virus -YES!- ?Résolu/Fermé

Question

Bonjour,
il semble que mon ordi ait été infecté par un (ou plusieurs ?) virus. Je n'avais pas d'antivirus jusqu'à présent (ordi acheté récemment et oublié de télécharger AntiVir, cest stupide je sais...).

1.Quand je lance Internet explorer, une mention s'affiche dans le titre de la fenetre. exemple: si je lance GOOGLE --> "GOOGLE - YES! 2CARP X10SHun". Quel que soit le site sur lequel je vais, le nom du site est suivi par cette mention "YES...". Javais repéré un fichier HTML sur mon disque C mais ne pouvait l'effacer.

2.Récemment lors d'un achat de musique sur itunes store, jai également reçu le message "il n'y a pas de CD dans le lecteru E:" avec ANNULER, RECOMMENCER, IGNORER. Fenetre ouverte 3 ou 4 fois puis ordi sest eteint avec message alerte Windows. 

3. Quand connectée à Internet, et que je n'utilise pas ordi depuis qq minutes jai parfois des popups avec caractères asiatiques (on dirait un site de rencontre louche .... , promis je nai jamais surfé sur ce type de sites). 

Jai téléchargé ANtiVir et lancé le scan une 1ère fois en mode sans échec, il a mis des fichiers en quarantaine que j'ai supprimés (dont un qui contenait le mot YES). Je relance ordi en mode normal, toujours cette mention YES 2 CAR X10Shun sur les fenetres Internet Explorer :-(. Et toujours le fichier HTML qui etait sur mon disque mais cette fois jai pu le mettre à la corbeille et la vider. Mais jai toujours la mention YES. 

J'ai effectué un deuxième scan (en mode normal), ci-dessous le rapport:


Avira AntiVir Personal
Report file date: vendredi 8 janvier 2010  04:58

Scanning for 1508687 virus strains and unwanted programs.

Licensee        : Avira AntiVir Personal - FREE Antivirus
Serial number   : 0000149996-ADJIE-0000001
Platform        : Windows XP
Windows version : (Service Pack 3)  [5.1.2600]
Boot mode       : Save mode
Username        : Administrateur
Computer name   : DUBAI

Version information:
BUILD.DAT       : 9.0.0.415     21609 Bytes  08/11/2009 10:00:00
AVSCAN.EXE      : 9.0.3.10     466689 Bytes  13/10/2009 10:26:33
AVSCAN.DLL      : 9.0.3.0       40705 Bytes  27/02/2009 09:58:24
LUKE.DLL        : 9.0.3.2      209665 Bytes  20/02/2009 10:35:49
LUKERES.DLL     : 9.0.2.0       12033 Bytes  27/02/2009 09:58:52
VBASE000.VDF    : 7.10.0.0   19875328 Bytes  06/11/2009 06:35:52
VBASE001.VDF    : 7.10.1.0    1372672 Bytes  19/11/2009 20:13:04
VBASE002.VDF    : 7.10.1.1       2048 Bytes  19/11/2009 20:13:04
VBASE003.VDF    : 7.10.1.2       2048 Bytes  19/11/2009 20:13:05
VBASE004.VDF    : 7.10.1.3       2048 Bytes  19/11/2009 20:13:05
VBASE005.VDF    : 7.10.1.4       2048 Bytes  19/11/2009 20:13:05
VBASE006.VDF    : 7.10.1.5       2048 Bytes  19/11/2009 20:13:05
VBASE007.VDF    : 7.10.1.6       2048 Bytes  19/11/2009 20:13:05
VBASE008.VDF    : 7.10.1.7       2048 Bytes  19/11/2009 20:13:05
VBASE009.VDF    : 7.10.1.8       2048 Bytes  19/11/2009 20:13:06
VBASE010.VDF    : 7.10.1.9       2048 Bytes  19/11/2009 20:13:06
VBASE011.VDF    : 7.10.1.10      2048 Bytes  19/11/2009 20:13:06
VBASE012.VDF    : 7.10.1.11      2048 Bytes  19/11/2009 20:13:06
VBASE013.VDF    : 7.10.1.79    209920 Bytes  25/11/2009 20:13:07
VBASE014.VDF    : 7.10.1.128    197632 Bytes  30/11/2009 20:13:07
VBASE015.VDF    : 7.10.1.178    195584 Bytes  07/12/2009 20:13:14
VBASE016.VDF    : 7.10.1.224    183296 Bytes  14/12/2009 20:13:20
VBASE017.VDF    : 7.10.1.247    182272 Bytes  15/12/2009 20:13:26
VBASE018.VDF    : 7.10.2.30    198144 Bytes  21/12/2009 20:13:33
VBASE019.VDF    : 7.10.2.63    187392 Bytes  24/12/2009 20:13:45
VBASE020.VDF    : 7.10.2.93    195072 Bytes  29/12/2009 20:13:51
VBASE021.VDF    : 7.10.2.131    201216 Bytes  07/01/2010 20:13:58
VBASE022.VDF    : 7.10.2.132      2048 Bytes  07/01/2010 20:13:58
VBASE023.VDF    : 7.10.2.133      2048 Bytes  07/01/2010 20:13:58
VBASE024.VDF    : 7.10.2.134      2048 Bytes  07/01/2010 20:13:58
VBASE025.VDF    : 7.10.2.135      2048 Bytes  07/01/2010 20:13:58
VBASE026.VDF    : 7.10.2.136      2048 Bytes  07/01/2010 20:13:58
VBASE027.VDF    : 7.10.2.137      2048 Bytes  07/01/2010 20:13:59
VBASE028.VDF    : 7.10.2.138      2048 Bytes  07/01/2010 20:13:59
VBASE029.VDF    : 7.10.2.139      2048 Bytes  07/01/2010 20:13:59
VBASE030.VDF    : 7.10.2.140      2048 Bytes  07/01/2010 20:13:59
VBASE031.VDF    : 7.10.2.144     98816 Bytes  07/01/2010 20:14:01
Engineversion   : 8.2.1.130
AEVDF.DLL       : 8.1.1.2      106867 Bytes  08/11/2009 06:38:52
AESCRIPT.DLL    : 8.1.3.7      594296 Bytes  07/01/2010 20:15:11
AESCN.DLL       : 8.1.3.0      127348 Bytes  07/01/2010 20:15:03
AESBX.DLL       : 8.1.1.1      246132 Bytes  08/11/2009 06:38:44
AERDL.DLL       : 8.1.3.4      479605 Bytes  07/01/2010 20:15:02
AEPACK.DLL      : 8.2.0.4      422263 Bytes  07/01/2010 20:14:52
AEOFFICE.DLL    : 8.1.0.38     196987 Bytes  08/11/2009 06:38:38
AEHEUR.DLL      : 8.1.0.192   2195833 Bytes  07/01/2010 20:14:45
AEHELP.DLL      : 8.1.9.0      237943 Bytes  07/01/2010 20:14:14
AEGEN.DLL       : 8.1.1.83     369014 Bytes  07/01/2010 20:14:11
AEEMU.DLL       : 8.1.1.0      393587 Bytes  08/11/2009 06:38:26
AECORE.DLL      : 8.1.9.1      180598 Bytes  07/01/2010 20:14:05
AEBB.DLL        : 8.1.0.3       53618 Bytes  08/11/2009 06:38:20
AVWINLL.DLL     : 9.0.0.3       18177 Bytes  12/12/2008 07:47:59
AVPREF.DLL      : 9.0.3.0       44289 Bytes  26/08/2009 14:14:02
AVREP.DLL       : 8.0.0.3      155905 Bytes  20/01/2009 13:34:28
AVREG.DLL       : 9.0.0.0       36609 Bytes  05/12/2008 09:32:09
AVARKT.DLL      : 9.0.0.3      292609 Bytes  24/03/2009 14:05:41
AVEVTLOG.DLL    : 9.0.0.7      167169 Bytes  30/01/2009 09:37:08
SQLITE3.DLL     : 3.6.1.0      326401 Bytes  28/01/2009 14:03:49
SMTPLIB.DLL     : 9.2.0.25      28417 Bytes  02/02/2009 07:21:33
NETNT.DLL       : 9.0.0.0       11521 Bytes  05/12/2008 09:32:10
RCIMAGE.DLL     : 9.0.0.25    2438913 Bytes  15/05/2009 14:39:58
RCTEXT.DLL      : 9.0.73.0      86785 Bytes  13/10/2009 11:25:47

Configuration settings for the scan:
Jobname.............................: Complete system scan
Configuration file..................: c:\program files\avira\antivir desktop\sysscan.avp
Logging.............................: low
Primary action......................: interactive
Secondary action....................: ignore
Scan master boot sector.............: on
Scan boot sector....................: on
Boot sectors........................: C:, 
Process scan........................: on
Scan registry.......................: on
Search for rootkits.................: on
Integrity checking of system files..: off
Scan all files......................: All files
Scan archives.......................: on
Recursion depth.....................: 20
Smart extensions....................: on
Macro heuristic.....................: on
File heuristic......................: medium

Start of the scan: vendredi 8 janvier 2010  04:58

Starting search for hidden objects.
The driver could not be initialized.

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
11 processes with 11 modules were scanned

Starting master boot sector scan:
Master boot sector HD0
    [INFO]      No virus was found!

Start scanning boot sectors:
Boot sector 'C:\'
    [INFO]      No virus was found!

Starting to scan executable files (registry).
The registry was scanned ( '60' files ).


Starting the file scan:

Begin scan in 'C:\' <OS>
C:\pagefile.sys
    [WARNING]   The file could not be opened!
    [NOTE]      This file is a Windows system file.
    [NOTE]      This file cannot be opened for scanning.


End of the scan: vendredi 8 janvier 2010  06:19
Used time:  1:20:47 Hour(s)

The scan has been done completely.

   8452 Scanned directories
 285533 Files were scanned
      0 Viruses and/or unwanted programs were found
      0 Files were classified as suspicious
      0 files were deleted
      0 Viruses and unwanted programs were repaired
      0 Files were moved to quarantine
      0 Files were renamed
      1 Files cannot be scanned
 285532 Files not concerned
   8248 Archives were scanned
      1 Warnings
      1 Notes
Qqun peut-il m'aider ??? 

merci mille fois!!

plopus · Answer

SALUT

Télécharge Random's System Information Tool (RSIT) de Random/Random, et enregistre le sur ton Bureau.
http://images.malwareremoval.com/random/RSIT.exe
• Double clique sur RSIT.exe pour lancer l'outil.
• Clique sur "Continue" à l'écran Disclaimer.
• Si l'outil HijackThis n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu s'il te le demande) et tu devras accepter la licence.
• Une fois le scan terminé, deux rapports vont apparaître : poste les dans deux messages séparés stp

Jennifer3400 · Answer

info.txt logfile of random's system information tool 1.06 2010-01-08 07:56:39

======Uninstall list======

-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{88564CEF-20A5-4EF2-A05F-309F2EBA9B06}\setup.exe" -l0x40c 
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BC12448A-0B41-4E11-B242-B1129512F5B7}\setup.exe" -l0x40c 
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Reader 9 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A90000000001}
Advanced Audio FX Engine-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{88564CEF-20A5-4EF2-A05F-309F2EBA9B06}\setup.exe" -l0x40c  /remove
Apple Mobile Device Support-->MsiExec.exe /I{8355F970-601D-442D-A79B-1D7DB4F24CAD}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir Desktop\setup.exe /REMOVE
Bonjour-->MsiExec.exe /I{07287123-B8AC-41CE-8346-3D777245C35B}
CapsLKNotify-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\1050\INTEL3~1\IDriver.exe /M{90578106-70AF-4198-B9DE-1924FA83B03A} 
Correctif pour Windows XP (KB961118)-->"C:\WINDOWS\$NtUninstallKB961118$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB970653-v3)-->"C:\WINDOWS\$NtUninstallKB970653-v3$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB976098-v2)-->"C:\WINDOWS\$NtUninstallKB976098-v2$\spuninst\spuninst.exe"
Dell Support Center (Logiciel de support)-->MsiExec.exe /X{E3BFEE55-39E2-4BE0-B966-89FE583822C1}
Dell Touchpad-->rundll32.exe "C:\Program Files\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall
Dell Video Chat-->C:\Program Files\Dell Video Chat\uninst.exe
Dell Webcam Central-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BC12448A-0B41-4E11-B242-B1129512F5B7}\setup.exe" -l0x40c  /remove
Galerie de photos Windows Live-->MsiExec.exe /X{B131E59D-202C-43C6-84C9-68F0C37541F1}
GIMP 2.6.7-->"C:\Program Files\GIMP-2.0\setup\unins000.exe"
Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Google Earth-->MsiExec.exe /X{C084BC61-E537-11DE-8616-005056806466}
GoToAssist 8.0.0.514-->C:\Program Files\Citrix\GoToAssist\514\G2AUninstaller.exe /uninstall
HijackThis 2.0.2-->"C:\Program Files	rend micro\HijackThis.exe" /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall  /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
Hotfix for Windows XP (KB915800-v4)-->"C:\WINDOWS\$NtUninstallKB915800-v4$\spuninst\spuninst.exe"
Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{46ABBC54-1872-4AA3-95E2-F2C063A63F31}
Integrated Webcam Driver (1.01.01.0116)  -->C:\WINDOWS\CtDrvIns.exe -uninstall -script OA012.uns -plugin OA012Pin.dll -pluginres OA012Pin.crl -nodisconprompt -langid 0x040C
Intel(R) Graphics Media Accelerator Driver-->C:\WINDOWS\system32\igxpun.exe -uninstall
iTunes-->MsiExec.exe /I{5D601655-6D54-4384-B52C-17EC5385FBBD}
Jauge de batterie-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\1050\INTEL3~1\IDriver.exe /M{543A4F31-9590-416A-A621-42CEB4C6A694} /l1036 
Java(TM) 6 Update 11-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
Junk Mail filter update-->MsiExec.exe /I{E2DFE069-083E-4631-9B6C-43C48E991DE5}
Live! Cam Avatar Creator-->C:\Program Files\InstallShield Installation Information\{65D0C510-D7B6-4438-9FC8-E6B91115AB0D}\setup.exe -runfromtemp -l0x040c -removeonly /remove
Microsoft .NET Framework 1.1 Security Update (KB953297)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M953297\M953297Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 French Language Pack-->MsiExec.exe /X{E3C080B0-23F5-49AF-89F8-8E8DBC89E659}
Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
Microsoft Kernel-Mode Driver Framework Feature Pack 1.7-->"C:\WINDOWS\$NtUninstallWdf01007$\spuninst\spuninst.exe"
Microsoft Office PowerPoint Viewer 2007 (French)-->MsiExec.exe /X{95120000-00AF-040C-0000-0000000FF1CE}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Works-->MsiExec.exe /I{3B160861-7250-451E-B5EE-8B92BF30A710}
Mise à jour de sécurité pour Lecteur Windows Media (KB954155)-->"C:\WINDOWS\$NtUninstallKB954155_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB968816)-->"C:\WINDOWS\$NtUninstallKB968816_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB973540)-->"C:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923689)-->"C:\WINDOWS\$NtUninstallKB923689$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956744)-->"C:\WINDOWS\$NtUninstallKB956744$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956844)-->"C:\WINDOWS\$NtUninstallKB956844$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958869)-->"C:\WINDOWS\$NtUninstallKB958869$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960859)-->"C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961371)-->"C:\WINDOWS\$NtUninstallKB961371$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB968537)-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969059)-->"C:\WINDOWS\$NtUninstallKB969059$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969897)-->"C:\WINDOWS\$NtUninstallKB969897$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969898)-->"C:\WINDOWS\$NtUninstallKB969898$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969947)-->"C:\WINDOWS\$NtUninstallKB969947$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB970430)-->"C:\WINDOWS\$NtUninstallKB970430$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971486)-->"C:\WINDOWS\$NtUninstallKB971486$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971557)-->"C:\WINDOWS\$NtUninstallKB971557$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971633)-->"C:\WINDOWS\$NtUninstallKB971633$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971657)-->"C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971961)-->"C:\WINDOWS\$NtUninstallKB971961$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB972260)-->"C:\WINDOWS\$NtUninstallKB972260$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973346)-->"C:\WINDOWS\$NtUninstallKB973346$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973354)-->"C:\WINDOWS\$NtUninstallKB973354$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973507)-->"C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973525)-->"C:\WINDOWS\$NtUninstallKB973525$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973869)-->"C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973904)-->"C:\WINDOWS\$NtUninstallKB973904$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB974112)-->"C:\WINDOWS\$NtUninstallKB974112$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB974318)-->"C:\WINDOWS\$NtUninstallKB974318$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB974392)-->"C:\WINDOWS\$NtUninstallKB974392$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB974455)-->"C:\WINDOWS\$NtUninstallKB974455$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB974571)-->"C:\WINDOWS\$NtUninstallKB974571$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB975025)-->"C:\WINDOWS\$NtUninstallKB975025$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB975467)-->"C:\WINDOWS\$NtUninstallKB975467$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB976325)-->"C:\WINDOWS\$NtUninstallKB976325$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB898461)-->"C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB961503)-->"C:\WINDOWS\$NtUninstallKB961503$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB968389)-->"C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB971737)-->"C:\WINDOWS\$NtUninstallKB971737$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB973687)-->"C:\WINDOWS\$NtUninstallKB973687$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB973815)-->"C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB976749)-->"C:\WINDOWS\$NtUninstallKB976749$\spuninst\spuninst.exe"
Module de compatibilité pour Microsoft Office System 2007-->MsiExec.exe /X{90120000-0020-040C-0000-0000000FF1CE}
Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - FRA\install.exe
Module de prise en charge linguistique du français de Microsoft .NET Framework 3.0-->c:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0 French Language Pack\setup.exe
monAlbumPhoto-->"C:\Program Files\monAlbumPhoto\unins000.exe"
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
MSXML 6.0 Parser (KB927977)-->MsiExec.exe /I{025B7033-5D4A-4B72-A1C2-84BE4BE2F72F}
OpenOffice.org 3.1-->MsiExec.exe /I{0FA44E79-CD7D-4E8D-A2EE-26FE05F509B6}
Outil de mise à jour Google-->"C:\Program Files\Google\Google Updater\GoogleUpdater.exe" -uninstall
Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
PDFCreator-->C:\Program Files\PDFCreator\unins000.exe
QuickTime-->MsiExec.exe /I{C78EAC6F-7A73-452E-8134-DBB2165C5A68}
Realtek High Definition Audio Driver-->RtlUpd.exe -r -m -nrg2709
SAMSUNG CDMA Modem Driver Set-->C:\WINDOWS\system32\Samsung_USB_Drivers\3\SSCDUninstall.exe
SAMSUNG Mobile Composite Device Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\6\SSBCUninstall.exe
Samsung Mobile phone USB driver Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\5\SSSDUninstall.exe
SAMSUNG Mobile USB Modem 1.0 Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\1\SS_Uninstall.exe
SAMSUNG Mobile USB Modem Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\2\SSM_Uninstall.exe
Samsung PC Studio 3 USB Driver Installer-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EBA29752-DDD2-4B62-B2E3-9841F92A3E3A}\setup.exe" -l0x40c  -removeonly
Samsung PC Studio 3-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C4A4722E-79F9-417C-BD72-8D359A090C97}\setup.exe" -l0x40c  -removeonly
Security Update for Windows Search 4 - KB963093-->"C:\WINDOWS\$NtUninstallKB963093$\spuninst\spuninst.exe"
Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
Utilitaire de la carte réseau local sans fil Wireless de Dell-->"C:\Program Files\Dell\Dell Wireless WLAN Card\bcmwlu00.exe" verbose /rootkey="Software\Broadcom\802.11\UninstallInfo" /rootdir="C:\Program Files\Dell\Dell Wireless WLAN Card"
Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
Windows Live FolderShare-->MsiExec.exe /X{2075CB0A-D26F-4DAA-B424-5079296B43BA}
Windows Live Mail-->MsiExec.exe /I{5DD76286-9BE7-4894-A990-E905E91AC818}
Windows Live Messenger-->MsiExec.exe /X{770F1BEC-2871-4E70-B837-FB8525FFA3B1}
Windows Live Writer-->MsiExec.exe /X{4634B21A-CC07-4396-890C-2B8168661FEA}
Windows Media Format Runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Presentation Foundation Language Pack (FRA)-->MsiExec.exe /X{6901DD22-527A-41EF-9059-E81FEDE9E494}
Windows Presentation Foundation-->MsiExec.exe /X{BAF78226-3200-4DB4-BE33-4D922A799840}
Windows Search 4.0-->"C:\WINDOWS\$NtUninstallKB940157$\spuninst\spuninst.exe"
Windows Workflow Foundation FR Language Pack-->MsiExec.exe /I{B84C141C-9A13-44BE-9A69-301D7B11D836}
Wireless Select Switch-->C:\Program Files\InstallShield Installation Information\{065A7AFE-195D-4DFB-A4B2-A83842C0F79F}\setup.exe -runfromtemp -l0x040c
XML Paper Specification Shared Components Language Pack 1.0-->"C:\WINDOWS\$NtUninstallXPSEPSCLP$\spuninst\spuninst.exe"

======Security center information======

AV: AntiVir Desktop

======System event log======

Computer Name: DUBAI
Event Code: 11
Message: Le pilote a détecté une erreur du contrôleur sur \Device\CdRom0.

