of HijackThis v1.99.1
Scan saved at 19:39:42, on 26/03/2008
Platform: Unknown Windows (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16609)
Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Windows\vVX1000.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\system32\igfxsrvc.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Grisoft\AVG7\avgcc.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\BitDownload\BitDownload.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\OpenOffice.org 2.0\program\soffice.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\OpenOffice.org 2.0\program\soffice.BIN
C:\Program Files\Internet Explorer\ieuser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Windows\system32\Macromed\Flash\FlashUtil9e.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1D8282E6-BC4F-469B-AAED-7E4FF077AD93} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O2 - BHO: MySidesearch Search Assistant - {DDFA1356-E6ED-42a5-9D62-93211D424A90} - C:\Windows\system32\mysidesearch_sidebar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [VX1000] C:\Windows\vVX1000.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [campgrim] "C:\ProgramData\Bodybuildbuild.qdmxuk"
O4 - HKCU\..\Run: [warn default inter for] "C:\ProgramData\Else Audio Enc.914v2c"
O4 - HKCU\..\Run: [BitDownload] "C:\Program Files\BitDownload\BitDownload.exe" /minimized
O4 - Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nlaapi.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\napinsp.dll
O11 - Options group: [INTERNATIONAL] International*
O13 - Gopher Prefix:
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://javadl-esd.sun.com/update/1.6.0/jinstall-6u3-windows-i586-jc.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game05.zylom.com/activex/zylomgamesplayer.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{B8297A5E-8B7A-4815-9165-7C5C15F5EFCB}: NameServer = 81.253.149.1 80.10.246.3
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O20 - Winlogon Notify: avgwlntf - C:\Windows\SYSTEM32\avgwlntf.dll
O20 - Winlogon Notify: igfxcui - C:\Windows\SYSTEM32\igfxdev.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG7 Resident Shield Service (AvgCoreSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgrssvc.exe
O23 - Service: @%SystemRoot%\ehome\ehstart.dll,-101 (ehstart) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - %ProgramFiles%\Windows Media Player\wmpnetwk.exe (file missing) | 7 jlpjlp, le 26 mar 2008 à 19:59:58 | 8 pom, le 26 mar 2008 à 20:27:22Voici rapport otmovelt2
File/Folder C:\ProgramData\Bodybuildbuild.qdmxu not found.
File/Folder C:\Program Files\BitDownload\BitDownload.exe not found.
File/Folder C:\Windows\system32\mysidesearch_sidebar.dll not found.
OTMoveIt2 by OldTimer - Version 1.0.21 log created on 03262008_201803 | 9 jlpjlp, le 26 mar 2008 à 20:27:52 | 10 pom, le 26 mar 2008 à 20:39:02Spybot me dit avoir "décelé qu'un élément important du registre a été modifié"
catégorie:system startup user entry
modif: valeur supprimé
élément: campgrim
ancienne valeur C:\programdata\bodybuildbuild.qdmxuk
Il me demande si je doit accepter ou refuser la modif.
merci de me dire la marche à suivre | Tu accepte tout ce qui est proposé pendant la desinfection
(desactive le tea timer le temps de la desinfection: lance spybot puis MODE puis MODE AVANCE puis OUTIL puis RESIDENT et desactive le tea timer) | 12 pom, le 27 mar 2008 à 21:02:52Bonjour jlpjlp,
comme convenu j'ai lancé un scan complet panda. mais ça fait 24 h et j'en suis à 22% 1%/h à ce compte je ne suis pas rendu est-ce normal?
Merci
p.s:Cela dit je n'ai plus de pages cid | 14 pom, le 29 mar 2008 à 18:45:01Voici le rapport de panda, mais il n'est pas complet le rapport à été stoppé à 25%...
