Msnmsgrz.exe et rapport genproc

bonsoir on va quand meme le faire intelligeamment :

Télécharge ToolBar S&D ( de Eric_71/Team IDN ) sur ton bureau :
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2

( Tuto : https://sites.google.com/site/toolbarsd/aideenimages )

!! Déconnecte toi et ferme toutes tes applications en cours le temps de la manipe !!

* Double-clique sur ToolBar SD.exe pour lancer l'outil et laisse toi guider ...
--> Tapes ( option " recherche " ) puis tape sur [Entrée].

Un rapport sera généré à la fin du processus : poste son contenu dans ta prochaine réponse

( le rapport est en outre sauvegardé ici -> C:\TB.txt )

ensuite :

Télécharge Navilog1 depuis-ce lien :
http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe

Enregistrer la cible (du lien) sous... et enregistre-le sur ton bureau.
Ensuite double clique sur navilog1.exe pour lancer l'installation.

Une fois l'installation terminée, le fix s'exécutera automatiquement.
(Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le bureau).

Au menu principal, Fais le choix 1 >> Recherche
Laisse toi guider et patiente.
Patiente jusqu'au message :
*** Analyse Termine le ..... *** >>>>> Le fix peut durer une dizaine de minutes ;)
Appuie sur une touche le bloc note va s'ouvrir.
Copie-colle le rapport ici.

Bonjour,
voila j ai utilisé toolbar et navilog1( navilog1 n a pas du tous duré 10 min, pour moi moins de 2 min, est ce normal?) merci de m aider
voila les resultats:

toolbar:

-----------\\ ToolBar S&D 1.2.8 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) 4 CPU 3.40GHz )
BIOS : BIOS Date: 09/27/04 21:48:26 Ver: 08.00.10
USER : Tahir ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1296 [VPS 090224-0] 4.8.1296 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:58 Go (Free:8 Go)
D:\ (Local Disk) - NTFS - Total:79 Go (Free:19 Go)
E:\ (Local Disk) - NTFS - Total:47 Go (Free:34 Go)
F:\ (CD or DVD)
G:\ (CD or DVD)
H:\ (CD or DVD)
I:\ (CD or DVD)

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [1] ( 24.02.2009|19:37 )

-----------\\ Recherche de Fichiers / Dossiers ...