Record Number: 4485
Source Name: Cdrom
Time Written: 20090915191157.000000+120
Event Type: erreur
User: 

Computer Name: DUBAI
Event Code: 11
Message: Le pilote a détecté une erreur du contrôleur sur \Device\CdRom0.

Record Number: 4484
Source Name: Cdrom
Time Written: 20090915191156.000000+120
Event Type: erreur
User: 

Computer Name: DUBAI
Event Code: 11
Message: Le pilote a détecté une erreur du contrôleur sur \Device\CdRom0.

Record Number: 4483
Source Name: Cdrom
Time Written: 20090915191155.000000+120
Event Type: erreur
User: 

Computer Name: DUBAI
Event Code: 11
Message: Le pilote a détecté une erreur du contrôleur sur \Device\CdRom0.

Record Number: 4482
Source Name: Cdrom
Time Written: 20090915191154.000000+120
Event Type: erreur
User: 

Computer Name: DUBAI
Event Code: 11
Message: Le pilote a détecté une erreur du contrôleur sur \Device\CdRom0.

Record Number: 4481
Source Name: Cdrom
Time Written: 20090915191153.000000+120
Event Type: erreur
User: 

=====Application event log=====

Computer Name: DUBAI
Event Code: 20
Message: 
Record Number: 2760
Source Name: Google Update
Time Written: 20091102125832.000000+060
Event Type: erreur
User: AUTORITE NT\SYSTEM

Computer Name: DUBAI
Event Code: 20
Message: 
Record Number: 2759
Source Name: Google Update
Time Written: 20091102115832.000000+060
Event Type: erreur
User: AUTORITE NT\SYSTEM

Computer Name: DUBAI
Event Code: 20
Message: 
Record Number: 2758
Source Name: Google Update
Time Written: 20091102105832.000000+060
Event Type: erreur
User: AUTORITE NT\SYSTEM

Computer Name: DUBAI
Event Code: 20
Message: 
Record Number: 2757
Source Name: Google Update
Time Written: 20091102095832.000000+060
Event Type: erreur
User: AUTORITE NT\SYSTEM

Computer Name: DUBAI
Event Code: 20
Message: 
Record Number: 2756
Source Name: Google Update
Time Written: 20091102085832.000000+060
Event Type: erreur
User: AUTORITE NT\SYSTEM

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\QuickTime\QTSystem\;C:\Program Files\Samsung\Samsung PC Studio 3\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 28 Stepping 2, GenuineIntel
"PROCESSOR_REVISION"=1c02
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"CLASSPATH"=.;C:\Program Files\Java\jre6\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre6\lib\ext\QTJava.zip

-----------------EOF-----------------

Jennifer3400 · Answer

Hello merci pour ton message Poplus!! ci dessous RAPPORT INFO

info.txt logfile of random's system information tool 1.06 2010-01-08 07:56:39

======Uninstall list======

-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{88564CEF-20A5-4EF2-A05F-309F2EBA9B06}\setup.exe" -l0x40c 
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BC12448A-0B41-4E11-B242-B1129512F5B7}\setup.exe" -l0x40c 
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Reader 9 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A90000000001}
Advanced Audio FX Engine-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{88564CEF-20A5-4EF2-A05F-309F2EBA9B06}\setup.exe" -l0x40c  /remove
Apple Mobile Device Support-->MsiExec.exe /I{8355F970-601D-442D-A79B-1D7DB4F24CAD}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir Desktop\setup.exe /REMOVE
Bonjour-->MsiExec.exe /I{07287123-B8AC-41CE-8346-3D777245C35B}
CapsLKNotify-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\1050\INTEL3~1\IDriver.exe /M{90578106-70AF-4198-B9DE-1924FA83B03A} 
Correctif pour Windows XP (KB961118)-->"C:\WINDOWS\$NtUninstallKB961118$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB970653-v3)-->"C:\WINDOWS\$NtUninstallKB970653-v3$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB976098-v2)-->"C:\WINDOWS\$NtUninstallKB976098-v2$\spuninst\spuninst.exe"
Dell Support Center (Logiciel de support)-->MsiExec.exe /X{E3BFEE55-39E2-4BE0-B966-89FE583822C1}
Dell Touchpad-->rundll32.exe "C:\Program Files\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall
Dell Video Chat-->C:\Program Files\Dell Video Chat\uninst.exe
Dell Webcam Central-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BC12448A-0B41-4E11-B242-B1129512F5B7}\setup.exe" -l0x40c  /remove
Galerie de photos Windows Live-->MsiExec.exe /X{B131E59D-202C-43C6-84C9-68F0C37541F1}
GIMP 2.6.7-->"C:\Program Files\GIMP-2.0\setup\unins000.exe"
Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Google Earth-->MsiExec.exe /X{C084BC61-E537-11DE-8616-005056806466}
GoToAssist 8.0.0.514-->C:\Program Files\Citrix\GoToAssist\514\G2AUninstaller.exe /uninstall
HijackThis 2.0.2-->"C:\Program Files	rend micro\HijackThis.exe" /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall  /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
Hotfix for Windows XP (KB915800-v4)-->"C:\WINDOWS\$NtUninstallKB915800-v4$\spuninst\spuninst.exe"
Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{46ABBC54-1872-4AA3-95E2-F2C063A63F31}
Integrated Webcam Driver (1.01.01.0116)  -->C:\WINDOWS\CtDrvIns.exe -uninstall -script OA012.uns -plugin OA012Pin.dll -pluginres OA012Pin.crl -nodisconprompt -langid 0x040C
Intel(R) Graphics Media Accelerator Driver-->C:\WINDOWS\system32\igxpun.exe -uninstall
iTunes-->MsiExec.exe /I{5D601655-6D54-4384-B52C-17EC5385FBBD}
Jauge de batterie-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\1050\INTEL3~1\IDriver.exe /M{543A4F31-9590-416A-A621-42CEB4C6A694} /l1036 
Java(TM) 6 Update 11-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
Junk Mail filter update-->MsiExec.exe /I{E2DFE069-083E-4631-9B6C-43C48E991DE5}
Live! Cam Avatar Creator-->C:\Program Files\InstallShield Installation Information\{65D0C510-D7B6-4438-9FC8-E6B91115AB0D}\setup.exe -runfromtemp -l0x040c -removeonly /remove
Microsoft .NET Framework 1.1 Security Update (KB953297)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M953297\M953297Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 French Language Pack-->MsiExec.exe /X{E3C080B0-23F5-49AF-89F8-8E8DBC89E659}
Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
Microsoft Kernel-Mode Driver Framework Feature Pack 1.7-->"C:\WINDOWS\$NtUninstallWdf01007$\spuninst\spuninst.exe"
Microsoft Office PowerPoint Viewer 2007 (French)-->MsiExec.exe /X{95120000-00AF-040C-0000-0000000FF1CE}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Works-->MsiExec.exe /I{3B160861-7250-451E-B5EE-8B92BF30A710}
Mise à jour de sécurité pour Lecteur Windows Media (KB954155)-->"C:\WINDOWS\$NtUninstallKB954155_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB968816)-->"C:\WINDOWS\$NtUninstallKB968816_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB973540)-->"C:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923689)-->"C:\WINDOWS\$NtUninstallKB923689$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956744)-->"C:\WINDOWS\$NtUninstallKB956744$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956844)-->"C:\WINDOWS\$NtUninstallKB956844$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958869)-->"C:\WINDOWS\$NtUninstallKB958869$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960859)-->"C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961371)-->"C:\WINDOWS\$NtUninstallKB961371$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB968537)-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969059)-->"C:\WINDOWS\$NtUninstallKB969059$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969897)-->"C:\WINDOWS\$NtUninstallKB969897$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969898)-->"C:\WINDOWS\$NtUninstallKB969898$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969947)-->"C:\WINDOWS\$NtUninstallKB969947$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB970430)-->"C:\WINDOWS\$NtUninstallKB970430$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971486)-->"C:\WINDOWS\$NtUninstallKB971486$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971557)-->"C:\WINDOWS\$NtUninstallKB971557$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971633)-->"C:\WINDOWS\$NtUninstallKB971633$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971657)-->"C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971961)-->"C:\WINDOWS\$NtUninstallKB971961$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB972260)-->"C:\WINDOWS\$NtUninstallKB972260$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973346)-->"C:\WINDOWS\$NtUninstallKB973346$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973354)-->"C:\WINDOWS\$NtUninstallKB973354$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973507)-->"C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973525)-->"C:\WINDOWS\$NtUninstallKB973525$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973869)-->"C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973904)-->"C:\WINDOWS\$NtUninstallKB973904$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB974112)-->"C:\WINDOWS\$NtUninstallKB974112$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB974318)-->"C:\WINDOWS\$NtUninstallKB974318$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB974392)-->"C:\WINDOWS\$NtUninstallKB974392$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB974455)-->"C:\WINDOWS\$NtUninstallKB974455$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB974571)-->"C:\WINDOWS\$NtUninstallKB974571$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB975025)-->"C:\WINDOWS\$NtUninstallKB975025$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB975467)-->"C:\WINDOWS\$NtUninstallKB975467$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB976325)-->"C:\WINDOWS\$NtUninstallKB976325$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB898461)-->"C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB961503)-->"C:\WINDOWS\$NtUninstallKB961503$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB968389)-->"C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB971737)-->"C:\WINDOWS\$NtUninstallKB971737$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB973687)-->"C:\WINDOWS\$NtUninstallKB973687$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB973815)-->"C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB976749)-->"C:\WINDOWS\$NtUninstallKB976749$\spuninst\spuninst.exe"
Module de compatibilité pour Microsoft Office System 2007-->MsiExec.exe /X{90120000-0020-040C-0000-0000000FF1CE}
Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - FRA\install.exe
Module de prise en charge linguistique du français de Microsoft .NET Framework 3.0-->c:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0 French Language Pack\setup.exe
monAlbumPhoto-->"C:\Program Files\monAlbumPhoto\unins000.exe"
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
MSXML 6.0 Parser (KB927977)-->MsiExec.exe /I{025B7033-5D4A-4B72-A1C2-84BE4BE2F72F}
OpenOffice.org 3.1-->MsiExec.exe /I{0FA44E79-CD7D-4E8D-A2EE-26FE05F509B6}
Outil de mise à jour Google-->"C:\Program Files\Google\Google Updater\GoogleUpdater.exe" -uninstall
Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
PDFCreator-->C:\Program Files\PDFCreator\unins000.exe
QuickTime-->MsiExec.exe /I{C78EAC6F-7A73-452E-8134-DBB2165C5A68}
Realtek High Definition Audio Driver-->RtlUpd.exe -r -m -nrg2709
SAMSUNG CDMA Modem Driver Set-->C:\WINDOWS\system32\Samsung_USB_Drivers\3\SSCDUninstall.exe
SAMSUNG Mobile Composite Device Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\6\SSBCUninstall.exe
Samsung Mobile phone USB driver Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\5\SSSDUninstall.exe
SAMSUNG Mobile USB Modem 1.0 Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\1\SS_Uninstall.exe
SAMSUNG Mobile USB Modem Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\2\SSM_Uninstall.exe
Samsung PC Studio 3 USB Driver Installer-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EBA29752-DDD2-4B62-B2E3-9841F92A3E3A}\setup.exe" -l0x40c  -removeonly
Samsung PC Studio 3-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C4A4722E-79F9-417C-BD72-8D359A090C97}\setup.exe" -l0x40c  -removeonly
Security Update for Windows Search 4 - KB963093-->"C:\WINDOWS\$NtUninstallKB963093$\spuninst\spuninst.exe"
Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
Utilitaire de la carte réseau local sans fil Wireless de Dell-->"C:\Program Files\Dell\Dell Wireless WLAN Card\bcmwlu00.exe" verbose /rootkey="Software\Broadcom\802.11\UninstallInfo" /rootdir="C:\Program Files\Dell\Dell Wireless WLAN Card"
Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
Windows Live FolderShare-->MsiExec.exe /X{2075CB0A-D26F-4DAA-B424-5079296B43BA}
Windows Live Mail-->MsiExec.exe /I{5DD76286-9BE7-4894-A990-E905E91AC818}
Windows Live Messenger-->MsiExec.exe /X{770F1BEC-2871-4E70-B837-FB8525FFA3B1}
Windows Live Writer-->MsiExec.exe /X{4634B21A-CC07-4396-890C-2B8168661FEA}
Windows Media Format Runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Presentation Foundation Language Pack (FRA)-->MsiExec.exe /X{6901DD22-527A-41EF-9059-E81FEDE9E494}
Windows Presentation Foundation-->MsiExec.exe /X{BAF78226-3200-4DB4-BE33-4D922A799840}
Windows Search 4.0-->"C:\WINDOWS\$NtUninstallKB940157$\spuninst\spuninst.exe"
Windows Workflow Foundation FR Language Pack-->MsiExec.exe /I{B84C141C-9A13-44BE-9A69-301D7B11D836}
Wireless Select Switch-->C:\Program Files\InstallShield Installation Information\{065A7AFE-195D-4DFB-A4B2-A83842C0F79F}\setup.exe -runfromtemp -l0x040c
XML Paper Specification Shared Components Language Pack 1.0-->"C:\WINDOWS\$NtUninstallXPSEPSCLP$\spuninst\spuninst.exe"

======Security center information======

AV: AntiVir Desktop

======System event log======

Computer Name: DUBAI
Event Code: 11
Message: Le pilote a détecté une erreur du contrôleur sur \Device\CdRom0.

Record Number: 4485
Source Name: Cdrom
Time Written: 20090915191157.000000+120
Event Type: erreur
User: 

Computer Name: DUBAI
Event Code: 11
Message: Le pilote a détecté une erreur du contrôleur sur \Device\CdRom0.

Record Number: 4484
Source Name: Cdrom
Time Written: 20090915191156.000000+120
Event Type: erreur
User: 

Computer Name: DUBAI
Event Code: 11
Message: Le pilote a détecté une erreur du contrôleur sur \Device\CdRom0.

Record Number: 4483
Source Name: Cdrom
Time Written: 20090915191155.000000+120
Event Type: erreur
User: 

Computer Name: DUBAI
Event Code: 11
Message: Le pilote a détecté une erreur du contrôleur sur \Device\CdRom0.

Record Number: 4482
Source Name: Cdrom
Time Written: 20090915191154.000000+120
Event Type: erreur
User: 

Computer Name: DUBAI
Event Code: 11
Message: Le pilote a détecté une erreur du contrôleur sur \Device\CdRom0.

Record Number: 4481
Source Name: Cdrom
Time Written: 20090915191153.000000+120
Event Type: erreur
User: 

=====Application event log=====

Computer Name: DUBAI
Event Code: 20
Message: 
Record Number: 2760
Source Name: Google Update
Time Written: 20091102125832.000000+060
Event Type: erreur
User: AUTORITE NT\SYSTEM

Computer Name: DUBAI
Event Code: 20
Message: 
Record Number: 2759
Source Name: Google Update
Time Written: 20091102115832.000000+060
Event Type: erreur
User: AUTORITE NT\SYSTEM

Computer Name: DUBAI
Event Code: 20
Message: 
Record Number: 2758
Source Name: Google Update
Time Written: 20091102105832.000000+060
Event Type: erreur
User: AUTORITE NT\SYSTEM

Computer Name: DUBAI
Event Code: 20
Message: 
Record Number: 2757
Source Name: Google Update
Time Written: 20091102095832.000000+060
Event Type: erreur
User: AUTORITE NT\SYSTEM

Computer Name: DUBAI
Event Code: 20
Message: 
Record Number: 2756
Source Name: Google Update
Time Written: 20091102085832.000000+060
Event Type: erreur
User: AUTORITE NT\SYSTEM

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\QuickTime\QTSystem\;C:\Program Files\Samsung\Samsung PC Studio 3\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 28 Stepping 2, GenuineIntel
"PROCESSOR_REVISION"=1c02
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"CLASSPATH"=.;C:\Program Files\Java\jre6\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre6\lib\ext\QTJava.zip

-----------------EOF-----------------

plopus · Answer

re  jennyfer

donc tu as plusieurs infections USB, qui ce transmette par support amovible (i pod, DD externe, clefs USb etc...) tous ce que tu branche a l'ordi est infecté.


deja va dans demarrer/panneau de configuration/ajout et suppression de programe

et desinstalle cette ancienne version de java =>  Java 6 Update 11

puis installe la derniere ici  https://www.java.com/fr/download/

et installe ausi la derniere version de internet explorer meme si tu utilise un autre navigateur internet :
https://support.microsoft.com/fr-fr/allproducts



donc pour desinfecter tes supports amovible, branche les TOUS au PC, si tu ne peut pas recommence la manip plusieurs fois


Télécharge UsbFix (créé par El Desaparecido & C_XX) et enregistre-le sur ton bureau
https://www.ionos.fr/?affiliate_id=77097

#  Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptible d'avoir été infectés sans les ouvrir
# Double clic sur le raccourci UsbFix présent sur ton bureau
# choisi l'option 2 ( Suppression )
# Ton bureau disparaîtra et le pc redémarrera .
# Au redémarrage , UsbFix scannera ton pc , laisse travailler l'outil.
# Ensuite post le rapport UsbFix.txt qui apparaîtra avec le bureau .
# Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque.( C:\UsbFix.txt )
# ( CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

puis

    *  Télécharge Malwarebytes
    http://www.malwarebytes.org/mbam/program/mbam-setup.exe
    * Fais la mise à jour du logiciel (elle se fait normalement à l'installation)
    * Lance une analyse complète en cliquant sur "Exécuter un examen complet"
    * Sélectionnes les disques que tu veux analyser et cliques sur "Lancer l'examen"
    * L'analyse peut durer un bon moment.....
    * Une fois l'analyse terminée, cliques sur "OK" puis sur "Afficher les résultats"
    * Vérifies que tout est bien coché et cliques sur "Supprimer la sélection" => et ensuite sur "OK"
    * Un rapport va s'ouvrir dans le bloc note... Fais un copié/collé du rapport dans ta prochaine réponse sur le forum