;***********************************************************************************************************************************************************************************
ANALYSIS: 2008-03-27 21:40:58
PROTECTIONS: 1
MALWARE: 22
SUSPECTS: 0
;***********************************************************************************************************************************************************************************
PROTECTIONS
Description Version Active Updated
;===================================================================================================================================================================================
AVG 7.5.519 7.5.519 Yes Yes
;===================================================================================================================================================================================
MALWARE
Id Description Type Active Severity Disinfectable Disinfected Location
;===================================================================================================================================================================================
00147814 Cookie/AspinallsOnlineCasino TrackingCookie No 0 Yes No C:\Users\User\AppData\Roaming\Microsoft\Windows\Cookies\Low\user@pacificpoker[1].txt
00167704 Cookie/Xiti TrackingCookie No 0 Yes No C:\Users\User\AppData\Roaming\Microsoft\Windows\Cookies\Low\user@xiti[1].txt
00167709 Cookie/fe.lea.lycos TrackingCookie No 0 Yes No C:\Users\User\AppData\Roaming\Microsoft\Windows\Cookies\Low\user@fe.lea.lycos[1].txt
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Users\User\AppData\Roaming\Microsoft\Windows\Cookies\Low\user@ad.yieldmanager[2].txt
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Users\User\AppData\Roaming\Microsoft\Windows\Cookies\Low\user@serving-sys[2].txt
00168093 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Users\User\AppData\Roaming\Microsoft\Windows\Cookies\Low\user@bs.serving-sys[1].txt
00168106 Cookie/Weborama TrackingCookie No 0 Yes No C:\Users\User\AppData\Roaming\Microsoft\Windows\Cookies\Low\user@weborama[2].txt
00168106 Cookie/Weborama TrackingCookie No 0 Yes No C:\Users\User\AppData\Roaming\Microsoft\Windows\Cookies\user@weborama[1].txt
00168109 Cookie/Adtech TrackingCookie No 0 Yes No C:\Users\User\AppData\Roaming\Microsoft\Windows\Cookies\Low\user@adtech[1].txt
00168116 Cookie/Comclick TrackingCookie No 0 Yes No C:\Users\User\AppData\Roaming\Microsoft\Windows\Cookies\Low\user@fl01.ct2.comclick[2].txt
00170554 Cookie/Overture TrackingCookie No 0 Yes No C:\Users\User\AppData\Roaming\Microsoft\Windows\Cookies\Low\user@overture[1].txt
00191644 Cookie/adultfriendfinder TrackingCookie No 0 Yes No C:\Users\User\AppData\Roaming\Microsoft\Windows\Cookies\Low\user@adultfriendfinder[2].txt
02649837 Application/Playmp3z HackTools No 0 Yes No C:\QooBox\Quarantine\C\Program Files\PlayMP3z\PlayMP3.exe.vir
02893893 Trj/Bancos.RQ Virus/Trojan No 0 No No C:\Users\User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\6LEVDFNV\ComboFix[1].exe[327882R2FWJFW\pv.cfexe]
02893893 Trj/Bancos.RQ Virus/Trojan No 0 No No C:\Users\User\Desktop\Combo-Fix.exe[327882R2FWJFW\pv.cfexe]
02899326 Adware/AdRotator Adware No 0 No No C:\Users\User\Documents\LimeWire\Saved\[Full] celtique with Bonus.zip[setup.exe][²ÜÇ\bann.exe][■%%\gzmrt.dll]
02899326 Adware/AdRotator Adware No 0 No No C:\Users\User\Documents\LimeWire\Saved\[Full] dan debout la ddans with Bonus.zip[setup.exe][²ÜÇ\bann.exe][■%%\gzmrt.dll]
02900692 Application/Playmp3z HackTools No 0 Yes No C:\Users\User\Documents\LimeWire\Saved\map debout la ddans.zip[Setup.exe]
02900692 Application/Playmp3z HackTools No 0 Yes No C:\Users\User\Desktop\ZIZIQUE\music\MAP Deboula d'dans\Setup.exe
02900808 Adware/TrafficSol Adware No 0 No No C:\Users\User\Documents\LimeWire\Saved\celtique wet and wild.zip[setup.exe][²ÜÇ\bann.exe][■%%\sprt_ads.dll]
02900808 Adware/TrafficSol Adware No 0 No No C:\Users\User\Documents\LimeWire\Saved\[Full] map debout la ddans with Bonus.zip[setup.exe][²ÜÇ\bann.exe][■%%\sprt_ads.dll]
02901019 Adware/VapSup Adware No 0 Yes No C:\QooBox\Quarantine\C\Windows\System32\iebrowserc.dll.vir