C:\DOCUME~1\Musta\APPLIC~1\Dealio
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\resFF
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\temp
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\alerts.gif
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\alerts_over.gif
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\alerts_rec.gif
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\alerts_rec_over.gif
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\chevron-small.gif
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\DealioSearch.html
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\deals-leftcap.gif
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\deal_report.jpg
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\ebay_login.jpg
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\err_mainwindow.html
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\err_toolbar.html
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\global_scripts.js
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\headerbgthin.jpg
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\highlight-bg.png
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\logo.gif
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\logo_over.gif
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\man_toolbar.css
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\man_toolbar.html
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\man_toolbar.js
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\man_toolbarl.js
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\post-this-deal.gif
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\post-this-deal_over.gif
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\scripts.js
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\scroller.js
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\search-chevron.gif
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\search-chevron_over.gif
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\search_bg_blink.gif
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\separator.gif
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\settings.gif
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\settings_over.gif
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\yahoo-search.png
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\resFF\deal_report.jpg
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\resFF\ebay_login.jpg
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\index.76.35
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.10.76
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.109.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.110.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.12.52
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.13.58
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.130.58
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.135.50
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.153.44
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.155.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.156.49
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.16.60
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.161.52
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.178.66
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.184.55
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.188.52
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.189.45
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.196.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.198.56
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.199.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.200.53
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.201.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.202.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.203.71
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.205.62
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.213.71
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.214.49
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.215.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.216.67
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.217.67
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.218.52
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.219.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.220.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.221.57
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.222.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.223.68
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.226.68
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.227.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.228.62
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.229.76
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.23.63
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.239.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.24.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.240.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.241.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.242.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.243.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.244.63
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.245.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.247.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.248.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.249.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.250.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.251.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.252.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.253.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.254.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.255.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.256.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.257.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.279.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.28.58
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.282.75
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.283.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.284.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.289.67
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.290.62
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.291.61
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.296.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.297.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.304.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.307.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.308.75
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.31.47
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.310.46
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.311.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.315.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.316.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.317.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.318.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.319.49
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.32.48
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.334.44
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.335.60
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.336.44
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.337.44
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.338.75
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.339.47
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.34.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.340.47
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.341.47
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.349.50
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.35.48
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.350.50
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.351.51
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.352.54
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.353.51
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.354.51
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.357.62
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.358.52
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.359.52
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.360.53
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.361.54
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.362.68
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.363.58
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.364.54
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.365.53
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.367.56
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.368.58
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.369.55
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.370.56
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.371.56
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.372.57
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.373.55
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.375.56
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.376.57
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.377.55
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.378.65
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.384.58
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.386.71
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.387.59
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.388.59
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.389.59
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.390.60
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.391.60
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.392.60
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.393.60
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.394.60
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.396.61
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.397.61
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.398.60
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.399.60
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.403.61
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.404.63
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.405.61
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.406.61
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.407.76
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.408.63
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.409.61
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.412.62
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.413.62
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.414.62
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.415.62
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.416.62
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.417.62
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.418.62
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.419.62
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.420.62
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.421.62
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.423.63
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.424.63
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.425.63
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.426.63
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.427.63
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.428.65
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.429.63
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.430.63
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.432.65
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.433.64
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.434.65
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.435.64
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.436.76
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.437.64
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.438.71
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.439.71
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.440.75
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.442.73
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.443.73
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.444.73
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.445.68
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.446.69
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.450.67
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.451.67
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.452.68
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.453.68
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.454.69
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.456.69
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.457.75
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.458.70
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.459.70
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.460.69
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.462.74
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.463.69
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.464.70
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.465.68
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.468.70
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.469.70
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.470.70
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.471.73
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.472.70
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.478.74
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.479.73
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.480.68
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.481.71
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.482.74
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.49.67
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.50.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.500.71
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.501.74
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.502.71
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.51.69
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.52.72
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.520.76
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.521.76
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.522.76
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.53.51
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.531.76
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.532.75
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.534.75
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.54.47
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.55.45
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.56.69
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.57.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.58.47
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.593.76
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.595.76
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.63.57
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.66.47
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.70.75
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.71.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\index.3.67.22
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.109.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.178.66
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.198.56
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.245.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.247.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.279.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.283.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.284.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.289.67
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.290.62
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.297.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.315.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.319.49
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.335.60
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.337.44
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.340.47
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.360.53
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.386.59
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.388.59
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.391.60
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.398.60
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.399.60
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.403.61
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.404.63
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.405.61
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.406.61
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.407.61
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.408.63
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.409.61
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.412.62
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.413.62
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.414.62
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.415.62
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.416.62
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.417.62
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.418.62
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.419.62
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.420.62
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.421.62
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.424.63
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.427.63
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.432.65
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.49.67
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.51.46
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.52.57
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.53.51
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.54.47
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.57.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.58.47
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\temp\dod_cache.xml
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3596_2524_1.html
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3596_2524_3.html
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\CHROME\CONTENT\searchsettingsplugin.js
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\CHROME\CONTENT\searchsettingsplugin.xul
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\CHROME\LOCALE\EN-US\searchsettingsplugin.dtd
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\CHROME\LOCALE\EN-US\searchsettingsplugin.properties
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\COMPONENTS\SearchSettingsFF.dll
C:\DOCUME~1\Musta\APPLIC~1\Search Settings
C:\DOCUME~1\Musta\APPLIC~1\Search Settings\kb127
C:\DOCUME~1\Musta\APPLIC~1\Search Settings\kb127\res
C:\DOCUME~1\Musta\APPLIC~1\Search Settings\kb127\temp
C:\DOCUME~1\Musta\APPLIC~1\Search Settings\kb127\temp\ws-14287.log
C:\DOCUME~1\Tahir\APPLIC~1\Search Settings
C:\DOCUME~1\Tahir\APPLIC~1\Search Settings\kb127
C:\DOCUME~1\Tahir\APPLIC~1\Search Settings\kb127\res
C:\DOCUME~1\Tahir\APPLIC~1\Search Settings\kb127\temp
C:\DOCUME~1\Tahir\APPLIC~1\Search Settings\kb127\temp\ws-14296.log
C:\DOCUME~1\Tahir\APPLIC~1\Search Settings\kb127\temp\ws-14297.log
C:\DOCUME~1\Tahir\APPLIC~1\Search Settings\kb127\temp\ws-14298.log
C:\DOCUME~1\Tahir\APPLIC~1\Search Settings\kb127\temp\ws-14299.log
C:\Program Files\Search Settings
C:\Program Files\Search Settings\kb127
C:\Program Files\Search Settings\SearchSettings.exe
C:\Program Files\Search Settings\kb127\res
C:\Program Files\Search Settings\kb127\SearchSettings.dll
C:\Program Files\Search Settings\kb127\SearchSettingsRes409.dll
C:\Program Files\Search Settings\kb127\temp
C:\WINDOWS\iun6002.exe

-----------\\ Extensions

(Musta) - {1650a312-02bc-40ee-977e-83f158701739} => safe
(Musta) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar

(Tahir) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar
(Tahir) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar
(Tahir) - {991A772A-BA13-4c1d-A9EF-F897F31DEC7D} => megaupload

-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Start Page"="https://www.google.ch/?gws_rd=ssl"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Search Bar"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
"Default_Search_URL"="http://www.google.com/toolbar/ie8/sidebar.html"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Local Page"="https://www.msn.com/fr-fr/"
"Start Page"="http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home"

--------------------\\ Recherche d'autres infections

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"sqyos"="c:\\documents and settings\\tahir\\local settings\\application data\\sqyos.exe sqyos"

C:\DOCUME~1\Tahir\LOCALS~1\APPLIC~1\cuyye_navfx.dat
C:\DOCUME~1\Tahir\LOCALS~1\APPLIC~1\vlulbj_navfx.dat
[b]==> EGDACCESS <==/b

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\Tahir\Desktop\jeuxx\Crack
C:\DOCUME~1\Tahir\Desktop\jeuxx\Crack\AssassinsCreed_Dx10.exe
C:\DOCUME~1\Tahir\Desktop\jeuxx\Crack\AssassinsCreed_Dx9.exe
C:\DOCUME~1\Tahir\Favorites\tahir\Game KeyGenerators.url