* Il se pourrait que certains fichiers devront être supprimés au redémarrage du PC... Faites le en cliquant sur "oui" à la question posée


une fois poster les 2 rapports, tu relance RSIT mais cette fois a l'ecran disclaimer tu chosit dans le menu deroulant "2 MONTHS"  et poste le rapport ensuite


sa fait donc 3 rapports en tout a poster

plopus · Answer

re jennyfer

aucun soucis pour tes données, seul les fichiers infectés seront supprimés donc pas tes photos ou documents, tu peux y aller

ton appareil photo doit bien evidamment etre branché aussi au PC tout comme ton telephone si tu le branche au PC

Jennifer3400 · Answer

############################## | UsbFix V6.072 |

User : Marie-Emilie (Administrateurs) # DUBAI
Update on 08/01/2010 by El Desaparecido , C_XX & Chimay8
Start at: 18:19:57 | 09/01/2010
Website : http://pagesperso-orange.fr/NosTools/index.html
Contact : FindyKill.Contact@gmail.com

         Intel(R) Atom(TM) CPU N270   @ 1.60GHz
Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
Internet Explorer 8.0.6001.18702
Windows Firewall Status : Enabled
AV : AntiVir Desktop 9.0.1.32 [ Enabled | Updated ]

C:\ -> Disque fixe local # 149 Go (122,28 Go free) [OS] # NTFS
D:\ -> Disque amovible # 966,99 Mo (1,97 Mo free) [IPOD DE MAR] # FAT32
E:\ -> Disque amovible # 116,88 Mo (2,29 Mo free) # FAT

############################## | Processus actifs |

C:\WINDOWS\System32\smss.exe 768
C:\WINDOWS\system32\csrss.exe 836
C:\WINDOWS\system32\winlogon.exe 860
C:\WINDOWS\system32\services.exe 904
C:\WINDOWS\system32\lsass.exe 916
C:\WINDOWS\system32\svchost.exe 1104
C:\WINDOWS\system32\svchost.exe 1172
C:\WINDOWS\System32\svchost.exe 1316
C:\WINDOWS\system32\svchost.exe 1504
C:\WINDOWS\system32\svchost.exe 1656
C:\WINDOWS\System32\WLTRYSVC.EXE 1884
C:\WINDOWS\System32\bcmwltry.exe 1900
C:\WINDOWS\system32\spoolsv.exe 1920
C:\Program Files\Avira\AntiVir Desktop\sched.exe 1964
C:\WINDOWS\Explorer.EXE 432
C:\WINDOWS\system32\svchost.exe 496
C:\Program Files\Avira\AntiVir Desktop\avguard.exe 1760
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe 1772
C:\Program Files\Bonjour\mDNSResponder.exe 1796
C:\Program Files\Google\Update\GoogleUpdate.exe 1840
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe 392
C:\Program Files\Google\Update\GoogleUpdate.exe 408
C:\Program Files\Java\jre6\bin\jqs.exe 472
C:\Program Files\Dell Support Center\bin\sprtsvc.exe 984
C:\WINDOWS\system32\svchost.exe 1540
C:\WINDOWS\system32\SearchIndexer.exe 972
C:\WINDOWS\system32\wuauclt.exe 1240
C:\WINDOWS\system32\wbem\wmiapsrv.exe 2492
C:\WINDOWS\system32\wbem\wmiprvse.exe 2620
C:\WINDOWS\System32\alg.exe 2724
C:\WINDOWS\system32\wbem\wmiprvse.exe 2812
C:\Program Files\Avira\AntiVir Desktop\avwsc.exe 2960

################## | Elements infectieux |

Supprimé ! C:\WINDOWS\autorun.inf 
Supprimé ! C:\DOCUME~1\MARIE-~1\LOCALS~1\Temp\8BD54F3E-DD19-4a69-93D8-5C6A5BBBE20E.exe 
Supprimé ! C:\DOCUME~1\MARIE-~1\LOCALS~1\Temp\E_N4\cnvpe.fne 
Supprimé ! C:\DOCUME~1\MARIE-~1\LOCALS~1\Temp\E_N4\dp1.fne 
Supprimé ! C:\DOCUME~1\MARIE-~1\LOCALS~1\Temp\E_N4\eAPI.fne 
Supprimé ! C:\DOCUME~1\MARIE-~1\LOCALS~1\Temp\E_N4\HtmlView.fne 
Supprimé ! C:\DOCUME~1\MARIE-~1\LOCALS~1\Temp\E_N4\internet.fne 
Supprimé ! C:\DOCUME~1\MARIE-~1\LOCALS~1\Temp\E_N4\krnln.fnr 
Supprimé ! C:\DOCUME~1\MARIE-~1\LOCALS~1\Temp\E_N4\shell.fne 
Supprimé ! C:\DOCUME~1\MARIE-~1\LOCALS~1\Temp\E_N4\spec.fne 
Supprimé ! C:\DOCUME~1\MARIE-~1\LOCALS~1\Temp\E_N4 
Supprimé ! C:\Recycler\S-1-5-21-2256441680-1492383327-2329721627-1006 
Supprimé ! D:\Recycle.exe 
Supprimé ! D:\autorun.inf 
E:\autorun.inf -> fichier appelé : "E:\USBVAU~1/cache.exe" ( Présent ! )  
Non supprimé ! E:\USBVAU~1/cache.exe 
E:\autorun.inf -> fichier appelé : "E:\USBVAU~1/cache.exe" ( Présent ! )  
Non supprimé ! E:\USBVAU~1/cache.exe 
Supprimé ! E:\dynrn6e.cmd 
Supprimé ! E:\f9o8o.exe 
Supprimé ! E:\Recycled\ctfmon.exe 
Supprimé ! E:\autorun.inf 

################## | MD5 |


################## | Registre |


################## | Mountpoints2 |

Supprimé ! HKCU\...\Explorer\MountPoints2\D\Shell\AutoRun\Command  
Supprimé ! HKCU\...\Explorer\MountPoints2\{298d73b0-c501-11de-975d-0024e8ac2389}\Shell\1\Command  
Supprimé ! HKCU\...\Explorer\MountPoints2\{465bde22-f7d0-11de-9785-0024e8ac2389}\Shell\AutoRun\Command  
Supprimé ! HKCU\...\Explorer\MountPoints2\{77e9a35d-67d6-11de-96f5-0024e8ac2389}\Shell\1\Command  
Supprimé ! HKCU\...\Explorer\MountPoints2\{8be38bd5-9d49-11de-9737-0024e8ac2389}\Shell\1\Command  
Supprimé ! HKCU\...\Explorer\MountPoints2\{d5b66523-f95d-11de-9787-0024e8ac2389}\Shell\AutoRun\Command  
Supprimé ! HKCU\...\Explorer\MountPoints2\{d5b66525-f95d-11de-9787-0024e8ac2389}\Shell\AutoRun\Command  
Supprimé ! HKCU\...\Explorer\MountPoints2\{f1c14ab6-a787-11de-9748-0024e8ac2389}\Shell\AutoRun\Command  

################## | Listing des fichiers présent |

[30/04/2008 00:03|--a------|0] C:\AUTOEXEC.BAT 
[01/07/2009 02:34|-rahs----|216] C:\boot.ini 
[14/04/2008 13:00|-rahs----|4952] C:\Bootfont.bin 
[30/04/2008 00:03|--a------|0] C:\CONFIG.SYS 
[14/06/2009 11:24|-rah-----|4028] C:\dell.sdr 
[?|?|?] C:\hiberfil.sys 
[30/04/2008 00:03|--ah-----|0] C:\IO.SYS 
[30/04/2008 00:03|--ah-----|0] C:\MSDOS.SYS 
[14/04/2008 13:00|-rahs----|47564] C:\NTDETECT.COM 
[14/04/2008 13:00|-rahs----|252240] C:
tldr 
[?|?|?] C:\pagefile.sys 
[09/01/2010 18:38|--a------|4876] C:\UsbFix.txt 
[15/08/2009 19:45|--a------|6313303] D:\01 I Know You Want Me (Calle ocho) [.m4a 
[15/08/2009 19:54|--a------|8401140] D:\01 Fire Burning.m4a 
[07/01/2010 04:27|--a------|4126] D:\YES!.txt 
[07/01/2010 04:27|-rahs----|19062] D:\YES!.dll.vbs 
[27/05/2007 03:06|--a------|1713555] E:\IMGP1303.JPG 
[27/05/2007 03:05|--a------|1718751] E:\IMGP1301.JPG 
[16/09/2009 09:35|--a------|4060401] E:\DSC00118.JPG 
[16/09/2009 09:37|--a------|3889492] E:\DSC00121.JPG 
[17/09/2009 16:08|--a------|4022411] E:\DSC00142.JPG 
[17/09/2009 16:26|--a------|3876331] E:\DSC00150.JPG 
[17/09/2009 16:29|--a------|4217175] E:\DSC00162.JPG 
[17/09/2009 16:30|--a------|4016829] E:\DSC00166.JPG 
[17/09/2009 16:34|--a------|3959287] E:\DSC00187.JPG 
[17/09/2009 16:54|--a------|4147629] E:\DSC00206.JPG 
[17/09/2009 18:40|--a------|3851431] E:\DSC00242.JPG 
[17/09/2009 18:41|--a------|4325723] E:\DSC00248.JPG 
[17/09/2009 18:44|--a------|4278615] E:\DSC00253.JPG 
[17/09/2009 20:02|--a------|4365450] E:\DSC00307.JPG 
[17/09/2009 20:20|--a------|4346116] E:\DSC00321.JPG 
[17/09/2009 20:23|--a------|4291871] E:\DSC00330.JPG 
[17/09/2009 20:34|--a------|3698109] E:\DSC00337.JPG 
[17/09/2009 21:11|--a------|4127159] E:\DSC00353.JPG 
[17/09/2009 22:34|--a------|4472839] E:\DSC00390.JPG 
[17/09/2009 22:35|--a------|4026205] E:\DSC00395.JPG 
[17/09/2009 22:47|--a------|4404832] E:\DSC00433.JPG 
[18/09/2009 20:07|--a------|4370324] E:\DSC00515.JPG 
[18/09/2009 20:08|--a------|4539154] E:\DSC00517.JPG 
[18/09/2009 20:29|--a------|4092365] E:\DSC00534.JPG 
[19/09/2009 07:17|--a------|3594105] E:\DSC00552.JPG 
[19/09/2009 08:42|--a------|4120254] E:\DSC00598.JPG 
[19/09/2009 09:05|--a------|4498258] E:\DSC00656.JPG 
[19/09/2009 13:22|--a------|3794561] E:\DSC00735.JPG 
[17/09/2009 02:27|--a------|4556036] E:\DSC_8114.JPG 
[17/09/2009 18:49|--a------|3518032] E:\DSC00269.JPG 
[04/12/2009 06:58|--a------|4126] E:\YES!.txt 
[04/12/2009 06:58|-rahs----|19062] E:\YES!.dll.vbs 
[29/11/2009 19:10|--a------|11776] E:ecap cv.xls 
[29/11/2009 19:11|--a------|12288] E:ecap CV bis.xlr 
[29/11/2009 19:16|--a------|23552] E:ecap cv OK.xls 

################## | Vaccination |

# C:\autorun.inf -> Dossier créé par UsbFix.  
# D:\autorun.inf -> Dossier créé par UsbFix.  
# E:\autorun.inf -> Dossier créé par UsbFix.  

################## | Crack > Keygen > Serial |


################## | Upload | 

Veuillez envoyer le fichier : C:\DOCUME~1\MARIE-~1\Bureau\UsbFix_Upload_Me_DUBAI.zip : https://www.ionos.fr/?affiliate_id=77097 
Merci pour votre contribution .  

################## | ! Fin du rapport # UsbFix V6.072 ! |

plopus · Answer

tu as fait sa ?

Veuillez envoyer le fichier : Bureau\UsbFix_Upload_Me_DUBAI.zip : https://www.ionos.fr/?affiliate_id=77097

Merci pour votre contribution . 

passe a la suite maklwarebyte et après le rapport RSIT

Jennifer3400 · Answer

Malwarebytes' Anti-Malware 1.44
Version de la base de données: 3527
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

09/01/2010 20:02:30
mbam-log-2010-01-09 (20-02-30).txt

Type de recherche: Examen complet (C:\|D:\|E:\|)
Eléments examinés: 181469
Temps écoulé: 1 hour(s), 12 minute(s), 16 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 1

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\WINDOWS\system32\F247EB\RegEx.fnr (Worm.AutoRun) -> Quarantined and deleted successfully.


Jennyfer: j'ai du effacé un fichier à la fin de l'analyse

Jennifer3400 · Answer

Logfile of random's system information tool 1.06 (written by random/random)
Run by Marie-Emilie at 2010-01-09 20:10:45
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 125 GB (82%) free of 153 GB
Total RAM: 1014 MB (48% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:10:52, on 09/01/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\Dell Support Center\bin\sprtsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\Program Files\Wireless Select Switch\WLSS.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Battery Meter\BTMeter.exe
C:\Program Files\CapsLKNotify\CapsLKNotify.exe
C:\Program Files\Dell Webcam\Dell Webcam Central\WebcamDell.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Documents and Settings\Marie-Emilie\Bureau\RSIT.exe
C:\Program Files	rend micro\Marie-Emilie.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.live.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = http://g.uk.msn.com/USCON/7
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://g.uk.msn.com/USCON/7
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\WINDOWS\system32\WLTRAY.exe
O4 - HKLM\..\Run: [WLSS] C:\Program Files\Wireless Select Switch\WLSS.exe
O4 - HKLM\..\Run: [BTMeter] C:\Program Files\Battery Meter\BTMeter.exe
O4 - HKLM\..\Run: [CapsLKNotify] C:\Program Files\CapsLKNotify\CapsLKNotify.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "c:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Dell Webcam Central] "C:\Program Files\Dell Webcam\Dell Webcam Central\WebcamDell.exe" /mode2
O4 - HKLM\..\Run: [dellsupportcenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P dellsupportcenter
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\YES!.dll.vbs
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: 8FD435.lnk = C:\WINDOWS\system32\A5E9C1\8FD435.EXE
O4 - Startup: OpenOffice.org 3.1.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O20 - Winlogon Notify: GoToAssist - C:\Program Files\Citrix\GoToAssist\514\G2AWinLogon.dll
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: GoToAssist - Citrix Online, a division of Citrix Systems, Inc. - C:\Program Files\Citrix\GoToAssist\514\g2aservice.exe
O23 - Service: Service Google Update (gupdate1c9ff3a906c3e2e) (gupdate1c9ff3a906c3e2e) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: SupportSoft Sprocket Service (DellSupportCenter) (sprtsvc_DellSupportCenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\WLTRYSVC.EXE

Jennifer3400 · Answer

Re Plopus

je viens de poster les 3 rapports: USB fix (+ j'ai envoyé le fichier zip comme mentionné dans ton message) & Malware& RSID. En revanche je n'ai pu brancher uniquement une clef USB et mon ipod. Je vais donc devoir refaire la manip pour disque dur externe et appareil photo (qui contiennent tous deux ce fameux fichier html YES!).
à noter: lors des différentes analyses, AntiVir m'a demandé à plusieurs reprises de mettre des fichiers en quarantaine, ce que j'ai fait.

Est-ce que tout semble avoir rétabli ? merci pour ton aide

Utilisateur anonyme · Answer

Hello Jennifer ,

Ton pc a contracté une infection récente , visible ici : 

O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\YES!.dll.vbs

Elle n est pas encore prise en charge par les outils . Si tu attend 15 min . Usbfix va etre mis a jours pour la traiter.

Il te suffira ensuite d utiliser la nouvelle mises a jours .

Utilisateur anonyme · Answer

Re jennifer ,

Usbfix a été mis a jours , il prend désormais en charge ton infection .

Je te conseil de supprimer UsbFix.exe que tu as téléchargé auparavent et de refaire le scan avec cette version :

https://www.ionos.fr/?affiliate_id=77097

Bonne suite à tous les 2 .

plopus · Answer

salut  jennyfer

il te reste quelques truc.

apparament tu as choper un nouveau truc, qui n'as pas ete supprimé  par le fix approprié mais qui d'après son auteur (el desaparecido) le sera dans un moment donc ce que je te propose c'est :


clic ici https://www.virustotal.com/gui/

clic sur parcourir en milieu de page
dans la nouvelle fenetre copie colle ceci dedans

C:\WINDOWS\system32\A5E9C1\8FD435.EXE     


puis clic sur ouvrir
ensuite clic sur envoyer, un rapport va s'etablir
si on te dit le fichier a deja ete analyser clic sur reanalyser
copie colle l'integralité du rapport ici 


ensuite tu fais une mise a jour avec antivir en clic droit sur le parapluie rouge choisit "mettre a jour" patiente puis lance un scan complet ,SUPPRIME tous ce qu'il trouve et poste le rapport

puis après, tu 

    *  Double clic sur le raccourci UsbFix présent sur ton bureau
    * Choisi l'option 5 ( Désinstaller )

et enfin, pour supprimer "YES" refait USBfix mis a jour :

Télécharge UsbFix (créé par El Desaparecido & C_XX) et enregistre-le sur ton bureau
https://www.ionos.fr/?affiliate_id=77097

# Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptible d'avoir été infectés sans les ouvrir
# Double clic sur le raccourci UsbFix présent sur ton bureau
# choisi l'option 2 ( Suppression )
# Ton bureau disparaîtra et le pc redémarrera .
# Au redémarrage , UsbFix scannera ton pc , laisse travailler l'outil.
# Ensuite post le rapport UsbFix.txt qui apparaîtra avec le bureau .
# Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque.( C:\UsbFix.txt )
# ( CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller ) 


tu devras donc faire cette manip sur TOUT tes support sous peine de rechoper le virus

Jennifer3400 · Answer

Re Ploplus: merci pour ton aide! 
Il semblerait que le fichier C:\WINDOWS\system32\A5E9C1\8FD435.EXE  ne se trouve plus sur mon ordi. Quand je copie colle pour ouvrir avec virus.total.com, jai un message "ce fichier est introuvable". Jai egalement essaye de le trouver manuellement et je ne le trouve pas. est ce que cela veut dire qu'il a déjà été effacé?? merci

Jennifer3400 · Answer

Jai donc sauté l'étape Analyse du fichier par Virus.total (voir mon post ci-dessus), ne retrouvant pas ce fichier C:\WINDOWS\system32\A5E9C1\8FD435.EXE  sur mon ordi.

ci-dessous le rapport Anti VIr effectué après mise à jour:



Avira AntiVir Personal
Report file date: dimanche 10 janvier 2010  04:02

Scanning for 1512108 virus strains and unwanted programs.