02904726 Adware/AdRotator Adware No 0 No No C:\Users\User\Documents\LimeWire\Saved\[Full] celtique with Bonus.zip[setup.exe][²ÜÇ\bann.exe]
02904726 Adware/AdRotator Adware No 0 No No C:\Users\User\Documents\LimeWire\Saved\[Full] dan debout la ddans with Bonus.zip[setup.exe][²ÜÇ\bann.exe]
02904747 Adware/AdRotator Adware No 0 No No C:\Users\User\Documents\LimeWire\Saved\[Full] celtique with Bonus.zip[setup.exe][²ÜÇ\adw.exe][²ÜÇ\nsBrowserOpt.dll]
02904747 Adware/AdRotator Adware No 0 No No C:\Users\User\Documents\LimeWire\Saved\[Full] dan debout la ddans with Bonus.zip[setup.exe][²ÜÇ\adw.exe][²ÜÇ\nsBrowserOpt.dll]
02904747 Adware/AdRotator Adware No 0 Yes No C:\Program Files\Mozilla Firefox\components\nsBrowserOpt.dll
02905991 Spyware/AdClicker Spyware No 1 No No C:\Users\User\Documents\LimeWire\Saved\[Full] dan debout la ddans with Bonus.zip[setup.exe][²ÜÇ\adw.exe]
02905991 Spyware/AdClicker Spyware No 1 No No C:\Users\User\Documents\LimeWire\Saved\[Full] celtique with Bonus.zip[setup.exe][²ÜÇ\adw.exe]
02905994 Adware/BHO Adware No 0 No No C:\Users\User\Documents\LimeWire\Saved\[Full] celtique with Bonus.zip[setup.exe][²ÜÇ\adw.exe][²ªÇ]
02905994 Adware/BHO Adware No 0 No No C:\Users\User\Documents\LimeWire\Saved\[Full] dan debout la ddans with Bonus.zip[setup.exe][²ÜÇ\adw.exe][²ªÇ]
02905998 Adware/WebHancer Adware No 0 Yes No C:\Users\User\Documents\LimeWire\Saved\[Full] celtique with Bonus.zip[setup.exe]
02905998 Adware/WebHancer Adware No 0 Yes No C:\Users\User\Documents\LimeWire\Saved\[Full] dan debout la ddans with Bonus.zip[setup.exe]
;===================================================================================================================================================================================
SUSPECTS
Location
;===================================================================================================================================================================================
;=================================================================================================================================================================================== |
| Slt
vire ce qui est dnas le dossier quarantine en allant dans poste de travail puis c puis qoobox
__________________
scan avec
MalwareByte's Anti-Malware et vire ce qui est trouvé
http://www.malekal.com/tutorial_MalwareBytes_AntiMalware.php
___________________
télécharge OTMoveIt
http://download.bleepingcomputer.com/oldtimer/OTMoveIt2.exe (de Old_Timer) sur ton Bureau. Ou sur http://up.sur-la-toile.com/sadW
double-clique sur OTMoveIt.exe pour le lancer.
copie la liste qui se trouve en citation ci-dessous,
et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved.
Citation :
C:\QooBox\Quarantine\C\Program Files\PlayMP3z\PlayMP3.exe.vir
C:\Users\User\Documents\LimeWire\Saved\[Full] celtique with Bonus.zip
C:\Users\User\Documents\LimeWire\Saved\[Full] dan debout la ddans with Bonus.zip
C:\Users\User\Documents\LimeWire\Saved\map debout la ddans.zip
C:\Users\User\Desktop\ZIZIQUE\music\MAP Deboula d'dans\Setup.exe
C:\Users\User\Documents\LimeWire\Saved\celtique wet and wild.zip
C:\Users\User\Documents\LimeWire\Saved\[Full] map debout la ddans with Bonus.zip
C:\QooBox\Quarantine\C\Windows\System32\iebrowserc.dll.vir
C:\Users\User\Documents\LimeWire\Saved\[Full] celtique with Bonus.zip
C:\Users\User\Documents\LimeWire\Saved\[Full] dan debout la ddans with Bonus.zip
C:\Users\User\Documents\LimeWire\Saved\[Full] celtique with Bonus.zip
C:\Users\User\Documents\LimeWire\Saved\[Full] dan debout la ddans with Bonus.zip
C:\Program Files\Mozilla Firefox\components\nsBrowserOpt.dll
C:\Users\User\Documents\LimeWire\Saved\[Full] dan debout la ddans with Bonus.zip
C:\Users\User\Documents\LimeWire\Saved\[Full] celtique with Bonus.zip
C:\Users\User\Documents\LimeWire\Saved\[Full] celtique with Bonus.zip[
C:\Users\User\Documents\LimeWire\Saved\[Full] dan debout la ddans with Bonus.zip
C:\Users\User\Documents\LimeWire\Saved\[Full] celtique with Bonus.zip
C:\Users\User\Documents\LimeWire\Saved\[Full] dan debout la ddans with Bonus.zip
clique sur MoveIt! pour lancer la suppression.