1 - "C:\ToolBar SD\TB_1.txt" - 24.02.2009|19:38 - Option : [1]

-----------\\ Fin du rapport a 19:38:04.67


et voila navilog1

Search Navipromo version 3.7.4 commencé le 24.02.2009 à 19:40:39.85

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files\navilog1

Mise à jour le 16.02.2009 à 18h00 par IL-MAFIOSO

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) 4 CPU 3.40GHz )
BIOS : BIOS Date: 09/27/04 21:48:26 Ver: 08.00.10
USER : Tahir ( Administrator )
BOOT : Normal boot

Antivirus : avast! antivirus 4.8.1296 [VPS 090224-0] 4.8.1296 (Activated)

A:\ (USB)
C:\ (Local Disk) - NTFS - Total:58 Go (Free:8 Go)
D:\ (Local Disk) - NTFS - Total:79 Go (Free:19 Go)
E:\ (Local Disk) - NTFS - Total:47 Go (Free:34 Go)
F:\ (CD or DVD)
G:\ (CD or DVD)
H:\ (CD or DVD)
I:\ (CD or DVD)

Recherche executé en mode normal

*** Recherche Programmes installés ***

Favorit
Favorit

*** Recherche dossiers dans "C:\WINDOWS" ***

*** Recherche dossiers dans "C:\Program Files" ***

*** Recherche dossiers dans "C:\Documents and Settings\All Users\startm~1\programs" ***

*** Recherche dossiers dans "C:\Documents and Settings\All Users\startm~1" ***

*** Recherche dossiers dans "c:\docume~1\alluse~1\applic~1" ***

*** Recherche dossiers dans "C:\Documents and Settings\Tahir\applic~1" ***

*** Recherche dossiers dans "C:\DOCUME~1\admin\applic~1" ***

*** Recherche dossiers dans "C:\DOCUME~1\Musta\applic~1" ***

*** Recherche dossiers dans "C:\DOCUME~1\Secir\applic~1" ***

*** Recherche dossiers dans "C:\Documents and Settings\Tahir\locals~1\applic~1" ***

*** Recherche dossiers dans "C:\DOCUME~1\admin\locals~1\applic~1" ***

*** Recherche dossiers dans "C:\DOCUME~1\Musta\locals~1\applic~1" ***

*** Recherche dossiers dans "C:\DOCUME~1\Secir\locals~1\applic~1" ***

*** Recherche dossiers dans "C:\Documents and Settings\Tahir\startm~1\programs" ***

*** Recherche dossiers dans "C:\DOCUME~1\admin\startm~1\programs" ***

*** Recherche dossiers dans "C:\DOCUME~1\Musta\startm~1\programs" ***

*** Recherche dossiers dans "C:\DOCUME~1\Secir\startm~1\programs" ***

*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans "C:\WINDOWS\system32" *

* Recherche dans "C:\Documents and Settings\Tahir\locals~1\applic~1" *

* Recherche dans "C:\DOCUME~1\admin\locals~1\applic~1" *

* Recherche dans "C:\DOCUME~1\Musta\locals~1\applic~1" *

* Recherche dans "C:\DOCUME~1\Secir\locals~1\applic~1" *

*** Recherche fichiers ***

*** Recherche clés spécifiques dans le Registre ***
!! Les clés trouvées ne sont pas forcément infectées !!

HKEY_CURRENT_USER\Software\Lanconfig

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"sqyos"="c:\\documents and settings\\tahir\\local settings\\application data\\sqyos.exe sqyos"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"camsemq"="\"c:\\documents and settings\\tahir\\local settings\\application data\\camsemq.exe\" camsemq"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"wogskyi"="\"c:\\documents and settings\\tahir\\local settings\\application data\\wogskyi.exe\" wogskyi"

*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :

2)Recherche Heuristique :

* Dans "C:\WINDOWS\system32" :

* Dans "C:\Documents and Settings\Tahir\locals~1\applic~1" :

cuyye_navfx.dat trouvé !
vlulbj_navfx.dat trouvé !

* Dans "C:\DOCUME~1\admin\locals~1\applic~1" :

* Dans "C:\DOCUME~1\Musta\locals~1\applic~1" :

* Dans "C:\DOCUME~1\Secir\locals~1\applic~1" :

3)Recherche Certificats :

Certificat Egroup trouvé !
Certificat Electronic-Group trouvé !
Certificat Montorgueil absent !
Certificat OOO-Favorit trouvé !
Certificat Sunny-Day-Design-Ltd absent !

4)Recherche autres dossiers et fichiers connus :

*** Analyse terminée le 24.02.2009 à 19:41:20.00 ***

salut :

Relance Toolbar-S&D en double-cliquant sur le raccourci
.
Ø Tape sur "2" puis valide en appuyant sur "Entrée".

! Ne ferme pas la fenêtre lors de la suppression !

Un rapport sera généré, poste son contenu ici.