Licensee        : Avira AntiVir Personal - FREE Antivirus
Serial number   : 0000149996-ADJIE-0000001
Platform        : Windows XP
Windows version : (Service Pack 3)  [5.1.2600]
Boot mode       : Normally booted
Username        : SYSTEM
Computer name   : DUBAI

Version information:
BUILD.DAT       : 9.0.0.418     21723 Bytes  02/12/2009 16:28:00
AVSCAN.EXE      : 9.0.3.10     466689 Bytes  13/10/2009 10:26:33
AVSCAN.DLL      : 9.0.3.0       40705 Bytes  27/02/2009 09:58:24
LUKE.DLL        : 9.0.3.2      209665 Bytes  20/02/2009 10:35:49
LUKERES.DLL     : 9.0.2.0       12033 Bytes  27/02/2009 09:58:52
VBASE000.VDF    : 7.10.0.0   19875328 Bytes  06/11/2009 06:35:52
VBASE001.VDF    : 7.10.1.0    1372672 Bytes  19/11/2009 20:13:04
VBASE002.VDF    : 7.10.1.1       2048 Bytes  19/11/2009 20:13:04
VBASE003.VDF    : 7.10.1.2       2048 Bytes  19/11/2009 20:13:05
VBASE004.VDF    : 7.10.1.3       2048 Bytes  19/11/2009 20:13:05
VBASE005.VDF    : 7.10.1.4       2048 Bytes  19/11/2009 20:13:05
VBASE006.VDF    : 7.10.1.5       2048 Bytes  19/11/2009 20:13:05
VBASE007.VDF    : 7.10.1.6       2048 Bytes  19/11/2009 20:13:05
VBASE008.VDF    : 7.10.1.7       2048 Bytes  19/11/2009 20:13:05
VBASE009.VDF    : 7.10.1.8       2048 Bytes  19/11/2009 20:13:06
VBASE010.VDF    : 7.10.1.9       2048 Bytes  19/11/2009 20:13:06
VBASE011.VDF    : 7.10.1.10      2048 Bytes  19/11/2009 20:13:06
VBASE012.VDF    : 7.10.1.11      2048 Bytes  19/11/2009 20:13:06
VBASE013.VDF    : 7.10.1.79    209920 Bytes  25/11/2009 20:13:07
VBASE014.VDF    : 7.10.1.128    197632 Bytes  30/11/2009 20:13:07
VBASE015.VDF    : 7.10.1.178    195584 Bytes  07/12/2009 20:13:14
VBASE016.VDF    : 7.10.1.224    183296 Bytes  14/12/2009 20:13:20
VBASE017.VDF    : 7.10.1.247    182272 Bytes  15/12/2009 20:13:26
VBASE018.VDF    : 7.10.2.30    198144 Bytes  21/12/2009 20:13:33
VBASE019.VDF    : 7.10.2.63    187392 Bytes  24/12/2009 20:13:45
VBASE020.VDF    : 7.10.2.93    195072 Bytes  29/12/2009 20:13:51
VBASE021.VDF    : 7.10.2.131    201216 Bytes  07/01/2010 20:13:58
VBASE022.VDF    : 7.10.2.132      2048 Bytes  07/01/2010 20:13:58
VBASE023.VDF    : 7.10.2.133      2048 Bytes  07/01/2010 20:13:58
VBASE024.VDF    : 7.10.2.134      2048 Bytes  07/01/2010 20:13:58
VBASE025.VDF    : 7.10.2.135      2048 Bytes  07/01/2010 20:13:58
VBASE026.VDF    : 7.10.2.136      2048 Bytes  07/01/2010 20:13:58
VBASE027.VDF    : 7.10.2.137      2048 Bytes  07/01/2010 20:13:59
VBASE028.VDF    : 7.10.2.138      2048 Bytes  07/01/2010 20:13:59
VBASE029.VDF    : 7.10.2.139      2048 Bytes  07/01/2010 20:13:59
VBASE030.VDF    : 7.10.2.140      2048 Bytes  07/01/2010 20:13:59
VBASE031.VDF    : 7.10.2.151    146944 Bytes  08/01/2010 05:05:19
Engineversion   : 8.2.1.134
AEVDF.DLL       : 8.1.1.2      106867 Bytes  08/11/2009 06:38:52
AESCRIPT.DLL    : 8.1.3.7      594296 Bytes  07/01/2010 20:15:11
AESCN.DLL       : 8.1.3.0      127348 Bytes  07/01/2010 20:15:03
AESBX.DLL       : 8.1.1.1      246132 Bytes  08/11/2009 06:38:44
AERDL.DLL       : 8.1.3.4      479605 Bytes  07/01/2010 20:15:02
AEPACK.DLL      : 8.2.0.4      422263 Bytes  07/01/2010 20:14:52
AEOFFICE.DLL    : 8.1.0.38     196987 Bytes  08/11/2009 06:38:38
AEHEUR.DLL      : 8.1.0.194   2228599 Bytes  09/01/2010 05:05:22
AEHELP.DLL      : 8.1.9.0      237943 Bytes  07/01/2010 20:14:14
AEGEN.DLL       : 8.1.1.83     369014 Bytes  07/01/2010 20:14:11
AEEMU.DLL       : 8.1.1.0      393587 Bytes  08/11/2009 06:38:26
AECORE.DLL      : 8.1.9.1      180598 Bytes  07/01/2010 20:14:05
AEBB.DLL        : 8.1.0.3       53618 Bytes  08/11/2009 06:38:20
AVWINLL.DLL     : 9.0.0.3       18177 Bytes  12/12/2008 07:47:59
AVPREF.DLL      : 9.0.3.0       44289 Bytes  26/08/2009 14:14:02
AVREP.DLL       : 8.0.0.3      155905 Bytes  20/01/2009 13:34:28
AVREG.DLL       : 9.0.0.0       36609 Bytes  05/12/2008 09:32:09
AVARKT.DLL      : 9.0.0.3      292609 Bytes  24/03/2009 14:05:41
AVEVTLOG.DLL    : 9.0.0.7      167169 Bytes  30/01/2009 09:37:08
SQLITE3.DLL     : 3.6.1.0      326401 Bytes  28/01/2009 14:03:49
SMTPLIB.DLL     : 9.2.0.25      28417 Bytes  02/02/2009 07:21:33
NETNT.DLL       : 9.0.0.0       11521 Bytes  05/12/2008 09:32:10
RCIMAGE.DLL     : 9.0.0.25    2438913 Bytes  15/05/2009 14:39:58
RCTEXT.DLL      : 9.0.73.0      86785 Bytes  13/10/2009 11:25:47

Configuration settings for the scan:
Jobname.............................: Complete system scan
Configuration file..................: c:\program files\avira\antivir desktop\sysscan.avp
Logging.............................: low
Primary action......................: interactive
Secondary action....................: ignore
Scan master boot sector.............: on
Scan boot sector....................: on
Boot sectors........................: C:, 
Process scan........................: on
Scan registry.......................: on
Search for rootkits.................: on
Integrity checking of system files..: off
Scan all files......................: All files
Scan archives.......................: on
Recursion depth.....................: 20
Smart extensions....................: on
Macro heuristic.....................: on
File heuristic......................: medium

Start of the scan: dimanche 10 janvier 2010  04:02

Starting search for hidden objects.
'51961' objects were checked, '0' hidden objects were found.

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'iexplore.exe' - '1' Module(s) have been scanned
Scan process 'iexplore.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'wuauclt.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'wmiapsrv.exe' - '1' Module(s) have been scanned
Scan process 'iPodService.exe' - '1' Module(s) have been scanned
Scan process 'searchindexer.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'soffice.bin' - '1' Module(s) have been scanned
Scan process 'soffice.exe' - '1' Module(s) have been scanned
Scan process 'sprtsvc.exe' - '1' Module(s) have been scanned
Scan process 'jqs.exe' - '1' Module(s) have been scanned
Scan process 'GoogleUpdate.exe' - '1' Module(s) have been scanned
Scan process 'WindowsSearch.exe' - '1' Module(s) have been scanned
Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
Scan process 'jusched.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'mDNSResponder.exe' - '1' Module(s) have been scanned
Scan process 'AppleMobileDeviceService.exe' - '1' Module(s) have been scanned
Scan process 'iTunesHelper.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'sprtcmd.exe' - '1' Module(s) have been scanned
Scan process 'WebcamDell.exe' - '1' Module(s) have been scanned
Scan process 'CapsLKNotify.exe' - '1' Module(s) have been scanned
Scan process 'igfxsrvc.exe' - '1' Module(s) have been scanned
Scan process 'BTMeter.exe' - '1' Module(s) have been scanned
Scan process 'WLSS.exe' - '1' Module(s) have been scanned
Scan process 'WLTRAY.EXE' - '1' Module(s) have been scanned
Scan process 'igfxpers.exe' - '1' Module(s) have been scanned
Scan process 'RTHDCPL.EXE' - '1' Module(s) have been scanned
Scan process 'SynTPEnh.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'BCMWLTRY.EXE' - '1' Module(s) have been scanned
Scan process 'WLTRYSVC.EXE' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
49 processes with 49 modules were scanned

Starting master boot sector scan:
Master boot sector HD0
    [INFO]      No virus was found!
Master boot sector HD1
    [INFO]      No virus was found!

Start scanning boot sectors:
Boot sector 'C:\'
    [INFO]      No virus was found!

Starting to scan executable files (registry).
The registry was scanned ( '61' files ).


Starting the file scan:

Begin scan in 'C:\' <OS>
C:\hiberfil.sys
    [WARNING]   The file could not be opened!
    [NOTE]      This file is a Windows system file.
    [NOTE]      This file cannot be opened for scanning.
C:\pagefile.sys
    [WARNING]   The file could not be opened!
    [NOTE]      This file is a Windows system file.
    [NOTE]      This file cannot be opened for scanning.


End of the scan: dimanche 10 janvier 2010  04:37
Used time: 35:10 Minute(s)

The scan has been done completely.

   8540 Scanned directories
 231842 Files were scanned
      0 Viruses and/or unwanted programs were found
      0 Files were classified as suspicious
      0 files were deleted
      0 Viruses and unwanted programs were repaired
      0 Files were moved to quarantine
      0 Files were renamed
      2 Files cannot be scanned
 231840 Files not concerned
   7744 Archives were scanned
      2 Warnings
      2 Notes
  51961 Objects were scanned with rootkit scan
      0 Hidden objects were found

Jennifer3400 · Answer

ci dessous le rapport USB fix après avoir désinstallé et réinstaller:


à noter: j'ai également envoyé le fichier .zip à Usb fix comme précédemment. Pour info dans ce dossier.zip il se trouve un fichier html YES! (que je n'ai pas ouvert évidemment...)

merci pour ton aide

############################## | UsbFix V6.073 |

User : Marie-Emilie (Administrateurs) # DUBAI
Update on 09/01/2010 by El Desaparecido , C_XX & Chimay8
Start at: 04:49:34 | 10/01/2010
Website : http://pagesperso-orange.fr/NosTools/index.html
Contact : FindyKill.Contact@gmail.com

         Intel(R) Atom(TM) CPU N270   @ 1.60GHz
Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
Internet Explorer 8.0.6001.18702
Windows Firewall Status : Enabled
AV : AntiVir Desktop 9.0.1.32 [ Enabled | Updated ]

C:\ -> Disque fixe local # 149 Go (122,21 Go free) [OS] # NTFS
D:\ -> Disque amovible # 966,99 Mo (4,68 Mo free) [IPOD DE MAR] # FAT32
E:\ -> Disque amovible # 116,88 Mo (2,68 Mo free) # FAT

############################## | Processus actifs |

C:\WINDOWS\System32\smss.exe 768
C:\WINDOWS\system32\csrss.exe 836
C:\WINDOWS\system32\winlogon.exe 860
C:\WINDOWS\system32\services.exe 904
C:\WINDOWS\system32\lsass.exe 916
C:\WINDOWS\system32\svchost.exe 1104
C:\WINDOWS\system32\svchost.exe 1172
C:\WINDOWS\System32\svchost.exe 1316
C:\WINDOWS\system32\svchost.exe 1456
C:\WINDOWS\system32\svchost.exe 1556
C:\WINDOWS\System32\WLTRYSVC.EXE 1892
C:\WINDOWS\System32\bcmwltry.exe 1908
C:\WINDOWS\system32\spoolsv.exe 1928
C:\Program Files\Avira\AntiVir Desktop\sched.exe 1972
C:\WINDOWS\Explorer.EXE 484
C:\WINDOWS\system32\svchost.exe 536
C:\Program Files\Avira\AntiVir Desktop\avguard.exe 1756
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe 1764
C:\Program Files\Bonjour\mDNSResponder.exe 1792
C:\Program Files\Google\Update\GoogleUpdate.exe 1636
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe 348
C:\Program Files\Google\Update\GoogleUpdate.exe 364
C:\Program Files\Java\jre6\bin\jqs.exe 408
C:\Program Files\Dell Support Center\bin\sprtsvc.exe 692
C:\WINDOWS\system32\svchost.exe 1292
C:\WINDOWS\system32\SearchIndexer.exe 2044
C:\WINDOWS\system32\wuauclt.exe 812
C:\WINDOWS\system32\wbem\wmiapsrv.exe 2356
C:\WINDOWS\system32\wbem\wmiprvse.exe 2500
C:\WINDOWS\System32\alg.exe 2556
C:\WINDOWS\system32\wbem\wmiprvse.exe 2676
C:\Program Files\Avira\AntiVir Desktop\avwsc.exe 2800

################## | Elements infectieux |

Supprimé ! C:\WINDOWS\YES!.txt 
Supprimé ! C:\WINDOWS\System32\A5E9C1 
Supprimé ! C:\Recycler\S-1-5-21-2256441680-1492383327-2329721627-1006 
Supprimé ! D:\YES!.txt  
Supprimé ! E:\USBVAU~1 
Supprimé ! E:\YES!.txt  

################## | Registre |

Supprimé ! [HKLM\Software\Microsoft\Windows\CurrentVersion\Run] "MSConfig"  

################## | Mountpoints2 |


################## | Listing des fichiers présent |

[30/04/2008 00:03|--a------|0] C:\AUTOEXEC.BAT 
[01/07/2009 02:34|-rahs----|216] C:\boot.ini 
[14/04/2008 13:00|-rahs----|4952] C:\Bootfont.bin 
[30/04/2008 00:03|--a------|0] C:\CONFIG.SYS 
[14/06/2009 11:24|-rah-----|4028] C:\dell.sdr 
[?|?|?] C:\hiberfil.sys 
[30/04/2008 00:03|--ah-----|0] C:\IO.SYS 
[30/04/2008 00:03|--ah-----|0] C:\MSDOS.SYS 
[14/04/2008 13:00|-rahs----|47564] C:\NTDETECT.COM 
[14/04/2008 13:00|-rahs----|252240] C:
tldr 
[?|?|?] C:\pagefile.sys 
[10/01/2010 04:53|--a------|3191] C:\UsbFix.txt 
[15/08/2009 19:45|--a------|6313303] D:\01 I Know You Want Me (Calle ocho) [.m4a 
[15/08/2009 19:54|--a------|8401140] D:\01 Fire Burning.m4a 
[27/05/2007 03:06|--a------|1713555] E:\IMGP1303.JPG 
[27/05/2007 03:05|--a------|1718751] E:\IMGP1301.JPG 
[16/09/2009 09:35|--a------|4060401] E:\DSC00118.JPG 
[16/09/2009 09:37|--a------|3889492] E:\DSC00121.JPG 
[17/09/2009 16:08|--a------|4022411] E:\DSC00142.JPG 
[17/09/2009 16:26|--a------|3876331] E:\DSC00150.JPG 
[17/09/2009 16:29|--a------|4217175] E:\DSC00162.JPG 
[17/09/2009 16:30|--a------|4016829] E:\DSC00166.JPG 
[17/09/2009 16:34|--a------|3959287] E:\DSC00187.JPG 
[17/09/2009 16:54|--a------|4147629] E:\DSC00206.JPG 
[17/09/2009 18:40|--a------|3851431] E:\DSC00242.JPG 
[17/09/2009 18:41|--a------|4325723] E:\DSC00248.JPG 
[17/09/2009 18:44|--a------|4278615] E:\DSC00253.JPG 
[17/09/2009 20:02|--a------|4365450] E:\DSC00307.JPG 
[17/09/2009 20:20|--a------|4346116] E:\DSC00321.JPG 
[17/09/2009 20:23|--a------|4291871] E:\DSC00330.JPG 
[17/09/2009 20:34|--a------|3698109] E:\DSC00337.JPG 
[17/09/2009 21:11|--a------|4127159] E:\DSC00353.JPG 
[17/09/2009 22:34|--a------|4472839] E:\DSC00390.JPG 
[17/09/2009 22:35|--a------|4026205] E:\DSC00395.JPG 
[17/09/2009 22:47|--a------|4404832] E:\DSC00433.JPG 
[18/09/2009 20:07|--a------|4370324] E:\DSC00515.JPG 
[18/09/2009 20:08|--a------|4539154] E:\DSC00517.JPG 
[18/09/2009 20:29|--a------|4092365] E:\DSC00534.JPG 
[19/09/2009 07:17|--a------|3594105] E:\DSC00552.JPG 
[19/09/2009 08:42|--a------|4120254] E:\DSC00598.JPG 
[19/09/2009 09:05|--a------|4498258] E:\DSC00656.JPG 
[19/09/2009 13:22|--a------|3794561] E:\DSC00735.JPG 
[17/09/2009 02:27|--a------|4556036] E:\DSC_8114.JPG 
[17/09/2009 18:49|--a------|3518032] E:\DSC00269.JPG 
[29/11/2009 19:10|--a------|11776] E:ecap cv.xls 
[29/11/2009 19:11|--a------|12288] E:ecap CV bis.xlr 
[29/11/2009 19:16|--a------|23552] E:ecap cv OK.xls 

################## | Vaccination |

# C:\autorun.inf -> Dossier créé par UsbFix.  
# D:\autorun.inf -> Dossier créé par UsbFix.  
# E:\autorun.inf -> Dossier créé par UsbFix.  

################## | Crack > Keygen > Serial |


################## | Upload | 

Veuillez envoyer le fichier : C:\DOCUME~1\MARIE-~1\Bureau\UsbFix_Upload_Me_DUBAI.zip : https://www.ionos.fr/?affiliate_id=77097 
Merci pour votre contribution .

plopus · Answer

salut

ok, bien joué ;)

tu as encore des porblemes ave YES ?

poste un nouveau RSIT stp

Jennifer3400 · Answer

Salut, est-ce que tout est bon désormais? non je nai plus de pb avec YES! cest juste qu'un fichier html se trouvait dans le rapport zippé d'USB FIX. ci- dessous le RSIT 2months.

Tout semble OK ou se peut-il qu'il reste des éléments infectieux??
je vais procéder à la "désinfection" de mon appareil photo et dique dur externe, je posterai les rapports également. Merci beaucoup!!