le résultat apparaitra dans le cadre "Results".
clique sur Exit pour fermer.
poste le rapport situé dans C:\_OTMoveIt\MovedFiles.
il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes.
__________________
vire ce qui est dnas moved files en allant ddans poste de travail puis c puis otmovit
______
encore des soucis?? |
| 16 pom, le 30 mar 2008 à 18:43:50Slt,
Ci-joint rapport otmovelt
File/Folder not found.
File/Folder C:\QooBox\Quarantine\C\Program Files\PlayMP3z\PlayMP3.exe.vir not found.
File/Folder C:\Users\User\Documents\LimeWire\Saved\[Full] celtique with Bonus.zip not found.
File/Folder C:\Users\User\Documents\LimeWire\Saved\[Full] dan debout la ddans with Bonus.zip not found.
File/Folder C:\Users\User\Documents\LimeWire\Saved\map debout la ddans.zip not found.
File/Folder C:\Users\User\Desktop\ZIZIQUE\music\MAP Deboula d'dans\Setup.exe not found.
File/Folder C:\Users\User\Documents\LimeWire\Saved\celtique wet and wild.zip not found.
File/Folder C:\Users\User\Documents\LimeWire\Saved\[Full] map debout la ddans with Bonus.zip not found.
File/Folder C:\QooBox\Quarantine\C\Windows\System32\iebrowserc.dll.vir not found.
File/Folder C:\Users\User\Documents\LimeWire\Saved\[Full] celtique with Bonus.zip not found.
File/Folder C:\Users\User\Documents\LimeWire\Saved\[Full] dan debout la ddans with Bonus.zip not found.
File/Folder C:\Users\User\Documents\LimeWire\Saved\[Full] celtique with Bonus.zip not found.
File/Folder C:\Users\User\Documents\LimeWire\Saved\[Full] dan debout la ddans with Bonus.zip not found.
File/Folder C:\Program Files\Mozilla Firefox\components\nsBrowserOpt.dll not found.
File/Folder C:\Users\User\Documents\LimeWire\Saved\[Full] dan debout la ddans with Bonus.zip not found.
File/Folder C:\Users\User\Documents\LimeWire\Saved\[Full] celtique with Bonus.zip not found.
File/Folder C:\Users\User\Documents\LimeWire\Saved\[Full] celtique with Bonus.zip[ not found.
File/Folder C:\Users\User\Documents\LimeWire\Saved\[Full] dan debout la ddans with Bonus.zip not found.
File/Folder C:\Users\User\Documents\LimeWire\Saved\[Full] celtique with Bonus.zip not found.
File/Folder C:\Users\User\Documents\LimeWire\Saved\[Full] dan debout la ddans with Bonus.zip not found.
Created on 03/30/2008 18:40:23
... |
| 17 pom, le 30 mar 2008 à 18:47:31Recoucou
je ne peux pas supprimer tous les fichiers car j'ai un composant de Firfox mozilla. ce doit être fait par un administrateur... |
| 19 pom, le 30 mar 2008 à 19:48:12Tout à l'air OK maintenant. un grand merci jlpjlp
tchao |
| Bonne continuation
tu peux mettre resolu au dessus de ton premier message |
|
|
|
|
|
|
|
|
|
|
Agencer page html