NOTE : Si ton Bureau ne réapparait pas, appuie simultanément sur Ctrl+Alt+Suppr pour ouvrir le Gestionnaire des tâches.
Rends-toi sur l'onglet "Processus". Clique en haut à gauche sur Fichier et choisis "Exécuter..."
Tape explorer puis valide.

ensuite :

Option 2 - Suppression :

* Double clique sur le raccourci de Navilog.
* Choisis l'option 2 puis valide. (Entrée)
* Laisse toi guider.
* Ton ordinateur va redémarrer, sinon fais le manuellement.
* Ton bureau va disparaître.
* Après un certain temps, le Bloc-notes va s'ouvrir.
* Sauvegarde le rapport.
* Referme le Bloc-notes. Ton bureau va maintenant réapparaître.

Si ton bureau ne réapparait pas, fais CTRL+ALT+SUPP pour ouvrir le gestionnaire de tâches.
Puis rends-toi à l'onglet "processus". Clique en haut à gauche sur fichiers et choisis "Nouvelle tâche (exécuter)"
Tapes explorer et valide. Cela te fera apparaitre ton bureau

Démarrer -> panneau de configuration -> options internet
Clique sur l'onglet "Contenu" puis onglet "Certificats" et si tu trouves ceci, en particulier dans "éditeurs approuvés" :

VIP

Si tu les trouves, fais ceci :
* Sélectionne chacun de ces certificats et clique sur exporter. Enregistre le/les sur ton bureau.
* Supprime ensuite ceux présents dans l'onglet "certificats" des options de ton naviguateur.

Ensuite pour chacun des certificats présents sur ton bureau :
* Va sur le site Web :
https://www.bleepingcomputer.com/submit-malware.php?channel=35
* Copie/colle ceci dans la case 'Link to Topic' :
le nom du certificat (Montorgueil ,......)
* Copie/colle ceci dans la case 'Browse to the File' :
Le certificat correspondant que tu avais exportés vers ton bureau

Si c'est fait, supprime enfin le certificat présent sur ton bureau.

Les programmes suivants installent cette infection :

* Go-astro
* GoRecord
* HotTVPlayer
* Live Player
* MailSkinner
* Messenger Skinner
* Instant Access
* InternetGameBox
* sudoplanet
* Webmediaplayer : sauf celui provenant du site suivant > http://www.azertysite.new.fr/
* Sur le site www.games-desktop.com (Ne pas aller dessus!)

* Poste le rapport sauvegardé auparavant (C:\cleannavi.txt)

bonsoir,
je suis vraiment dsl mais je comprends pas par ce que vous voulez dire la:

Les programmes suivants installent cette infection :

* Go-astro
* GoRecord
* HotTVPlayer
* Live Player
* MailSkinner
* Messenger Skinner
* Instant Access
* InternetGameBox
* sudoplanet
* Webmediaplayer : sauf celui provenant du site suivant > http://www.azertysite.new.fr/
* Sur le site www.games-desktop.com (Ne pas aller dessus!)

- je dois les installer? ou je dois rien faire?

????? non fais juste l option 2 de Navilog t'occupes pas de cette partie c est a titre informatif uniquement

euhh j ai reusi l étape du toolbar mais pas l option 2... enfait j ai fait ce que vous avez demandé en premier lieu c est moi qui a du redémarrer et ensuite le bureau n a pas disparu et aucun block note c est ouvert! je dois ressayer?

j ai oublié mais voila " la rép" de toolbar:

-----------\\ ToolBar S&D 1.2.8 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) 4 CPU 3.40GHz )
BIOS : BIOS Date: 09/27/04 21:48:26 Ver: 08.00.10
USER : Tahir ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1296 [VPS 090225-1] 4.8.1296 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:58 Go (Free:7 Go)
D:\ (Local Disk) - NTFS - Total:79 Go (Free:19 Go)
E:\ (Local Disk) - NTFS - Total:47 Go (Free:34 Go)
F:\ (CD or DVD)
G:\ (CD or DVD)
H:\ (CD or DVD)
I:\ (CD or DVD)

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [2] ( 25.02.2009|20:35 )

-----------\\ SUPPRESSION

Supprime! - C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127
Supprime! - C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com
Supprime! - C:\DOCUME~1\Musta\APPLIC~1\Search Settings\kb127
Supprime! - C:\DOCUME~1\Tahir\APPLIC~1\Search Settings\kb127
Supprime! - C:\Program Files\Search Settings\kb127
Supprime! - C:\Program Files\Search Settings\SearchSettings.exe
Supprime! - C:\WINDOWS\iun6002.exe
Supprime! - C:\DOCUME~1\Musta\APPLIC~1\Dealio
Supprime! - C:\DOCUME~1\Musta\APPLIC~1\Search Settings
Supprime! - C:\DOCUME~1\Tahir\APPLIC~1\Search Settings
Supprime! - C:\Program Files\Search Settings

-----------\\ Recherche de Fichiers / Dossiers ...