:Logfile of random's system information tool 1.06 (written by random/random)
Run by Marie-Emilie at 2010-01-10 15:17:19
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 125 GB (82%) free of 153 GB
Total RAM: 1014 MB (53% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:17:25, on 10/01/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\Program Files\Wireless Select Switch\WLSS.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Battery Meter\BTMeter.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\CapsLKNotify\CapsLKNotify.exe
C:\Program Files\Dell Webcam\Dell Webcam Central\WebcamDell.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Dell Support Center\bin\sprtsvc.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Marie-Emilie\Bureau\RSIT.exe
C:\Program Files	rend micro\Marie-Emilie.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://outlook.live.com/owa/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=dell.msn.com&OCID=DELLDHP&pc=MDDS
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.msn.com/fr-fr?cobrand=dell.msn.com&OCID=DELLDHP&pc=MDDS
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\WINDOWS\system32\WLTRAY.exe
O4 - HKLM\..\Run: [WLSS] C:\Program Files\Wireless Select Switch\WLSS.exe
O4 - HKLM\..\Run: [BTMeter] C:\Program Files\Battery Meter\BTMeter.exe
O4 - HKLM\..\Run: [CapsLKNotify] C:\Program Files\CapsLKNotify\CapsLKNotify.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "c:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Dell Webcam Central] "C:\Program Files\Dell Webcam\Dell Webcam Central\WebcamDell.exe" /mode2
O4 - HKLM\..\Run: [dellsupportcenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P dellsupportcenter
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: 8FD435.lnk = C:\WINDOWS\system32\A5E9C1\8FD435.EXE
O4 - Startup: OpenOffice.org 3.1.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O20 - Winlogon Notify: GoToAssist - C:\Program Files\Citrix\GoToAssist\514\G2AWinLogon.dll
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: GoToAssist - Citrix Online, a division of Citrix Systems, Inc. - C:\Program Files\Citrix\GoToAssist\514\g2aservice.exe
O23 - Service: Service Google Update (gupdate1c9ff3a906c3e2e) (gupdate1c9ff3a906c3e2e) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: SupportSoft Sprocket Service (DellSupportCenter) (sprtsvc_DellSupportCenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\WLTRYSVC.EXE

plopus · Answer

re

"cest juste qu'un fichier html se trouvait dans le rapport zippé d'USB FIX"

c'est normal, c'est une copie de ton infection inactive, qui a ete zippé et qu'on te demande donc d'envoyer pour pouvoir ameliorer les outils, tu peut supprimer ce fichier zip si tu l'a envoyer

je regarde ton log et te dit le reste mais il y a un fichier a degager surement

Jennifer3400 · Answer

ok merci

ci-dessous le rapport USB FIX après avoir branché DD externe + appareil photos. (rapport envoyé sur leur site)

############################## | UsbFix V6.073 |

User : Marie-Emilie (Administrateurs) # DUBAI
Update on 09/01/2010 by El Desaparecido , C_XX & Chimay8
Start at: 15:27:12 | 10/01/2010
Website : http://pagesperso-orange.fr/NosTools/index.html
Contact : FindyKill.Contact@gmail.com

         Intel(R) Atom(TM) CPU N270   @ 1.60GHz
Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
Internet Explorer 8.0.6001.18702
Windows Firewall Status : Enabled
AV : AntiVir Desktop 9.0.1.32 [ Enabled | Updated ]

C:\ -> Disque fixe local # 149 Go (122,21 Go free) [OS] # NTFS
D:\ -> Disque fixe local # 232,83 Go (197,03 Go free) [My Passport] # FAT32

############################## | Processus actifs |

C:\WINDOWS\System32\smss.exe 768
C:\WINDOWS\system32\csrss.exe 836
C:\WINDOWS\system32\winlogon.exe 860
C:\WINDOWS\system32\services.exe 904
C:\WINDOWS\system32\lsass.exe 916
C:\WINDOWS\system32\svchost.exe 1100
C:\WINDOWS\system32\svchost.exe 1204
C:\WINDOWS\System32\svchost.exe 1348
C:\WINDOWS\system32\svchost.exe 1492
C:\WINDOWS\system32\svchost.exe 1660
C:\WINDOWS\System32\WLTRYSVC.EXE 1880
C:\WINDOWS\System32\bcmwltry.exe 1896
C:\WINDOWS\system32\spoolsv.exe 1916
C:\Program Files\Avira\AntiVir Desktop\sched.exe 1960
C:\WINDOWS\Explorer.EXE 352
C:\WINDOWS\system32\svchost.exe 492
C:\Program Files\Avira\AntiVir Desktop\avguard.exe 1636
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe 1672
C:\Program Files\Bonjour\mDNSResponder.exe 1652
C:\Program Files\Google\Update\GoogleUpdate.exe 1748
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe 196
C:\Program Files\Google\Update\GoogleUpdate.exe 220
C:\Program Files\Java\jre6\bin\jqs.exe 248
C:\Program Files\Dell Support Center\bin\sprtsvc.exe 668
C:\WINDOWS\system32\svchost.exe 1320
C:\WINDOWS\system32\SearchIndexer.exe 108
C:\WINDOWS\system32\wuauclt.exe 692
C:\WINDOWS\system32\wbem\wmiapsrv.exe 2328
C:\WINDOWS\system32\wbem\wmiprvse.exe 2436
C:\WINDOWS\System32\alg.exe 2524
C:\WINDOWS\system32\wbem\wmiprvse.exe 2624
C:\Program Files\Avira\AntiVir Desktop\avwsc.exe 2760

################## | Elements infectieux |

Supprimé ! C:\Recycler\S-1-5-21-2256441680-1492383327-2329721627-1006 
Supprimé ! D:\YES!.txt  
Supprimé ! D:\YES!.dll.vbs 

################## | Registre |


################## | Mountpoints2 |


################## | Listing des fichiers présent |

[30/04/2008 00:03|--a------|0] C:\AUTOEXEC.BAT 
[01/07/2009 02:34|-rahs----|216] C:\boot.ini 
[14/04/2008 13:00|-rahs----|4952] C:\Bootfont.bin 
[30/04/2008 00:03|--a------|0] C:\CONFIG.SYS 
[14/06/2009 11:24|-rah-----|4028] C:\dell.sdr 
[?|?|?] C:\hiberfil.sys 
[30/04/2008 00:03|--ah-----|0] C:\IO.SYS 
[30/04/2008 00:03|--ah-----|0] C:\MSDOS.SYS 
[14/04/2008 13:00|-rahs----|47564] C:\NTDETECT.COM 
[14/04/2008 13:00|-rahs----|252240] C:
tldr 
[?|?|?] C:\pagefile.sys 
[10/01/2010 15:30|--a------|2964] C:\UsbFix.txt 
[06/11/2008 15:49|--a------|74] D:\Install.ini 
[24/04/2004 11:38|--a------|37888] D:\JSTART.exe 
[13/11/2008 12:30|--a------|319488] D:\setup.exe 
[07/11/2008 14:56|--a------|42678] D:\wdinstaller.xml 
[25/11/2008 11:03|--a------|2325721] D:\WDSetup.exe 
[04/07/2009 07:52|--a------|178] D:\wdinstaller.log 
[04/07/2009 07:35|--a------|3827785] D:\WDSync.zip 
[13/02/2008 11:46|--a------|4523520] D:\WDSync_v7_1_020.exe 
[25/02/2008 10:30|-rahs----|54] D:\autorun.in_2.org 
[20/11/2009 06:40|--a------|1408569] D:\WD_Windows_Tools.exe 
[20/11/2009 06:40|--a------|1408569] D:\Documentation.exe 
[20/11/2009 06:40|--a------|1408569] D:\autorun.exe 
[20/11/2009 06:40|--a------|1408569] D:\WD Sync Data.exe 
[20/11/2009 06:40|--a------|1408569] D:\System Volume Information.exe 

################## | Vaccination |

# C:\autorun.inf -> Dossier créé par UsbFix.  
# D:\autorun.inf -> Dossier créé par UsbFix.  

################## | Crack > Keygen > Serial |


################## | Upload | 

Veuillez envoyer le fichier : C:\DOCUME~1\MARIE-~1\Bureau\UsbFix_Upload_Me_DUBAI.zip : https://www.ionos.fr/?affiliate_id=77097 
Merci pour votre contribution .  

################## | ! Fin du rapport # UsbFix V6.073 ! |

plopus · Answer

*  Télécharge OTM (OtmoveIT de Old_Timer) sur ton Bureau
http://www.geekstogo.com/forum/files/file/402-otm-oldtimers-move-it/
    * Double-clique sur OTM.exe pour le lancer.
    * Assure toi que la case Unregister Dll's and Ocx's soit bien cochée.
    * Copie la liste qui se trouve en gras dans la citation ci-dessous et colle-la dans le cadre de gauche de OTM sous Paste List of Files/Folders to move.


-----------------------------

:processes
explorer.exe
TeaTimer.exe
iexplorer.exe

:files
C:\WINDOWS\system32\A5E9C1\8FD435.EXE     
C:\WINDOWS\system32\A5E9C1
C:\Documents and Settings\Marie-Emilie\Menu Démarrer\Programmes\Démarrage\8FD435.lnk 

:reg

:services

:commands
[emptytemp]
[start explorer]
[reboot] 

-----------------------------

    * clique sur MoveIt! pour lancer la suppression.
    * Le résultat apparaitra dans le cadre "Results".
    * Clique sur Exit pour fermer.
    * Poste le rapport situé dans C:\_OTM\MovedFiles.
    * Il te sera peut-être demandé de redémarrer le pc pour achever la suppression. Si c'est le cas accepte par Yes.

ensuite

lance ce fichier  C:\Program Files	rend micro\Marie-Emilie.exe     

choisit do a scan only ete coche les cases a gauche des lignes :

 O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) 
 O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE     
 O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE     
 O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "c:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"     
 O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime     
 O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"     
 O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k 
 O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe     
 O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe     
 O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')     
O4 - Startup: 8FD435.lnk = C:\WINDOWS\system32\A5E9C1\8FD435.EXE     
 O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')     
 O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')     
 O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')     
  O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe     

puis clic sur fix checked

puis

verfier la vulnerabilité de windows et aussi d'autre produits

-
Soit par le biais de ce site internet il faut installer l'active X puis
clic start scan et le site montre d'une croix rouge les faille de
sécurité pour quelques produits important installé sur le PC comme
java, IE, windows, flashplayer, adobe...les + importantes
https://www.flexera.com/products/operations/software-vulnerability-management.html

-
Soit on peut aussi passer par un logiciel a installer qui scan le PC et
affiche TOUTES les mises a jour des logiciels et produits installé sur
le PC
https://filehippo.com/windows/tuning-utilities/


et enfin si + de probleme

Pour supprimer toutes les traces des logiciels qui ont servi à traiter les infections spécifiques :


    * Télécharge Toolscleaner sur ton Bureau

      https://www.commentcamarche.net/telecharger/securite/22061-toolscleaner/
    * Double-clique sur ToolsCleaner2.exe et laisse le travailler
    * Clique sur Recherche et laisse le scan se terminer.
    * Clique sur Suppression pour finaliser.
    * Tu peux, si tu le souhaites, te servir des Options facultatives.
    * Clique sur Quitter, pour que le rapport puisse se créer.
    * Le rapport (TCleaner.txt) se trouve à la racine de votre disque dur (C:\)...colle le dans ta prochaine réponse

puis purge ta restauration avec sa https://www.commentcamarche.net/faq/5097-virus-system-volume-information
puis creer un point de restauration sain avec sa https://www.commentcamarche.net/informatique/windows/147-restaurer-windows-avec-les-points-de-restauration/

Jennifer3400 · Answer

rapport OTM : 
All processes killed
========== PROCESSES ==========
Process explorer.exe killed successfully!
No active process named TeaTimer.exe was found!
No active process named iexplorer.exe was found!
========== FILES ==========
File/Folder C:\WINDOWS\system32\A5E9C1\8FD435.EXE not found.
File/Folder C:\WINDOWS\system32\A5E9C1 not found.
C:\Documents and Settings\Marie-Emilie\Menu Démarrer\Programmes\Démarrage\8FD435.lnk moved successfully.
========== REGISTRY ==========
========== SERVICES/DRIVERS ==========
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: Administrateur
->Temp folder emptied: 16384 bytes
->Temporary Internet Files folder emptied: 32902 bytes
 
User: All Users
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes
 
User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes
 
User: Marie-Emilie
->Temp folder emptied: 484001359 bytes
->Temporary Internet Files folder emptied: 48926028 bytes
->Java cache emptied: 15087875 bytes
 
User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 3072 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 26166031 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 23972038 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 76316045 bytes
 