-----------\\ Extensions

(Musta) - {1650a312-02bc-40ee-977e-83f158701739} => safe
(Musta) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar

(Tahir) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar
(Tahir) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar
(Tahir) - {991A772A-BA13-4c1d-A9EF-F897F31DEC7D} => megaupload

-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Start Page"="https://www.google.ch/?gws_rd=ssl"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Search Bar"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
"Default_Search_URL"="http://www.google.com/toolbar/ie8/sidebar.html"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Local Page"="https://www.msn.com/fr-fr/"
"Start Page"="https://www.msn.com/fr-fr/"

--------------------\\ Recherche d'autres infections

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"sqyos"="c:\\documents and settings\\tahir\\local settings\\application data\\sqyos.exe sqyos"

C:\DOCUME~1\Tahir\LOCALS~1\APPLIC~1\cuyye_navfx.dat
C:\DOCUME~1\Tahir\LOCALS~1\APPLIC~1\vlulbj_navfx.dat
[b]==> EGDACCESS <==/b

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\Tahir\Desktop\jeuxx\Crack
C:\DOCUME~1\Tahir\Desktop\jeuxx\Crack\AssassinsCreed_Dx10.exe
C:\DOCUME~1\Tahir\Desktop\jeuxx\Crack\AssassinsCreed_Dx9.exe
C:\DOCUME~1\Tahir\Favorites\tahir\Game KeyGenerators.url

1 - "C:\ToolBar SD\TB_1.txt" - 24.02.2009|19:38 - Option : [1]
2 - "C:\ToolBar SD\TB_2.txt" - 25.02.2009|20:37 - Option : [2]

-----------\\ Fin du rapport a 20:37:08.03

bien c est un bon debut passes a l option 2 de Navilog maintenant

j arrive pas à utiliser ou ca marche pas avec moi! mais quand j utilise navilog1 en appuyant sur 2 il me mette:
redémarrer en mode sans echec
choisir ma session habituelle
puis utiliser navilog1 en suivant
les instructions données par genproc!

alors je dois suivre ses instructions ou les votre? (mm si j arrive pas encore)

Télécharges et installes le logiciel de diagnostic HijackThis :

ici HijackThis
ou ici HijackThis
ou ici HijackThis

ou renommé :

renommé

1- Cliques sur le setup pour lancer l'installe : laisses toi guider et ne modifies pas les paramètres d'installation .
A la fin de l'installe , le prg ce lance automatiquement : fermes le en cliquant sur la croix rouge .
Au final, tu dois avoir un raccourci sur ton bureau et aussi un cheminement comme :
"C:\ program files\Trend Micro\HijackThis\HijackThis.exe " .

tuto pour utilisation :
Regardes ici, c'est parfaitement expliqué en images (merci balltrap34),

Tuto

( Ne fixes encore AUCUNE ligne de ton plein gré, cela pourrait empêcher ton PC de fonctionner correctement )

2- !! Déconnectes toi et fermes toute tes applications en cours !!

Cliques sur le raccourci du bureau pour lancer le prg :
fais un scan HijackThis en cliquant sur : "Do a system scan and save a logfile"

--->copies-colles le rapport généré pour analyse

voila

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:58:04, on 26.02.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\TeamViewer3\TeamViewer_Host.exe
C:\Program Files\RealVNC\VNC4\WinVNC4.exe
C:\Program Files\TeamViewer3\TeamViewer.exe
c:\program files\pinnacle\shared files\programs\mediaserver\pmshost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\ALCWZRD.EXE
C:\WINDOWS\ALCMTR.EXE
C:\Program Files\Pinnacle\Shared Files\Programs\MediaCenterService\PMC.Service.Main.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\FlashGet\FlashGet.exe
C:\Program Files\Pinnacle\Shared Files\Programs\Remote\Remoterm.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Vista Start Menu\VistaStartMenu.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Veoh Networks\Veoh\VeohClient.exe
D:\jeux\DAEMON Tools Lite\daemon.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\ITE\ITE IT8212 ATA RAID Controller\RaidMgr.exe
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ch/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: IeMonitorBho Class - {bf00e119-21a3-4fd1-b178-3b8537e75c92} - E:\MegaIEMn.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAudPropShortcut.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [PMCS] C:\Program Files\Pinnacle\Shared Files\Programs\MediaCenterService\PMC.Service.Main.exe -host -clearDebug
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [Flashget] C:\Program Files\FlashGet\FlashGet.exe /min
O4 - HKLM\..\Run: [PMCRemote] C:\Program Files\Pinnacle\Shared Files\Programs\Remote\Remoterm.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [Windows UDP Control Center] msnmsgrz.exe
O4 - HKLM\..\Run: [Window UDP Control Servic] winlogon.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime
O4 - HKCU\..\Run: [VistaStartMenu] "C:\Program Files\Vista Start Menu\VistaStartMenu.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [sqyos] c:\documents and settings\tahir\local settings\application data\sqyos.exe sqyos
O4 - HKCU\..\Run: [camsemq] "c:\documents and settings\tahir\local settings\application data\camsemq.exe" camsemq
O4 - HKCU\..\Run: [Veoh] "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide
O4 - HKCU\..\Run: [DAEMON Tools Lite] "D:\jeux\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [wogskyi] "c:\documents and settings\tahir\local settings\application data\wogskyi.exe" wogskyi
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] E:\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: LimeWire On Startup.lnk = D:\LimeWire\LimeWire.exe
O4 - Global Startup: ATI CATALYST System Tray.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: RAID Manager.lnk = ?
O4 - Global Startup: Service Manager.lnk = C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O8 - Extra context menu item: &Tout télécharger avec FlashGet - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: &Télécharger avec FlashGet - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: Download Link Using Mega Manager... - E:\mm_file.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe
O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5) - http://upload.facebook.com/controls/FacebookPhotoUploader5.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://javadl.sun.com/webapps/download/AutoDL?BundleId=19588
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Pinnacle Systems Media Service (PinnacleSys.MediaServer) - Pinnacle Systems - c:\program files\pinnacle\shared files\programs\mediaserver\pmshost.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: TeamViewer 3 (TeamViewer) - TeamViewer GmbH - C:\Program Files\TeamViewer3\TeamViewer_Host.exe
O23 - Service: VNC Server Version 4 (WinVNC4) - RealVNC Ltd. - C:\Program Files\RealVNC\VNC4\WinVNC4.exe

tu peux virer AD-Aware il sert plus a rien

ensuite :

tu télécharge Lop S&D.exe sur ton Bureau.

LOP S&D

* Double-clique dessus pour lancer l'installation
* Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau
* Séléctionne la langue souhaitée , puis choisis l'option 1 (Recherche)
* Patiente jusqu'à la fin du scan
* Poste le rapport généré (C:\lopR.txt)

voila et encore merci de m aider

--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) 4 CPU 3.40GHz )
BIOS : BIOS Date: 09/27/04 21:48:26 Ver: 08.00.10
USER : Tahir ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1296 [VPS 090225-1] 4.8.1296 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:58 Go (Free:9 Go)
D:\ (Local Disk) - NTFS - Total:79 Go (Free:19 Go)
E:\ (Local Disk) - NTFS - Total:47 Go (Free:34 Go)
F:\ (CD or DVD)
G:\ (CD or DVD)
H:\ (CD or DVD)
I:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 26.02.2009|20:17 )

--------------------\\ Listing des dossiers dans APPLIC~1

[27.01.2009|11:55] C:\DOCUME~1\admin\APPLIC~1\.wyzo
[26.01.2009|15:20] C:\DOCUME~1\admin\APPLIC~1\ATI
[29.03.2008|05:23] C:\DOCUME~1\admin\APPLIC~1\Identities
[26.01.2009|15:20] C:\DOCUME~1\admin\APPLIC~1\Microsoft
[27.01.2009|11:56] C:\DOCUME~1\admin\APPLIC~1\Wyzo

[08.11.2008|15:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[15.06.2008|14:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[15.06.2008|14:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[13.08.2008|20:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\EmailNotifier
[21.01.2009|16:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[26.02.2009|19:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
[02.04.2008|19:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Hewlett-Packard
[26.02.2009|20:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
[26.10.2008|18:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\LookMyPC
[28.01.2009|14:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[28.03.2008|21:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\McAfee
[13.08.2008|20:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Megaupload
[23.02.2009|21:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[09.11.2008|10:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NOS
[29.03.2008|05:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Pinnacle
[28.03.2008|21:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SiteAdvisor
[11.05.2008|16:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[15.06.2008|15:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony
[28.03.2008|23:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[12.06.2008|08:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[28.03.2008|21:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TVU networks
[28.03.2008|22:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[22.02.2009|21:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

[01.04.2008|22:18] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[29.03.2008|05:53] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[28.03.2008|22:10] C:\DOCUME~1\LOCALS~1\APPLIC~1\TeamViewer

[16.12.2008|17:44] C:\DOCUME~1\Musta\APPLIC~1\.wyzo
[16.06.2008|21:35] C:\DOCUME~1\Musta\APPLIC~1\Adobe
[29.03.2008|05:54] C:\DOCUME~1\Musta\APPLIC~1\ATI
[16.05.2008|07:45] C:\DOCUME~1\Musta\APPLIC~1\Google
[29.03.2008|05:23] C:\DOCUME~1\Musta\APPLIC~1\Identities
[28.03.2008|21:48] C:\DOCUME~1\Musta\APPLIC~1\Macromedia
[28.01.2009|14:04] C:\DOCUME~1\Musta\APPLIC~1\Malwarebytes
[30.07.2008|21:26] C:\DOCUME~1\Musta\APPLIC~1\Media Player Classic
[12.02.2009|08:26] C:\DOCUME~1\Musta\APPLIC~1\Microsoft
[28.03.2008|21:45] C:\DOCUME~1\Musta\APPLIC~1\Mozilla
[28.01.2009|15:21] C:\DOCUME~1\Musta\APPLIC~1\SiteAdvisor
[28.01.2009|15:20] C:\DOCUME~1\Musta\APPLIC~1\Sun
[28.03.2008|21:54] C:\DOCUME~1\Musta\APPLIC~1\TeamViewer
[28.03.2008|21:30] C:\DOCUME~1\Musta\APPLIC~1\TVU networks
[23.12.2008|22:52] C:\DOCUME~1\Musta\APPLIC~1\U3
[12.02.2009|08:27] C:\DOCUME~1\Musta\APPLIC~1\Vista Start Menu
[28.03.2008|21:58] C:\DOCUME~1\Musta\APPLIC~1\vlc
[16.12.2008|17:45] C:\DOCUME~1\Musta\APPLIC~1\Wyzo

[29.03.2008|05:47] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

[11.04.2008|19:53] C:\DOCUME~1\Secir\APPLIC~1\Adobe
[28.03.2008|22:07] C:\DOCUME~1\Secir\APPLIC~1\ATI
[20.07.2008|16:36] C:\DOCUME~1\Secir\APPLIC~1\Google
[28.03.2008|22:07] C:\DOCUME~1\Secir\APPLIC~1\Identities
[20.07.2008|16:36] C:\DOCUME~1\Secir\APPLIC~1\Macromedia
[20.07.2008|16:36] C:\DOCUME~1\Secir\APPLIC~1\Microsoft
[28.03.2008|22:09] C:\DOCUME~1\Secir\APPLIC~1\Mozilla
[04.02.2009|22:03] C:\DOCUME~1\Secir\APPLIC~1\Vista Start Menu