Total Files Cleaned = 643,00 mb
 
 
OTM by OldTimer - Version 3.1.5.0 log created on 01102010_154223

Files moved on Reboot...
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\WT67WDAV	;_ylc=X1MDMjAyMjExODUwMARfcgMyBGFzc2V0AzE3NDk5NjkxBGNfcGxpc3QDNjgwNjMwOQRjYXQDbWRiBGNkbgMEcGcDBHBsX3MDNTU0MWFkNTItMDBhNS00YWM4LTgyN2YtMDAwMDVlMGJkZjVjBHBscl9zA3ZoV0dOel[1].gif not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\UHWRELKX\D1181600021%26id%3D16%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C%252522tenure%2&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\UHWRELKX\D1181600021%26id%3D8%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C%252522tenure%25&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\UHWRELKX\D1181600053%26id%3D13%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C%252522tenure%2&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\UHWRELKX\D1181600055%26id%3D3%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C%252522tenure%25&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\UHWRELKX	%26l%3DSKY%26f%3D150550152%26id%3D6%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\QNGNITSR\52CSC2%253A%2521fcHandoff%26p%3Dmail_candygram%26bg%3Dtransparent%26f%3D150550010%26id%3D33%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522s&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\QNGNITSR\D1181600021%26id%3D12%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C%252522tenure%2&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\QNGNITSR\D1181600021%26id%3D23%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C%252522tenure%2&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\QNGNITSR\D1181600021%26id%3D27%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C%252522tenure%2&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\QNGNITSR\D1181600021%26id%3D31%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C%252522tenure%2&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\QNGNITSR	%26l%3DSKY%26f%3D150550152%26id%3D12%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\QNGNITSR	%26l%3DSKY%26f%3D150550152%26id%3D18%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\QNGNITSR	%26l%3DSKY%26f%3D150550152%26id%3D6%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\QNGNITSR	%26l%3DSKY%26f%3D150550782%26id%3D13%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\QNGNITSR	%26l%3DSKY%26f%3D150550782%26id%3D14%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\QNGNITSR	%26l%3DSKY%26f%3D150550782%26id%3D5%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\QNGNITSR	%26l%3DSKY%26f%3D150550782%26id%3D9%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\OVM3I521\D1181600021%26id%3D25%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C%252522tenure%2&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\OVM3I521	%26l%3DSKY%26f%3D150550152%26id%3D10%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\OVM3I521	%26l%3DSKY%26f%3D150550152%26id%3D4%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\OVM3I521	%26l%3DSKY%26f%3D150550782%26id%3D3%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\ODQI756M\52CSC2%253A%2521fcHandoff%252CMNW%253A%2521fcHandoff%252CSW1%253A%2521fcHandoff%252CSW2%253A%2521fcHandoff%252CSW3%253A%2521fcHandoff%26p%3Dmail_candygram%26bg%3DFFFFFF%26f%&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\ODQI756M\;sdccat=3;sdccat=449;sdccat=7185;cnt=fr;page=xpo;gen=null;type=null;tile=10;zr=n;ct=;u=zO8Oy3W7yD_PSPO_7185_4099_;;dcove=d;sz=300x250;ord=1252252030730[1].htm not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\ODQI756M\homepage;net=ns;u=ns-23190769_1252260257,113b4406e207745,CE_DigCam_Olympus,;;kw=;dcopt=ist;tile=1;ord1=493818;sz=728x90;contx=CE_DigCam_Olympus;btg=;ord=6617162219109727[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\ODQI756M\homepage;net=ns;u=ns-23457376_1252260651,113b4406e207745,CE_DigCam_Samsung,;;kw=;tile=2;ord1=443944;sz=300x250,336x280;contx=CE_DigCam_Samsung;btg=;ord=968675041329754[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\ODQI756M\homepage;net=ns;u=ns-38033592_1252260667,113b4406e207745,CE_DigCam_Compact,;;kw=;tile=3;ord1=979241;sz=120x600,160x600;contx=CE_DigCam_Compact;btg=;ord=112145739898422[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\ODQI756M\homepage;net=ns;u=ns-70450519_1252260265,113b4406e207745,CE_DigCam_Olympus,;;kw=;tile=3;ord1=917070;sz=120x600,160x600;contx=CE_DigCam_Olympus;btg=;ord=6617162219109727[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\ODQI756M\homepage;net=ns;u=ns-7122608_1252260647,113b4406e207745,CE_DigCam_Samsung,;;kw=;dcopt=ist;tile=1;ord1=502404;sz=728x90;contx=CE_DigCam_Samsung;btg=;ord=968675041329754[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\ODQI756M\homepage;net=ns;u=ns-90223864_1252260453,113b4406e207745,CE_Digcam_SLR,;;kw=;tile=3;ord1=977325;sz=120x600,160x600;contx=CE_Digcam_SLR;btg=;ord=3390660470260330[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\ODQI756M\homepage;net=ns;u=ns-92039649_1252259706,113b4406e207745,CE_DigCam_Olympus,;;kw=;tile=2;ord1=922031;sz=300x250,336x280;contx=CE_DigCam_Olympus;btg=;ord=5195815090127869[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\ODQI756M
ews;net=ns;u=ns-61785115_1252260662,113b4406e207745,CE_DigCam_Compact,;;kw=;tile=2;ord1=896386;sz=300x250,336x280;contx=CE_DigCam_Compact;btg=;ord=112145739898422[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\ODQI756M	%26l%3DSKY%252CMNW%253A%2521fcHandoff%252CSW1%253A%2521fcHandoff%252CSW2%253A%2521fcHandoff%252CSW3%253A%2521fcHandoff%26f%3D150550152%26id%3D1%26cbk%3DfcLoaded%26tgt%3D_bl&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\ODQI756M	%26l%3DSKY%252CMNW%253A%2521fcHandoff%252CSW1%253A%2521fcHandoff%252CSW2%253A%2521fcHandoff%252CSW3%253A%2521fcHandoff%26f%3D150550152%26id%3D4%26cbk%3DfcLoaded%26tgt%3D_bl&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\ODQI756M	%26l%3DSKY%26f%3D150550152%26id%3D2%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\ODE78PMV	;_ylc=X1MDMjAyMjExODUwMARfcgMyBGFzc2V0AzE3NDk5NjkxBGNfcGxpc3QDNjgwNjMwOQRjYXQDbWRiBGNkbgMEcGcDBHBsX3MDNTU0MWFkNTItMDBhNS00YWM4LTgyN2YtMDAwMDVlMGJkZjVjBHBscl9zA3dKRG9hYk[1].gif not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\K6VN6J8L\252267636&ga_sid=1252267636&ga_hid=925348382&ga_fc=1&u_tz=120&u_his=3&u_java=1&u_h=576&u_w=1024&u_ah=546&u_aw=1024&u_cd=32&u_nplug=0&u_nmime=0&biw=1003&bih=402&fu=0&ifi=1&dtd=63 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\K6VN6J8L\252267636&ga_sid=1252267636&ga_hid=925348382&ga_fc=1&u_tz=120&u_his=3&u_java=1&u_h=576&u_w=1024&u_ah=546&u_aw=1024&u_cd=32&u_nplug=0&u_nmime=0&biw=1003&bih=402&fu=0&ifi=2&dtd=47 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\K6VN6J8L\252267689&ga_sid=1252267689&ga_hid=781963907&ga_fc=0&u_tz=120&u_his=3&u_java=1&u_h=576&u_w=1024&u_ah=546&u_aw=1024&u_cd=32&u_nplug=0&u_nmime=0&biw=1003&bih=385&fu=0&ifi=1&dtd=94 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\K6VN6J8L\;sdccat=3;sdccat=449;sdccat=7185;cnt=fr;page=xpo;gen=null;type=null;tile=5;zr=n;ct=;u=zO8Oy3W7yD_PSPO_7185_4099_;;dcove=d;sz=115x30;ord=1252252030730[1].htm not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\K6VN6J8L\homepage;net=ns;u=ns-2559163_1252260451,113b4406e207745,CE_Digcam_SLR,;;kw=;tile=3;ord1=40538;sz=120x600,160x600;contx=CE_Digcam_SLR;btg=;ord=3390660470260330[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\K6VN6J8L\homepage;net=ns;u=ns-30191319_1252260263,113b4406e207745,CE_DigCam_Olympus,;;kw=;tile=2;ord1=536094;sz=300x250,336x280;contx=CE_DigCam_Olympus;btg=;ord=6617162219109727[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\K6VN6J8L\homepage;net=ns;u=ns-47381210_1252260623,113b4406e207745,CE_Digcam_SLR,;;kw=;dcopt=ist;tile=1;ord1=659871;sz=728x90;contx=CE_Digcam_SLR;btg=;ord=8420958465310776[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\K6VN6J8L\homepage;net=ns;u=ns-47398349_1252260665,113b4406e207745,CE_DigCam_Compact,;;kw=;tile=2;ord1=241946;sz=300x250,336x280;contx=CE_DigCam_Compact;btg=;ord=112145739898422[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\K6VN6J8L\homepage;net=ns;u=ns-53330680_1252260632,113b4406e207745,CE_Digcam_SLR,;;kw=;tile=3;ord1=434246;sz=120x600,160x600;contx=CE_Digcam_SLR;btg=;ord=8420958465310776[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\K6VN6J8L\homepage;net=ns;u=ns-7331184_1252260477,113b4406e207745,CE_Digcam_SLR,;;kw=;tile=3;ord1=356618;sz=120x600,160x600;contx=CE_Digcam_SLR;btg=;ord=3036041165201102[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\K6VN6J8L\homepage;net=ns;u=ns-79689223_1252260473,113b4406e207745,CE_Digcam_SLR,;;kw=;tile=2;ord1=872457;sz=300x250,336x280;contx=CE_Digcam_SLR;btg=;ord=3036041165201102[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\K6VN6J8L\homepage;net=ns;u=ns-81659356_1252260628,113b4406e207745,CE_Digcam_SLR,;;kw=;tile=2;ord1=945456;sz=300x250,336x280;contx=CE_Digcam_SLR;btg=;ord=8420958465310776[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\K6VN6J8L	%26l%3DSKY%252CMNW%253A%2521fcHandoff%252CSW1%253A%2521fcHandoff%252CSW2%253A%2521fcHandoff%252CSW3%253A%2521fcHandoff%26f%3D150550689%26id%3D5%26cbk%3DfcLoaded%26tgt%3D_bl&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\K6VN6J8L	%26l%3DSKY%252CMNW%253A%2521fcHandoff%252CSW1%253A%2521fcHandoff%252CSW2%253A%2521fcHandoff%252CSW3%253A%2521fcHandoff%26f%3D150550782%26id%3D2%26cbk%3DfcLoaded%26tgt%3D_bl&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\K6VN6J8L	%26l%3DSKY%26f%3D150550782%26id%3D5%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\IAV3VE6V\52CSC2%253A%2521fcHandoff%252CMNW%253A%2521fcHandoff%252CSW1%253A%2521fcHandoff%252CSW2%253A%2521fcHandoff%252CSW3%253A%2521fcHandoff%26p%3Dmail_candygram%26bg%3DFFFFFF%26f%&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\IAV3VE6V\;sdccat=3;sdccat=449;sdccat=7185;cnt=fr;page=xpf;gen=null;type=null;tile=5;zr=n;ct=;u=MgeLKhuchW_DSPF_7185_4099_;;dcove=d;sz=115x30;ord=1252252076141[1].htm not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\IAV3VE6V\;sdccat=3;sdccat=449;sdccat=7185;cnt=fr;page=xpf;gen=null;type=null;tile=6;zr=n;ct=;u=MgeLKhuchW_DSPF_7185_4099_;dcopt=ist;dcove=d;sz=728x90;ord=1252252076141[1].htm not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\IAV3VE6V\;sdccat=3;sdccat=449;sdccat=7185;cnt=fr;page=xpo;gen=null;type=null;tile=6;zr=n;ct=;u=zO8Oy3W7yD_PSPO_7185_4099_;dcopt=ist;dcove=d;sz=728x90;ord=1252252030730[1].htm not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\IAV3VE6V\CA0PIFGT.com%2Fsearch%3Fhl%3Dfr%26source%3Dhp%26q%3DRaad%2BSabounchi%26lr%3D%26aq%3Df%26oq%3D&cc=100&u_h=576&u_w=1024&u_ah=546&u_aw=1024&u_cd=32&u_tz=120&u_his=8&u_java=true not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\IAV3VE6V\click2,VaUDACPCCQDFxSwAAAAAAODpDAAAAAAAAgAaaCEAAAAAAP8AAAABFoyuAQAAAAAAA0USAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwJAIAAAAAAAIAAgAAAAAAgK[1].htm not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\IAV3VE6V\homepage;net=ns;u=ns-24403685_1252259700,113b4406e207745,CE_DigCam_Olympus,;;kw=;dcopt=ist;tile=1;ord1=36870;sz=728x90;contx=CE_DigCam_Olympus;btg=;ord=5195815090127869[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\IAV3VE6V\homepage;net=ns;u=ns-30977514_1252260669,113b4406e207745,CE_DigCam_Compact,;;kw=;tile=3;ord1=747670;sz=120x600,160x600;contx=CE_DigCam_Compact;btg=;ord=112145739898422[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\IAV3VE6V\homepage;net=ns;u=ns-31688791_1252260475,113b4406e207745,CE_Digcam_SLR,;;kw=;tile=3;ord1=450703;sz=120x600,160x600;contx=CE_Digcam_SLR;btg=;ord=3036041165201102[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\IAV3VE6V\homepage;net=ns;u=ns-32088629_1252260630,113b4406e207745,CE_Digcam_SLR,;;kw=;tile=3;ord1=760200;sz=120x600,160x600;contx=CE_Digcam_SLR;btg=;ord=8420958465310776[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\IAV3VE6V\homepage;net=ns;u=ns-4653104_1252259711,113b4406e207745,CE_DigCam_Olympus,;;kw=;tile=2;ord1=342757;sz=300x250,336x280;contx=CE_DigCam_Olympus;btg=;ord=5195815090127869[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\IAV3VE6V\homepage;net=ns;u=ns-89927860_1252260260,113b4406e207745,CE_DigCam_Olympus,;;kw=;tile=2;ord1=991540;sz=300x250,336x280;contx=CE_DigCam_Olympus;btg=;ord=6617162219109727[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\IAV3VE6V\homepage;net=ns;u=ns-90184344_1252260658,113b4406e207745,CE_DigCam_Compact,;;kw=;dcopt=ist;tile=1;ord1=362265;sz=728x90;contx=CE_DigCam_Compact;btg=;ord=112145739898422[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\IAV3VE6V	%26l%3DSKY%252CMNW%253A%2521fcHandoff%252CSW1%253A%2521fcHandoff%252CSW2%253A%2521fcHandoff%252CSW3%253A%2521fcHandoff%26f%3D150550782%26id%3D2%26cbk%3DfcLoaded%26tgt%3D_bl&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\IAV3VE6V	%26l%3DSKY%252CMNW%253A%2521fcHandoff%252CSW1%253A%2521fcHandoff%252CSW2%253A%2521fcHandoff%252CSW3%253A%2521fcHandoff%26f%3D150550782%26id%3D6%26cbk%3DfcLoaded%26tgt%3D_bl&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\IAV3VE6V	%26l%3DSKY%26f%3D150550152%26id%3D4%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\IAV3VE6V	%26l%3DSKY%26f%3D150550152%26id%3D6%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\IAV3VE6V	%26l%3DSKY%26f%3D150550152%26id%3D8%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\IAV3VE6V	%26l%3DSKY%26f%3D150550782%26id%3D3%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\GXUVG1I7\53A%2521fcHandoff%252CMIP4%253Aslot_MIP4%26p%3Dmail_candygram%26bg%3Dtransparent%26f%3D971800348%26id%3D1%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\GXUVG1I7\d=1262032223&ga_hid=877223119&ga_fc=1&u_tz=60&u_his=13&u_java=1&u_h=576&u_w=1024&u_ah=546&u_aw=1024&u_cd=32&u_nplug=0&u_nmime=0&biw=1003&bih=430&ifk=4187891303&fu=0&ifi=1&dtd=62 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\GXUVG1I7\main_188;sz=450x60;mpvid=AAR8bxJbXENz5LA7;!c=188;ks=shows;ks=news;ks=specialevents;ks=sports;longform=1;klg=fr;kvid=yRxxv6AZ_xg;kpu=itnnews;kt=K;ko=p;show_id=64BaKpnpOA8[1].asx not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\GXUVG1I7\site=LOSANGELES-CA&affiliate=kiis-fm&market=LOSANGELES-CA&format=CHRRHYTHMIC&pagepos=3301&content1=videosondemand&content2=cc-common&type=local&type2=local&tile=72678714[1].htm not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\GXUVG1I7\site=LOSANGELES-CA&affiliate=kiis-fm&market=LOSANGELES-CA&format=CHRRHYTHMIC&pagepos=3304&content1=videosondemand&content2=cc-common&type=local&type2=local&tile=27394142[1].htm not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\GXUVG1I7\site=LOSANGELES-CA&affiliate=kiis-fm&market=LOSANGELES-CA&format=CHRRHYTHMIC&pagepos=5014&content1=lo[1].php&type=national&type2=national&tile=283721712&transactionID=283721712 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\GXUVG1I7	%26l%3DSKY%26f%3D150550152%26id%3D2%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\GXUVG1I7	%26l%3DSKY%26f%3D150550152%26id%3D5%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\GXUVG1I7	%26l%3DSKY%26f%3D150550152%26id%3D6%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\GXUVG1I7	%26l%3DSKY%26f%3D150550782%26id%3D2%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\GXUVG1I7\Type=click&FlightID=56386&AdID=96007&TargetID=33989&ASeg=&AMod=&Segments=4,5501,14169,14586,14876,16544,16787,16793,18689,20084,20654,24335,25691,27425,29635,37582,43955[1].htm not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\G5ABMR4X\D1181600053%26id%3D21%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C%252522tenure%2&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\G5ABMR4X	%26l%3DSKY%26f%3D150550152%26id%3D2%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\G5ABMR4X	%26l%3DSKY%26f%3D150550782%26id%3D11%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\G5ABMR4X	%26l%3DSKY%26f%3D150550782%26id%3D7%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\CPI34LA3\53A%2521fcHandoff%252CMIP4%253Aslot_MIP4%26p%3Dmail_candygram%26bg%3Dtransparent%26f%3D971800348%26id%3D1%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\CPI34LA3\d=1262032223&ga_hid=824418379&ga_fc=1&u_tz=60&u_his=14&u_java=1&u_h=576&u_w=1024&u_ah=546&u_aw=1024&u_cd=32&u_nplug=0&u_nmime=0&biw=1003&bih=430&ifk=3304874154&fu=0&ifi=1&dtd=78 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\CPI34LA3\sid=1262032223&ga_hid=14293121&ga_fc=1&u_tz=60&u_his=15&u_java=1&u_h=576&u_w=1024&u_ah=546&u_aw=1024&u_cd=32&u_nplug=0&u_nmime=0&biw=1003&bih=430&ifk=611821756&fu=0&ifi=1&dtd=32 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\CPI34LA3\site=LOSANGELES-CA&affiliate=kiis-fm&market=LOSANGELES-CA&format=CHRRHYTHMIC&pagepos=3302&content1=videosondemand&content2=cc-common&type=local&type2=local&tile=70217478[1].htm not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\CPI34LA3\site=LOSANGELES-CA&affiliate=kiis-fm&market=LOSANGELES-CA&format=CHRRHYTHMIC&pagepos=3303&content1=videosondemand&content2=cc-common&type=local&type2=local&tile=47037275[1].htm not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\CPI34LA3\site=LOSANGELES-CA&affiliate=kiis-fm&market=LOSANGELES-CA&format=CHRRHYTHMIC&pagepos=3330&content1=videosondemand&content2=cc-common&type=local&type2=local&tile=78565442[1].htm not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\CPI34LA3\site=LOSANGELES-CA&affiliate=kiis-fm&market=LOSANGELES-CA&format=CHRRHYTHMIC&pagepos=5014&content1=h[1].html&type=national&type2=national&tile=822328126&transactionID=822328126 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\CPI34LA3	%26l%3DSKY%26f%3D150550152%26id%3D4%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\BHDJMEU5\main_188;sz=480x360;mpvid=AAR8bxJbXENz5LA7;!c=188;ks=shows;ks=news;ks=specialevents;ks=sports;longform=1;klg=fr;kvid=yRxxv6AZ_xg;kpu=itnnews;kt=K;ko=p;show_id=64BaKpnpOA[1].asx not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\BHDJMEU5\site=LOSANGELES-CA&affiliate=kiis-fm&market=LOSANGELES-CA&format=CHRRHYTHMIC&pagepos=3300&content1=videosondemand&content2=cc-common&type=local&type2=local&tile=97489015[1].htm not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\BHDJMEU5\site=LOSANGELES-CA&affiliate=kiis-fm&market=LOSANGELES-CA&format=CHRRHYTHMIC&pagepos=5014&content1=loc[1].html&type=national&type2=national&tile=28956419&transactionID=28956419 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\BHDJMEU5	%26l%3DSKY%26f%3D150550006%26id%3D2%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\BHDJMEU5	%26l%3DSKY%26f%3D150550152%26id%3D4%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\BHDJMEU5	%26l%3DSKY%26f%3D150550152%26id%3D7%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\BHDJMEU5	%26l%3DSKY%26f%3D150550782%26id%3D3%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\BHDJMEU5	%26l%3DSKY%26f%3D150550782%26id%3D5%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\BHDJMEU5\Type=click&FlightID=56386&AdID=96007&TargetID=33989&ASeg=&AMod=&Segments=4,5501,14169,14586,14876,16544,16787,16793,18689,20084,20654,24335,25691,27425,29635,37582,43955[1].htm not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\8XMFO5YR\0%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20Please%20consider%20the%20environment%20before%20printing%20this&track=click&modid=searchModule&visible=0&treatment= not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\8XMFO5YR\53A%2521fcHandoff%252CMIP4%253Aslot_MIP4%26p%3Dmail_candygram%26bg%3Dtransparent%26f%3D971800348%26id%3D1%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\8XMFO5YR	%26l%3DSKY%26f%3D150550152%26id%3D3%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\8XMFO5YR	%26l%3DSKY%26f%3D150550782%26id%3D11%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\8XMFO5YR	%26l%3DSKY%26f%3D150550782%26id%3D5%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\8XMFO5YR	%26l%3DSKY%26f%3D150550782%26id%3D6%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\49AFWHQB	%26l%3DSKY%26f%3D150550152%26id%3D10%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\49AFWHQB	%26l%3DSKY%26f%3D150550152%26id%3D5%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\49AFWHQB	%26l%3DSKY%26f%3D150550152%26id%3D7%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\49AFWHQB	%26l%3DSKY%26f%3D150550152%26id%3D8%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\49AFWHQB	%26l%3DSKY%26f%3D150550782%26id%3D4%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\412VKPIZ\click2,VaUDADCrCwBKGDcAAAAAAMf2DgAAAAAAAgAKaAoAAAAAAP8AAAAGCpJ-BgAAAAAAFwYVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwJAIAAAAAAAIAAgAAAAAAl2[1].htm not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\412VKPIZ	%26l%3DSKY%26f%3D150550152%26id%3D6%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\412VKPIZ	%26l%3DSKY%26f%3D150550782%26id%3D8%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\412VKPIZ	%26l%3DSKY%26f%3D150550837%26id%3D9%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\1BXS2UG2\252267591&ga_sid=1252267591&ga_hid=954568836&ga_fc=0&u_tz=120&u_his=2&u_java=1&u_h=576&u_w=1024&u_ah=546&u_aw=1024&u_cd=32&u_nplug=0&u_nmime=0&biw=1003&bih=385&fu=0&ifi=1&dtd=31 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\1BXS2UG2\52CSC2%253A%2521fcHandoff%252CMNW%253A%2521fcHandoff%252CSW1%253A%2521fcHandoff%252CSW2%253A%2521fcHandoff%252CSW3%253A%2521fcHandoff%26p%3Dmail_candygram%26bg%3DFFFFFF%26f%&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\1BXS2UG2\53A%2521fcHandoff%252CMIP4%253Aslot_MIP4%26p%3Dmail_candygram%26bg%3Dtransparent%26f%3D971800348%26id%3D1%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\1BXS2UG2\;sdccat=3;sdccat=449;sdccat=7185;cnt=fr;page=xpf;gen=null;type=null;tile=10;zr=n;ct=;u=MgeLKhuchW_DSPF_7185_4099_;;dcove=d;sz=300x250;ord=1252252076141[1].htm not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\1BXS2UG2\;sdccat=3;sdccat=449;sdccat=7185;cnt=fr;page=xpf;gen=null;type=null;tile=1;zr=n;ct=;u=MgeLKhuchW_DSPF_7185_4099_;;dcove=d;sz=728x90;ord=1252252076141[1].htm not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\1BXS2UG2\;sdccat=3;sdccat=449;sdccat=7185;cnt=fr;page=xpf;gen=null;type=null;tile=4;zr=n;ct=;u=MgeLKhuchW_DSPF_7185_4099_;;dcove=d;sz=300x250;ord=1252252076141[1].htm not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\1BXS2UG2\;sdccat=3;sdccat=449;sdccat=7185;cnt=fr;page=xpo;gen=null;type=null;tile=4;zr=n;ct=;u=zO8Oy3W7yD_PSPO_7185_4099_;;dcove=d;sz=300x250;ord=1252252030730[1].htm not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\1BXS2UG2\homepage;net=ns;u=ns-34291434_1252260467,113b4406e207745,CE_Digcam_SLR,;;kw=;dcopt=ist;tile=1;ord1=883496;sz=728x90;contx=CE_Digcam_SLR;btg=;ord=3036041165201102[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\1BXS2UG2\homepage;net=ns;u=ns-37163217_1252260267,113b4406e207745,CE_DigCam_Olympus,;;kw=;tile=3;ord1=540525;sz=120x600,160x600;contx=CE_DigCam_Olympus;btg=;ord=6617162219109727[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\1BXS2UG2\homepage;net=ns;u=ns-4339152_1252260445,113b4406e207745,CE_Digcam_SLR,;;kw=;dcopt=ist;tile=1;ord1=269910;sz=728x90;contx=CE_Digcam_SLR;btg=;ord=3390660470260330[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\1BXS2UG2\homepage;net=ns;u=ns-48146124_1252260470,113b4406e207745,CE_Digcam_SLR,;;kw=;tile=2;ord1=244982;sz=300x250,336x280;contx=CE_Digcam_SLR;btg=;ord=3036041165201102[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\1BXS2UG2\homepage;net=ns;u=ns-98197327_1252260449,113b4406e207745,CE_Digcam_SLR,;;kw=;tile=2;ord1=222987;sz=300x250,336x280;contx=CE_Digcam_SLR;btg=;ord=3390660470260330[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\1BXS2UG2\homepage;net=ns;u=ns-98691337_1252260626,113b4406e207745,CE_Digcam_SLR,;;kw=;tile=2;ord1=785993;sz=300x250,336x280;contx=CE_Digcam_SLR;btg=;ord=8420958465310776[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\1BXS2UG2	%26l%3DSKY%252CMNW%253A%2521fcHandoff%252CSW1%253A%2521fcHandoff%252CSW2%253A%2521fcHandoff%252CSW3%253A%2521fcHandoff%26f%3D150550152%26id%3D1%26cbk%3DfcLoaded%26tgt%3D_bl&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\1BXS2UG2	%26l%3DSKY%26f%3D150550782%26id%3D7%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\0TM70XIB	%26l%3DSKY%26f%3D150550152%26id%3D3%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\0TM70XIB	%26l%3DSKY%26f%3D150550152%26id%3D9%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\0TM70XIB	%26l%3DSKY%26f%3D150550782%26id%3D3%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\0TM70XIB	%26l%3DSKY%26f%3D150550782%26id%3D4%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\0HUZ8DIJ\=1262032223&ga_hid=1263903429&ga_fc=1&u_tz=60&u_his=15&u_java=1&u_h=576&u_w=1024&u_ah=546&u_aw=1024&u_cd=32&u_nplug=0&u_nmime=0&biw=1003&bih=430&ifk=2427752989&fu=0&ifi=1&dtd=63 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\0HUZ8DIJ\=1262032223&ga_hid=1793504724&ga_fc=1&u_tz=60&u_his=15&u_java=1&u_h=576&u_w=1024&u_ah=546&u_aw=1024&u_cd=32&u_nplug=0&u_nmime=0&biw=1003&bih=430&ifk=1429826307&fu=0&ifi=1&dtd=78 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\0HUZ8DIJ\d=1262032223&ga_hid=240783467&ga_fc=1&u_tz=60&u_his=15&u_java=1&u_h=576&u_w=1024&u_ah=546&u_aw=1024&u_cd=32&u_nplug=0&u_nmime=0&biw=1003&bih=430&ifk=1847412413&fu=0&ifi=1&dtd=47 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\0HUZ8DIJ\site=LOSANGELES-CA&affiliate=kiis-fm&market=LOSANGELES-CA&format=CHRRHYTHMIC&pagepos=3305&content1=videosondemand&content2=cc-common&type=local&type2=local&tile=42499051[1].htm not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\0HUZ8DIJ\site=LOSANGELES-CA&affiliate=kiis-fm&market=LOSANGELES-CA&format=CHRRHYTHMIC&pagepos=3307&content1=videosondemand&content2=cc-common&type=national&type2=national&tile=78[1].htm not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\0HUZ8DIJ	%26l%3DSKY%26f%3D150550152%26id%3D2%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\0HUZ8DIJ	%26l%3DSKY%26f%3D150550152%26id%3D3%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\0HUZ8DIJ	%26l%3DSKY%26f%3D150550152%26id%3D8%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\0HUZ8DIJ	%26l%3DSKY%26f%3D150550782%26id%3D2%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\0HUZ8DIJ	%26l%3DSKY%26f%3D150550782%26id%3D3%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\0HUZ8DIJ	%26l%3DSKY%26f%3D150550782%26id%3D5%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\0HUZ8DIJ	%26l%3DSKY%26f%3D150550782%26id%3D6%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!