[28.11.2008|15:53] C:\DOCUME~1\Tahir\APPLIC~1\.wyzo
[03.04.2008|00:06] C:\DOCUME~1\Tahir\APPLIC~1\Adobe
[22.06.2008|19:32] C:\DOCUME~1\Tahir\APPLIC~1\Apple Computer
[28.03.2008|22:10] C:\DOCUME~1\Tahir\APPLIC~1\ATI
[18.11.2008|19:34] C:\DOCUME~1\Tahir\APPLIC~1\DAEMON Tools
[12.05.2008|18:09] C:\DOCUME~1\Tahir\APPLIC~1\DivX
[27.12.2008|19:33] C:\DOCUME~1\Tahir\APPLIC~1\dvdcss
[13.08.2008|20:22] C:\DOCUME~1\Tahir\APPLIC~1\EmailNotifier
[05.10.2008|18:59] C:\DOCUME~1\Tahir\APPLIC~1\FileZilla
[20.04.2008|18:39] C:\DOCUME~1\Tahir\APPLIC~1\Google
[31.01.2009|16:15] C:\DOCUME~1\Tahir\APPLIC~1\Help
[28.03.2008|22:10] C:\DOCUME~1\Tahir\APPLIC~1\Identities
[13.08.2008|20:22] C:\DOCUME~1\Tahir\APPLIC~1\InstallShield
[26.02.2009|19:56] C:\DOCUME~1\Tahir\APPLIC~1\LimeWire
[31.03.2008|21:29] C:\DOCUME~1\Tahir\APPLIC~1\Macromedia
[31.01.2009|16:11] C:\DOCUME~1\Tahir\APPLIC~1\Malwarebytes
[12.05.2008|18:09] C:\DOCUME~1\Tahir\APPLIC~1\Media Player Classic
[13.08.2008|20:23] C:\DOCUME~1\Tahir\APPLIC~1\Megaupload
[06.01.2009|21:40] C:\DOCUME~1\Tahir\APPLIC~1\Microsoft
[28.03.2008|22:12] C:\DOCUME~1\Tahir\APPLIC~1\Mozilla
[26.02.2009|20:13] C:\DOCUME~1\Tahir\APPLIC~1\Skype
[26.02.2009|19:56] C:\DOCUME~1\Tahir\APPLIC~1\skypePM
[22.06.2008|19:29] C:\DOCUME~1\Tahir\APPLIC~1\Sony
[20.04.2008|18:39] C:\DOCUME~1\Tahir\APPLIC~1\Sun
[09.06.2008|14:32] C:\DOCUME~1\Tahir\APPLIC~1\TeamViewer
[11.02.2009|00:01] C:\DOCUME~1\Tahir\APPLIC~1\U3
[26.02.2009|20:14] C:\DOCUME~1\Tahir\APPLIC~1\Vista Start Menu
[06.04.2008|17:18] C:\DOCUME~1\Tahir\APPLIC~1\vlc