Registry entries deleted on Reboot...

Jennifer3400 · Answer

rapport OTM

All processes killed
========== PROCESSES ==========
Process explorer.exe killed successfully!
No active process named TeaTimer.exe was found!
No active process named iexplorer.exe was found!
========== FILES ==========
File/Folder C:\WINDOWS\system32\A5E9C1\8FD435.EXE not found.
File/Folder C:\WINDOWS\system32\A5E9C1 not found.
C:\Documents and Settings\Marie-Emilie\Menu Démarrer\Programmes\Démarrage\8FD435.lnk moved successfully.
========== REGISTRY ==========
========== SERVICES/DRIVERS ==========
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: Administrateur
->Temp folder emptied: 16384 bytes
->Temporary Internet Files folder emptied: 32902 bytes
 
User: All Users
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes
 
User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes
 
User: Marie-Emilie
->Temp folder emptied: 484001359 bytes
->Temporary Internet Files folder emptied: 48926028 bytes
->Java cache emptied: 15087875 bytes
 
User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 3072 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 26166031 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 23972038 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 76316045 bytes
 
Total Files Cleaned = 643,00 mb
 
 
OTM by OldTimer - Version 3.1.5.0 log created on 01102010_154223

Files moved on Reboot...
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\WT67WDAV	;_ylc=X1MDMjAyMjExODUwMARfcgMyBGFzc2V0AzE3NDk5NjkxBGNfcGxpc3QDNjgwNjMwOQRjYXQDbWRiBGNkbgMEcGcDBHBsX3MDNTU0MWFkNTItMDBhNS00YWM4LTgyN2YtMDAwMDVlMGJkZjVjBHBscl9zA3ZoV0dOel[1].gif not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\UHWRELKX\D1181600021%26id%3D16%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C%252522tenure%2&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\UHWRELKX\D1181600021%26id%3D8%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C%252522tenure%25&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\UHWRELKX\D1181600053%26id%3D13%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C%252522tenure%2&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\UHWRELKX\D1181600055%26id%3D3%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C%252522tenure%25&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\UHWRELKX	%26l%3DSKY%26f%3D150550152%26id%3D6%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\QNGNITSR\52CSC2%253A%2521fcHandoff%26p%3Dmail_candygram%26bg%3Dtransparent%26f%3D150550010%26id%3D33%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522s&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\QNGNITSR\D1181600021%26id%3D12%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C%252522tenure%2&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\QNGNITSR\D1181600021%26id%3D23%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C%252522tenure%2&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\QNGNITSR\D1181600021%26id%3D27%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C%252522tenure%2&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\QNGNITSR\D1181600021%26id%3D31%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C%252522tenure%2&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\QNGNITSR	%26l%3DSKY%26f%3D150550152%26id%3D12%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\QNGNITSR	%26l%3DSKY%26f%3D150550152%26id%3D18%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\QNGNITSR	%26l%3DSKY%26f%3D150550152%26id%3D6%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\QNGNITSR	%26l%3DSKY%26f%3D150550782%26id%3D13%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\QNGNITSR	%26l%3DSKY%26f%3D150550782%26id%3D14%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\QNGNITSR	%26l%3DSKY%26f%3D150550782%26id%3D5%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\QNGNITSR	%26l%3DSKY%26f%3D150550782%26id%3D9%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\OVM3I521\D1181600021%26id%3D25%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C%252522tenure%2&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\OVM3I521	%26l%3DSKY%26f%3D150550152%26id%3D10%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\OVM3I521	%26l%3DSKY%26f%3D150550152%26id%3D4%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\OVM3I521	%26l%3DSKY%26f%3D150550782%26id%3D3%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\ODQI756M\52CSC2%253A%2521fcHandoff%252CMNW%253A%2521fcHandoff%252CSW1%253A%2521fcHandoff%252CSW2%253A%2521fcHandoff%252CSW3%253A%2521fcHandoff%26p%3Dmail_candygram%26bg%3DFFFFFF%26f%&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\ODQI756M\;sdccat=3;sdccat=449;sdccat=7185;cnt=fr;page=xpo;gen=null;type=null;tile=10;zr=n;ct=;u=zO8Oy3W7yD_PSPO_7185_4099_;;dcove=d;sz=300x250;ord=1252252030730[1].htm not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\ODQI756M\homepage;net=ns;u=ns-23190769_1252260257,113b4406e207745,CE_DigCam_Olympus,;;kw=;dcopt=ist;tile=1;ord1=493818;sz=728x90;contx=CE_DigCam_Olympus;btg=;ord=6617162219109727[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\ODQI756M\homepage;net=ns;u=ns-23457376_1252260651,113b4406e207745,CE_DigCam_Samsung,;;kw=;tile=2;ord1=443944;sz=300x250,336x280;contx=CE_DigCam_Samsung;btg=;ord=968675041329754[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\ODQI756M\homepage;net=ns;u=ns-38033592_1252260667,113b4406e207745,CE_DigCam_Compact,;;kw=;tile=3;ord1=979241;sz=120x600,160x600;contx=CE_DigCam_Compact;btg=;ord=112145739898422[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\ODQI756M\homepage;net=ns;u=ns-70450519_1252260265,113b4406e207745,CE_DigCam_Olympus,;;kw=;tile=3;ord1=917070;sz=120x600,160x600;contx=CE_DigCam_Olympus;btg=;ord=6617162219109727[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\ODQI756M\homepage;net=ns;u=ns-7122608_1252260647,113b4406e207745,CE_DigCam_Samsung,;;kw=;dcopt=ist;tile=1;ord1=502404;sz=728x90;contx=CE_DigCam_Samsung;btg=;ord=968675041329754[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\ODQI756M\homepage;net=ns;u=ns-90223864_1252260453,113b4406e207745,CE_Digcam_SLR,;;kw=;tile=3;ord1=977325;sz=120x600,160x600;contx=CE_Digcam_SLR;btg=;ord=3390660470260330[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\ODQI756M\homepage;net=ns;u=ns-92039649_1252259706,113b4406e207745,CE_DigCam_Olympus,;;kw=;tile=2;ord1=922031;sz=300x250,336x280;contx=CE_DigCam_Olympus;btg=;ord=5195815090127869[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\ODQI756M
ews;net=ns;u=ns-61785115_1252260662,113b4406e207745,CE_DigCam_Compact,;;kw=;tile=2;ord1=896386;sz=300x250,336x280;contx=CE_DigCam_Compact;btg=;ord=112145739898422[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\ODQI756M	%26l%3DSKY%252CMNW%253A%2521fcHandoff%252CSW1%253A%2521fcHandoff%252CSW2%253A%2521fcHandoff%252CSW3%253A%2521fcHandoff%26f%3D150550152%26id%3D1%26cbk%3DfcLoaded%26tgt%3D_bl&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\ODQI756M	%26l%3DSKY%252CMNW%253A%2521fcHandoff%252CSW1%253A%2521fcHandoff%252CSW2%253A%2521fcHandoff%252CSW3%253A%2521fcHandoff%26f%3D150550152%26id%3D4%26cbk%3DfcLoaded%26tgt%3D_bl&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\ODQI756M	%26l%3DSKY%26f%3D150550152%26id%3D2%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\ODE78PMV	;_ylc=X1MDMjAyMjExODUwMARfcgMyBGFzc2V0AzE3NDk5NjkxBGNfcGxpc3QDNjgwNjMwOQRjYXQDbWRiBGNkbgMEcGcDBHBsX3MDNTU0MWFkNTItMDBhNS00YWM4LTgyN2YtMDAwMDVlMGJkZjVjBHBscl9zA3dKRG9hYk[1].gif not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\K6VN6J8L\252267636&ga_sid=1252267636&ga_hid=925348382&ga_fc=1&u_tz=120&u_his=3&u_java=1&u_h=576&u_w=1024&u_ah=546&u_aw=1024&u_cd=32&u_nplug=0&u_nmime=0&biw=1003&bih=402&fu=0&ifi=1&dtd=63 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\K6VN6J8L\252267636&ga_sid=1252267636&ga_hid=925348382&ga_fc=1&u_tz=120&u_his=3&u_java=1&u_h=576&u_w=1024&u_ah=546&u_aw=1024&u_cd=32&u_nplug=0&u_nmime=0&biw=1003&bih=402&fu=0&ifi=2&dtd=47 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\K6VN6J8L\252267689&ga_sid=1252267689&ga_hid=781963907&ga_fc=0&u_tz=120&u_his=3&u_java=1&u_h=576&u_w=1024&u_ah=546&u_aw=1024&u_cd=32&u_nplug=0&u_nmime=0&biw=1003&bih=385&fu=0&ifi=1&dtd=94 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\K6VN6J8L\;sdccat=3;sdccat=449;sdccat=7185;cnt=fr;page=xpo;gen=null;type=null;tile=5;zr=n;ct=;u=zO8Oy3W7yD_PSPO_7185_4099_;;dcove=d;sz=115x30;ord=1252252030730[1].htm not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\K6VN6J8L\homepage;net=ns;u=ns-2559163_1252260451,113b4406e207745,CE_Digcam_SLR,;;kw=;tile=3;ord1=40538;sz=120x600,160x600;contx=CE_Digcam_SLR;btg=;ord=3390660470260330[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\K6VN6J8L\homepage;net=ns;u=ns-30191319_1252260263,113b4406e207745,CE_DigCam_Olympus,;;kw=;tile=2;ord1=536094;sz=300x250,336x280;contx=CE_DigCam_Olympus;btg=;ord=6617162219109727[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\K6VN6J8L\homepage;net=ns;u=ns-47381210_1252260623,113b4406e207745,CE_Digcam_SLR,;;kw=;dcopt=ist;tile=1;ord1=659871;sz=728x90;contx=CE_Digcam_SLR;btg=;ord=8420958465310776[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\K6VN6J8L\homepage;net=ns;u=ns-47398349_1252260665,113b4406e207745,CE_DigCam_Compact,;;kw=;tile=2;ord1=241946;sz=300x250,336x280;contx=CE_DigCam_Compact;btg=;ord=112145739898422[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\K6VN6J8L\homepage;net=ns;u=ns-53330680_1252260632,113b4406e207745,CE_Digcam_SLR,;;kw=;tile=3;ord1=434246;sz=120x600,160x600;contx=CE_Digcam_SLR;btg=;ord=8420958465310776[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\K6VN6J8L\homepage;net=ns;u=ns-7331184_1252260477,113b4406e207745,CE_Digcam_SLR,;;kw=;tile=3;ord1=356618;sz=120x600,160x600;contx=CE_Digcam_SLR;btg=;ord=3036041165201102[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\K6VN6J8L\homepage;net=ns;u=ns-79689223_1252260473,113b4406e207745,CE_Digcam_SLR,;;kw=;tile=2;ord1=872457;sz=300x250,336x280;contx=CE_Digcam_SLR;btg=;ord=3036041165201102[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\K6VN6J8L\homepage;net=ns;u=ns-81659356_1252260628,113b4406e207745,CE_Digcam_SLR,;;kw=;tile=2;ord1=945456;sz=300x250,336x280;contx=CE_Digcam_SLR;btg=;ord=8420958465310776[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\K6VN6J8L	%26l%3DSKY%252CMNW%253A%2521fcHandoff%252CSW1%253A%2521fcHandoff%252CSW2%253A%2521fcHandoff%252CSW3%253A%2521fcHandoff%26f%3D150550689%26id%3D5%26cbk%3DfcLoaded%26tgt%3D_bl&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\K6VN6J8L	%26l%3DSKY%252CMNW%253A%2521fcHandoff%252CSW1%253A%2521fcHandoff%252CSW2%253A%2521fcHandoff%252CSW3%253A%2521fcHandoff%26f%3D150550782%26id%3D2%26cbk%3DfcLoaded%26tgt%3D_bl&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\K6VN6J8L	%26l%3DSKY%26f%3D150550782%26id%3D5%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\IAV3VE6V\52CSC2%253A%2521fcHandoff%252CMNW%253A%2521fcHandoff%252CSW1%253A%2521fcHandoff%252CSW2%253A%2521fcHandoff%252CSW3%253A%2521fcHandoff%26p%3Dmail_candygram%26bg%3DFFFFFF%26f%&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\IAV3VE6V\;sdccat=3;sdccat=449;sdccat=7185;cnt=fr;page=xpf;gen=null;type=null;tile=5;zr=n;ct=;u=MgeLKhuchW_DSPF_7185_4099_;;dcove=d;sz=115x30;ord=1252252076141[1].htm not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\IAV3VE6V\;sdccat=3;sdccat=449;sdccat=7185;cnt=fr;page=xpf;gen=null;type=null;tile=6;zr=n;ct=;u=MgeLKhuchW_DSPF_7185_4099_;dcopt=ist;dcove=d;sz=728x90;ord=1252252076141[1].htm not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\IAV3VE6V\;sdccat=3;sdccat=449;sdccat=7185;cnt=fr;page=xpo;gen=null;type=null;tile=6;zr=n;ct=;u=zO8Oy3W7yD_PSPO_7185_4099_;dcopt=ist;dcove=d;sz=728x90;ord=1252252030730[1].htm not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\IAV3VE6V\CA0PIFGT.com%2Fsearch%3Fhl%3Dfr%26source%3Dhp%26q%3DRaad%2BSabounchi%26lr%3D%26aq%3Df%26oq%3D&cc=100&u_h=576&u_w=1024&u_ah=546&u_aw=1024&u_cd=32&u_tz=120&u_his=8&u_java=true not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\IAV3VE6V\click2,VaUDACPCCQDFxSwAAAAAAODpDAAAAAAAAgAaaCEAAAAAAP8AAAABFoyuAQAAAAAAA0USAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwJAIAAAAAAAIAAgAAAAAAgK[1].htm not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\IAV3VE6V\homepage;net=ns;u=ns-24403685_1252259700,113b4406e207745,CE_DigCam_Olympus,;;kw=;dcopt=ist;tile=1;ord1=36870;sz=728x90;contx=CE_DigCam_Olympus;btg=;ord=5195815090127869[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\IAV3VE6V\homepage;net=ns;u=ns-30977514_1252260669,113b4406e207745,CE_DigCam_Compact,;;kw=;tile=3;ord1=747670;sz=120x600,160x600;contx=CE_DigCam_Compact;btg=;ord=112145739898422[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\IAV3VE6V\homepage;net=ns;u=ns-31688791_1252260475,113b4406e207745,CE_Digcam_SLR,;;kw=;tile=3;ord1=450703;sz=120x600,160x600;contx=CE_Digcam_SLR;btg=;ord=3036041165201102[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\IAV3VE6V\homepage;net=ns;u=ns-32088629_1252260630,113b4406e207745,CE_Digcam_SLR,;;kw=;tile=3;ord1=760200;sz=120x600,160x600;contx=CE_Digcam_SLR;btg=;ord=8420958465310776[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\IAV3VE6V\homepage;net=ns;u=ns-4653104_1252259711,113b4406e207745,CE_DigCam_Olympus,;;kw=;tile=2;ord1=342757;sz=300x250,336x280;contx=CE_DigCam_Olympus;btg=;ord=5195815090127869[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\IAV3VE6V\homepage;net=ns;u=ns-89927860_1252260260,113b4406e207745,CE_DigCam_Olympus,;;kw=;tile=2;ord1=991540;sz=300x250,336x280;contx=CE_DigCam_Olympus;btg=;ord=6617162219109727[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\IAV3VE6V\homepage;net=ns;u=ns-90184344_1252260658,113b4406e207745,CE_DigCam_Compact,;;kw=;dcopt=ist;tile=1;ord1=362265;sz=728x90;contx=CE_DigCam_Compact;btg=;ord=112145739898422[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\IAV3VE6V	%26l%3DSKY%252CMNW%253A%2521fcHandoff%252CSW1%253A%2521fcHandoff%252CSW2%253A%2521fcHandoff%252CSW3%253A%2521fcHandoff%26f%3D150550782%26id%3D2%26cbk%3DfcLoaded%26tgt%3D_bl&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\IAV3VE6V	%26l%3DSKY%252CMNW%253A%2521fcHandoff%252CSW1%253A%2521fcHandoff%252CSW2%253A%2521fcHandoff%252CSW3%253A%2521fcHandoff%26f%3D150550782%26id%3D6%26cbk%3DfcLoaded%26tgt%3D_bl&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\IAV3VE6V	%26l%3DSKY%26f%3D150550152%26id%3D4%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\IAV3VE6V	%26l%3DSKY%26f%3D150550152%26id%3D6%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\IAV3VE6V	%26l%3DSKY%26f%3D150550152%26id%3D8%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\IAV3VE6V	%26l%3DSKY%26f%3D150550782%26id%3D3%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\GXUVG1I7\53A%2521fcHandoff%252CMIP4%253Aslot_MIP4%26p%3Dmail_candygram%26bg%3Dtransparent%26f%3D971800348%26id%3D1%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\GXUVG1I7\d=1262032223&ga_hid=877223119&ga_fc=1&u_tz=60&u_his=13&u_java=1&u_h=576&u_w=1024&u_ah=546&u_aw=1024&u_cd=32&u_nplug=0&u_nmime=0&biw=1003&bih=430&ifk=4187891303&fu=0&ifi=1&dtd=62 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\GXUVG1I7\main_188;sz=450x60;mpvid=AAR8bxJbXENz5LA7;!c=188;ks=shows;ks=news;ks=specialevents;ks=sports;longform=1;klg=fr;kvid=yRxxv6AZ_xg;kpu=itnnews;kt=K;ko=p;show_id=64BaKpnpOA8[1].asx not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\GXUVG1I7\site=LOSANGELES-CA&affiliate=kiis-fm&market=LOSANGELES-CA&format=CHRRHYTHMIC&pagepos=3301&content1=videosondemand&content2=cc-common&type=local&type2=local&tile=72678714[1].htm not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\GXUVG1I7\site=LOSANGELES-CA&affiliate=kiis-fm&market=LOSANGELES-CA&format=CHRRHYTHMIC&pagepos=3304&content1=videosondemand&content2=cc-common&type=local&type2=local&tile=27394142[1].htm not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\GXUVG1I7\site=LOSANGELES-CA&affiliate=kiis-fm&market=LOSANGELES-CA&format=CHRRHYTHMIC&pagepos=5014&content1=lo[1].php&type=national&type2=national&tile=283721712&transactionID=283721712 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\GXUVG1I7	%26l%3DSKY%26f%3D150550152%26id%3D2%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\GXUVG1I7	%26l%3DSKY%26f%3D150550152%26id%3D5%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\GXUVG1I7	%26l%3DSKY%26f%3D150550152%26id%3D6%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\GXUVG1I7	%26l%3DSKY%26f%3D150550782%26id%3D2%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\GXUVG1I7\Type=click&FlightID=56386&AdID=96007&TargetID=33989&ASeg=&AMod=&Segments=4,5501,14169,14586,14876,16544,16787,16793,18689,20084,20654,24335,25691,27425,29635,37582,43955[1].htm not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\G5ABMR4X\D1181600053%26id%3D21%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C%252522tenure%2&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\G5ABMR4X	%26l%3DSKY%26f%3D150550152%26id%3D2%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\G5ABMR4X	%26l%3DSKY%26f%3D150550782%26id%3D11%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\G5ABMR4X	%26l%3DSKY%26f%3D150550782%26id%3D7%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\CPI34LA3\53A%2521fcHandoff%252CMIP4%253Aslot_MIP4%26p%3Dmail_candygram%26bg%3Dtransparent%26f%3D971800348%26id%3D1%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\CPI34LA3\d=1262032223&ga_hid=824418379&ga_fc=1&u_tz=60&u_his=14&u_java=1&u_h=576&u_w=1024&u_ah=546&u_aw=1024&u_cd=32&u_nplug=0&u_nmime=0&biw=1003&bih=430&ifk=3304874154&fu=0&ifi=1&dtd=78 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\CPI34LA3\sid=1262032223&ga_hid=14293121&ga_fc=1&u_tz=60&u_his=15&u_java=1&u_h=576&u_w=1024&u_ah=546&u_aw=1024&u_cd=32&u_nplug=0&u_nmime=0&biw=1003&bih=430&ifk=611821756&fu=0&ifi=1&dtd=32 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\CPI34LA3\site=LOSANGELES-CA&affiliate=kiis-fm&market=LOSANGELES-CA&format=CHRRHYTHMIC&pagepos=3302&content1=videosondemand&content2=cc-common&type=local&type2=local&tile=70217478[1].htm not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\CPI34LA3\site=LOSANGELES-CA&affiliate=kiis-fm&market=LOSANGELES-CA&format=CHRRHYTHMIC&pagepos=3303&content1=videosondemand&content2=cc-common&type=local&type2=local&tile=47037275[1].htm not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\CPI34LA3\site=LOSANGELES-CA&affiliate=kiis-fm&market=LOSANGELES-CA&format=CHRRHYTHMIC&pagepos=3330&content1=videosondemand&content2=cc-common&type=local&type2=local&tile=78565442[1].htm not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\CPI34LA3\site=LOSANGELES-CA&affiliate=kiis-fm&market=LOSANGELES-CA&format=CHRRHYTHMIC&pagepos=5014&content1=h[1].html&type=national&type2=national&tile=822328126&transactionID=822328126 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\CPI34LA3	%26l%3DSKY%26f%3D150550152%26id%3D4%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\BHDJMEU5\main_188;sz=480x360;mpvid=AAR8bxJbXENz5LA7;!c=188;ks=shows;ks=news;ks=specialevents;ks=sports;longform=1;klg=fr;kvid=yRxxv6AZ_xg;kpu=itnnews;kt=K;ko=p;show_id=64BaKpnpOA[1].asx not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\BHDJMEU5\site=LOSANGELES-CA&affiliate=kiis-fm&market=LOSANGELES-CA&format=CHRRHYTHMIC&pagepos=3300&content1=videosondemand&content2=cc-common&type=local&type2=local&tile=97489015[1].htm not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\BHDJMEU5\site=LOSANGELES-CA&affiliate=kiis-fm&market=LOSANGELES-CA&format=CHRRHYTHMIC&pagepos=5014&content1=loc[1].html&type=national&type2=national&tile=28956419&transactionID=28956419 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\BHDJMEU5	%26l%3DSKY%26f%3D150550006%26id%3D2%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\BHDJMEU5	%26l%3DSKY%26f%3D150550152%26id%3D4%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\BHDJMEU5	%26l%3DSKY%26f%3D150550152%26id%3D7%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\BHDJMEU5	%26l%3DSKY%26f%3D150550782%26id%3D3%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\BHDJMEU5	%26l%3DSKY%26f%3D150550782%26id%3D5%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\BHDJMEU5\Type=click&FlightID=56386&AdID=96007&TargetID=33989&ASeg=&AMod=&Segments=4,5501,14169,14586,14876,16544,16787,16793,18689,20084,20654,24335,25691,27425,29635,37582,43955[1].htm not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\8XMFO5YR\0%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20Please%20consider%20the%20environment%20before%20printing%20this&track=click&modid=searchModule&visible=0&treatment= not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\8XMFO5YR\53A%2521fcHandoff%252CMIP4%253Aslot_MIP4%26p%3Dmail_candygram%26bg%3Dtransparent%26f%3D971800348%26id%3D1%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\8XMFO5YR	%26l%3DSKY%26f%3D150550152%26id%3D3%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\8XMFO5YR	%26l%3DSKY%26f%3D150550782%26id%3D11%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\8XMFO5YR	%26l%3DSKY%26f%3D150550782%26id%3D5%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\8XMFO5YR	%26l%3DSKY%26f%3D150550782%26id%3D6%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\49AFWHQB	%26l%3DSKY%26f%3D150550152%26id%3D10%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\49AFWHQB	%26l%3DSKY%26f%3D150550152%26id%3D5%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\49AFWHQB	%26l%3DSKY%26f%3D150550152%26id%3D7%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\49AFWHQB	%26l%3DSKY%26f%3D150550152%26id%3D8%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\49AFWHQB	%26l%3DSKY%26f%3D150550782%26id%3D4%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\412VKPIZ\click2,VaUDADCrCwBKGDcAAAAAAMf2DgAAAAAAAgAKaAoAAAAAAP8AAAAGCpJ-BgAAAAAAFwYVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwJAIAAAAAAAIAAgAAAAAAl2[1].htm not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\412VKPIZ	%26l%3DSKY%26f%3D150550152%26id%3D6%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\412VKPIZ	%26l%3DSKY%26f%3D150550782%26id%3D8%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\412VKPIZ	%26l%3DSKY%26f%3D150550837%26id%3D9%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\1BXS2UG2\252267591&ga_sid=1252267591&ga_hid=954568836&ga_fc=0&u_tz=120&u_his=2&u_java=1&u_h=576&u_w=1024&u_ah=546&u_aw=1024&u_cd=32&u_nplug=0&u_nmime=0&biw=1003&bih=385&fu=0&ifi=1&dtd=31 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\1BXS2UG2\52CSC2%253A%2521fcHandoff%252CMNW%253A%2521fcHandoff%252CSW1%253A%2521fcHandoff%252CSW2%253A%2521fcHandoff%252CSW3%253A%2521fcHandoff%26p%3Dmail_candygram%26bg%3DFFFFFF%26f%&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\1BXS2UG2\53A%2521fcHandoff%252CMIP4%253Aslot_MIP4%26p%3Dmail_candygram%26bg%3Dtransparent%26f%3D971800348%26id%3D1%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\1BXS2UG2\;sdccat=3;sdccat=449;sdccat=7185;cnt=fr;page=xpf;gen=null;type=null;tile=10;zr=n;ct=;u=MgeLKhuchW_DSPF_7185_4099_;;dcove=d;sz=300x250;ord=1252252076141[1].htm not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\1BXS2UG2\;sdccat=3;sdccat=449;sdccat=7185;cnt=fr;page=xpf;gen=null;type=null;tile=1;zr=n;ct=;u=MgeLKhuchW_DSPF_7185_4099_;;dcove=d;sz=728x90;ord=1252252076141[1].htm not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\1BXS2UG2\;sdccat=3;sdccat=449;sdccat=7185;cnt=fr;page=xpf;gen=null;type=null;tile=4;zr=n;ct=;u=MgeLKhuchW_DSPF_7185_4099_;;dcove=d;sz=300x250;ord=1252252076141[1].htm not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\1BXS2UG2\;sdccat=3;sdccat=449;sdccat=7185;cnt=fr;page=xpo;gen=null;type=null;tile=4;zr=n;ct=;u=zO8Oy3W7yD_PSPO_7185_4099_;;dcove=d;sz=300x250;ord=1252252030730[1].htm not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\1BXS2UG2\homepage;net=ns;u=ns-34291434_1252260467,113b4406e207745,CE_Digcam_SLR,;;kw=;dcopt=ist;tile=1;ord1=883496;sz=728x90;contx=CE_Digcam_SLR;btg=;ord=3036041165201102[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\1BXS2UG2\homepage;net=ns;u=ns-37163217_1252260267,113b4406e207745,CE_DigCam_Olympus,;;kw=;tile=3;ord1=540525;sz=120x600,160x600;contx=CE_DigCam_Olympus;btg=;ord=6617162219109727[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\1BXS2UG2\homepage;net=ns;u=ns-4339152_1252260445,113b4406e207745,CE_Digcam_SLR,;;kw=;dcopt=ist;tile=1;ord1=269910;sz=728x90;contx=CE_Digcam_SLR;btg=;ord=3390660470260330[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\1BXS2UG2\homepage;net=ns;u=ns-48146124_1252260470,113b4406e207745,CE_Digcam_SLR,;;kw=;tile=2;ord1=244982;sz=300x250,336x280;contx=CE_Digcam_SLR;btg=;ord=3036041165201102[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\1BXS2UG2\homepage;net=ns;u=ns-98197327_1252260449,113b4406e207745,CE_Digcam_SLR,;;kw=;tile=2;ord1=222987;sz=300x250,336x280;contx=CE_Digcam_SLR;btg=;ord=3390660470260330[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\1BXS2UG2\homepage;net=ns;u=ns-98691337_1252260626,113b4406e207745,CE_Digcam_SLR,;;kw=;tile=2;ord1=785993;sz=300x250,336x280;contx=CE_Digcam_SLR;btg=;ord=8420958465310776[2] not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\1BXS2UG2	%26l%3DSKY%252CMNW%253A%2521fcHandoff%252CSW1%253A%2521fcHandoff%252CSW2%253A%2521fcHandoff%252CSW3%253A%2521fcHandoff%26f%3D150550152%26id%3D1%26cbk%3DfcLoaded%26tgt%3D_bl&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\1BXS2UG2	%26l%3DSKY%26f%3D150550782%26id%3D7%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\0TM70XIB	%26l%3DSKY%26f%3D150550152%26id%3D3%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\0TM70XIB	%26l%3DSKY%26f%3D150550152%26id%3D9%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\0TM70XIB	%26l%3DSKY%26f%3D150550782%26id%3D3%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\0TM70XIB	%26l%3DSKY%26f%3D150550782%26id%3D4%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\0HUZ8DIJ\=1262032223&ga_hid=1263903429&ga_fc=1&u_tz=60&u_his=15&u_java=1&u_h=576&u_w=1024&u_ah=546&u_aw=1024&u_cd=32&u_nplug=0&u_nmime=0&biw=1003&bih=430&ifk=2427752989&fu=0&ifi=1&dtd=63 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\0HUZ8DIJ\=1262032223&ga_hid=1793504724&ga_fc=1&u_tz=60&u_his=15&u_java=1&u_h=576&u_w=1024&u_ah=546&u_aw=1024&u_cd=32&u_nplug=0&u_nmime=0&biw=1003&bih=430&ifk=1429826307&fu=0&ifi=1&dtd=78 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\0HUZ8DIJ\d=1262032223&ga_hid=240783467&ga_fc=1&u_tz=60&u_his=15&u_java=1&u_h=576&u_w=1024&u_ah=546&u_aw=1024&u_cd=32&u_nplug=0&u_nmime=0&biw=1003&bih=430&ifk=1847412413&fu=0&ifi=1&dtd=47 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\0HUZ8DIJ\site=LOSANGELES-CA&affiliate=kiis-fm&market=LOSANGELES-CA&format=CHRRHYTHMIC&pagepos=3305&content1=videosondemand&content2=cc-common&type=local&type2=local&tile=42499051[1].htm not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\0HUZ8DIJ\site=LOSANGELES-CA&affiliate=kiis-fm&market=LOSANGELES-CA&format=CHRRHYTHMIC&pagepos=3307&content1=videosondemand&content2=cc-common&type=national&type2=national&tile=78[1].htm not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\0HUZ8DIJ	%26l%3DSKY%26f%3D150550152%26id%3D2%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\0HUZ8DIJ	%26l%3DSKY%26f%3D150550152%26id%3D3%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\0HUZ8DIJ	%26l%3DSKY%26f%3D150550152%26id%3D8%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\0HUZ8DIJ	%26l%3DSKY%26f%3D150550782%26id%3D2%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\0HUZ8DIJ	%26l%3DSKY%26f%3D150550782%26id%3D3%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\0HUZ8DIJ	%26l%3DSKY%26f%3D150550782%26id%3D5%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!
File C:\Documents and Settings\Marie-Emilie\Local Settings\Temp\Temporary Internet Files\Content.IE5\0HUZ8DIJ	%26l%3DSKY%26f%3D150550782%26id%3D6%26cbk%3DfcLoaded%26tgt%3D_blank%26hs%3D2%26en%3Diso-8859-1%26em%3D%25257B%252522site-attribute%252522%25253A%252522content%25253D%25255C&r=0 not found!

Registry entries deleted on Reboot...

Jennifer3400 · Answer

OK scan fait par Hijack trend micro pour 14 fichiers. En revanche le fichier  O4 - Startup: 8FD435.lnk = C:\WINDOWS\system32\A5E9C1\8FD435.EXE   n'apparaissait pas dans la liste.

Jennifer3400 · Answer

avant de vérifier la vulnérabilité et utilisé tool cleaner, juste pour info j'avais entre temps branché mon appareil photo et DD externe qui contiennent le fichier YES! Ci-dessous un nouveau rapport RSIT 2 months, est-ce que tout est OK? si oui dois-je d'abord verifier vulnérabilité + utiliser tools cleaner ou bien dois je désinfecter mes supports amovibles? merci!!

2Logfile of random's system information tool 1.06 (written by random/random)
Run by Marie-Emilie at 2010-01-10 16:05:23
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 126 GB (82%) free of 153 GB
Total RAM: 1014 MB (59% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:05:24, on 10/01/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Dell Support Center\bin\sprtsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Wireless Select Switch\WLSS.exe
C:\Program Files\Battery Meter\BTMeter.exe
C:\Program Files\CapsLKNotify\CapsLKNotify.exe
C:\Program Files\Dell Webcam\Dell Webcam Central\WebcamDell.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\Marie-Emilie\Bureau\RSIT.exe
C:\Program Files	rend micro\Marie-Emilie.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://outlook.live.com/owa/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=dell.msn.com&OCID=DELLDHP&pc=MDDS
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.msn.com/fr-fr?cobrand=dell.msn.com&OCID=DELLDHP&pc=MDDS
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\WINDOWS\system32\WLTRAY.exe
O4 - HKLM\..\Run: [WLSS] C:\Program Files\Wireless Select Switch\WLSS.exe
O4 - HKLM\..\Run: [BTMeter] C:\Program Files\Battery Meter\BTMeter.exe
O4 - HKLM\..\Run: [CapsLKNotify] C:\Program Files\CapsLKNotify\CapsLKNotify.exe
O4 - HKLM\..\Run: [Dell Webcam Central] "C:\Program Files\Dell Webcam\Dell Webcam Central\WebcamDell.exe" /mode2
O4 - HKLM\..\Run: [dellsupportcenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P dellsupportcenter
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: OpenOffice.org 3.1.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O20 - Winlogon Notify: GoToAssist - C:\Program Files\Citrix\GoToAssist\514\G2AWinLogon.dll
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: GoToAssist - Citrix Online, a division of Citrix Systems, Inc. - C:\Program Files\Citrix\GoToAssist\514\g2aservice.exe
O23 - Service: Service Google Update (gupdate1c9ff3a906c3e2e) (gupdate1c9ff3a906c3e2e) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: SupportSoft Sprocket Service (DellSupportCenter) (sprtsvc_DellSupportCenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\WLTRYSVC.EXE

plopus · Answer

salut

tu avait pas refait USbfix sur ton DD externe etc... ?

si non il faut absolument le faire sinon sa va revenir


pour moi tout est ok tu peux finir  ;)

@+

Jennifer3400 · Answer

OK merci Plopus!! oui jai bien utilisé USB fix & AntiMalware sur TOUS mes supports amovibles.

Ci-dessous le rapport Tools cleaner comme demandé dans un post précédent:
[ Rapport ToolsCleaner version 2.3.11 (par A.Rothstein & dj QUIOU) ]

--> Recherche: 

C:\UsbFix.txt: trouvé !
C:\_OTM: trouvé !
C:\UsbFix: trouvé !
C:\Rsit: trouvé !
C:\Documents and Settings\Marie-Emilie\Bureau\OTM.exe: trouvé !
C:\Documents and Settings\Marie-Emilie\Bureau\UsbFix.exe: trouvé !
C:\Documents and Settings\Marie-Emilie\Bureau\Rsit.exe: trouvé !
C:\Program Files	rend micro\HijackThis.exe: trouvé !
C:\Program Files	rend micro\hijackthis.log: trouvé !

---------------------------------
--> Suppression: 

C:\Documents and Settings\Marie-Emilie\Bureau\OTM.exe: supprimé !
C:\Program Files	rend micro\HijackThis.exe: supprimé !
C:\UsbFix.txt: supprimé !
C:\Documents and Settings\Marie-Emilie\Bureau\UsbFix.exe: supprimé !
C:\Documents and Settings\Marie-Emilie\Bureau\Rsit.exe: supprimé !
C:\Program Files	rend micro\hijackthis.log: supprimé !
C:\_OTM: supprimé !
C:\UsbFix: ERREUR DE SUPPRESSION !!
C:\Rsit: supprimé !

plopus · Answer

ok dans ce cas la c'est bon

supprime ce dossier

C:\UsbFix:


et continue les mises a jour etc... et mets ton sujet en resolu  ;)

Jennifer3400 · Answer

Merci encore !! pas de pb je continuerai les mises à jour régulièrement, ca m'a servi de leçon....  ;)

plopus · Answer

salut

oui les mises a jour sont trés importantes et beaucoup de personnes n'y prete pas attention et s'en moque

alors que windows OU MEME un logciel non a jour, rien qu'en visitant un site internet ou ouvrant un fichier piege par exemple un .pdf (adobe reader) et pouf c'est l'infection sa va tres vite.

en plus en general les infections qui exploite des failles, sont + "mechante" que ce que tu avais. (PC tres perturbé )

garde bien les 2 liens que jt'ai donnai pour mettre a jour et utilise les regulierements

bien evidamment pas de crcaks, keygen etc...


=====


sinon un conseil pour naviguer plus en securité abandonne internet explorer et

telecharge Firefox ici http://www.mozilla-europe.org/fr/firefox/

et ensuite tu peux directement integrer l'extension WOT ici https://addons.mozilla.org/fr/firefox/addon/wot-safe-browsing-tool/

qui quand elle est active sa te fait des alertes et te donne les note donné des site sur lesquels tu es.
lorsque tu rentre sur un site dangeureux ou infectieux, tu as une alerte te
disant les risques et te demande soit oui ou non tu veux entrer

d'autres extension pas mal aussi :

AD block : qui bloque des pubs, bannieres pop up, mais pas tout
et
Noscript
: qui permet d'eviter des infections via JAVA trés courante sur
internet, la seul chose a faire attention avec cette extension c'est
que sans javascript certaines fonctions sont inutilisable dans ce cas
tu as une nouvel option au vaigateur qui te permet d'autoriser
javascript sur la page temporairement

+

Virus -YES!- ?

30 réponses

Discussions similaires

Newsletters