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[26.01.2009 17:36][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[26.02.2009 19:47][--ah-----] C:\WINDOWS\tasks\SA.DAT
[04.08.2004 11:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[19.02.2009|17:20] C:\Program Files\Activision
[08.11.2008|15:58] C:\Program Files\Adobe
[28.03.2008|20:59] C:\Program Files\Alwil Software
[12.06.2008|09:12] C:\Program Files\Any Video Converter Professional
[15.06.2008|14:58] C:\Program Files\Apple Software Update
[29.03.2008|05:51] C:\Program Files\ATI Technologies
[07.08.2008|11:38] C:\Program Files\Blip Blop
[14.10.2008|23:47] C:\Program Files\CCleaner
[26.02.2009|20:16] C:\Program Files\Common Files
[29.03.2008|05:07] C:\Program Files\ComPlus Applications
[12.05.2008|12:58] C:\Program Files\Conduit
[04.04.2008|21:03] C:\Program Files\directx
[14.06.2008|14:41] C:\Program Files\Electronic Arts
[07.04.2008|20:00] C:\Program Files\ffdshow
[05.10.2008|18:45] C:\Program Files\FileZilla FTP Client
[26.02.2009|20:15] C:\Program Files\FlashGet
[15.01.2009|16:39] C:\Program Files\Free Video Converter
[04.04.2008|21:02] C:\Program Files\GameSpy Arcade
[21.01.2009|16:32] C:\Program Files\Google
[02.04.2008|19:53] C:\Program Files\Hewlett-Packard
[02.04.2008|19:56] C:\Program Files\HP
[19.02.2009|17:18] C:\Program Files\InstallShield Installation Information
[29.03.2008|05:31] C:\Program Files\Intel
[25.10.2008|17:40] C:\Program Files\Internet Explorer
[29.03.2008|05:36] C:\Program Files\ITE
[20.04.2008|18:39] C:\Program Files\Java
[28.03.2008|21:28] C:\Program Files\K-Lite Codec Pack
[28.01.2009|14:04] C:\Program Files\Malwarebytes' Anti-Malware
[29.03.2008|05:36] C:\Program Files\Marvell
[25.10.2008|17:51] C:\Program Files\Messenger
[04.04.2008|18:39] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[29.03.2008|05:15] C:\Program Files\microsoft frontpage
[28.07.2008|17:15] C:\Program Files\Microsoft Office
[29.03.2008|05:46] C:\Program Files\Microsoft SQL Server
[28.03.2008|21:41] C:\Program Files\Microsoft Visual Studio
[11.06.2008|18:38] C:\Program Files\Microsoft Works
[28.03.2008|21:40] C:\Program Files\Microsoft.NET
[12.05.2008|12:58] C:\Program Files\Mininova
[25.10.2008|17:40] C:\Program Files\Movie Maker
[28.01.2009|15:21] C:\Program Files\Mozilla Firefox
[21.11.2008|19:52] C:\Program Files\mp3DirectCut
[28.07.2008|17:15] C:\Program Files\MSECache
[29.03.2008|05:06] C:\Program Files\MSN
[29.03.2008|05:06] C:\Program Files\MSN Gaming Zone
[04.04.2008|18:39] C:\Program Files\MSXML 4.0
[25.02.2009|21:28] C:\Program Files\Navilog1
[25.10.2008|17:38] C:\Program Files\NetMeeting
[09.11.2008|10:13] C:\Program Files\NOS
[29.03.2008|05:07] C:\Program Files\Online Services
[25.10.2008|17:38] C:\Program Files\Outlook Express
[28.03.2008|22:01] C:\Program Files\PDFCreator
[29.03.2008|05:46] C:\Program Files\Pinnacle
[15.06.2008|14:59] C:\Program Files\QuickTime
[29.03.2008|05:34] C:\Program Files\Realtek
[01.05.2008|12:53] C:\Program Files\RealVNC
[07.04.2008|20:00] C:\Program Files\SANYO
[11.05.2008|16:40] C:\Program Files\Skype
[19.01.2009|13:56] C:\Program Files\Snappyads Games Collection
[28.03.2008|22:42] C:\Program Files\Spybot - Search & Destroy
[21.02.2009|13:34] C:\Program Files\TeamViewer3
[12.10.2008|21:02] C:\Program Files\TGTSoft
[23.02.2009|23:13] C:\Program Files\Trend Micro
[28.03.2008|21:30] C:\Program Files\TVUPlayer
[18.11.2008|20:00] C:\Program Files\UltraISO
[29.03.2008|05:46] C:\Program Files\Uninstall Information
[12.10.2008|23:17] C:\Program Files\Veoh Networks
[28.03.2008|21:57] C:\Program Files\VideoLAN
[28.03.2008|21:34] C:\Program Files\Vista Start Menu
[23.05.2008|22:21] C:\Program Files\Visual IP Trace 2007
[25.10.2008|17:38] C:\Program Files\Windows Media Player
[25.10.2008|17:38] C:\Program Files\Windows NT
[29.03.2008|05:08] C:\Program Files\WindowsUpdate
[29.03.2008|05:15] C:\Program Files\xerox
[24.05.2008|12:12] C:\Program Files\Xvid
[19.02.2009|17:21] C:\Program Files\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files\Common Files

[08.11.2008|15:59] C:\Program Files\Common Files\Adobe
[18.08.2008|10:49] C:\Program Files\Common Files\Blizzard Entertainment
[28.03.2008|21:41] C:\Program Files\Common Files\DESIGNER
[18.11.2008|20:00] C:\Program Files\Common Files\EZB Systems
[02.04.2008|19:52] C:\Program Files\Common Files\Hewlett-Packard
[02.04.2008|19:54] C:\Program Files\Common Files\HP
[29.03.2008|05:42] C:\Program Files\Common Files\InstallShield
[20.04.2008|18:38] C:\Program Files\Common Files\Java
[13.04.2008|17:16] C:\Program Files\Common Files\logishrd
[13.04.2008|17:15] C:\Program Files\Common Files\Logitech
[23.02.2009|21:31] C:\Program Files\Common Files\Microsoft Shared
[29.03.2008|05:08] C:\Program Files\Common Files\MSSoap
[28.03.2008|20:59] C:\Program Files\Common Files\ODBC
[29.03.2008|05:08] C:\Program Files\Common Files\Services
[11.05.2008|16:40] C:\Program Files\Common Files\Skype
[28.03.2008|20:59] C:\Program Files\Common Files\SpeechEngines
[25.10.2008|17:38] C:\Program Files\Common Files\System
[31.03.2008|23:16] C:\Program Files\Common Files\WindowsLiveInstaller

--------------------\\ Process

( 52 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\Tahir\Cookies\tahir@ero-advertising[2].txt
C:\DOCUME~1\Tahir\Cookies\tahir@adopt.euroclick[1].txt

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-02-26 20:18:28
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------\\ Recherche d'autres infections

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"sqyos"="c:\\documents and settings\\tahir\\local settings\\application data\\sqyos.exe sqyos"

C:\DOCUME~1\Tahir\LOCALS~1\APPLIC~1\cuyye_navfx.dat
C:\DOCUME~1\Tahir\LOCALS~1\APPLIC~1\vlulbj_navfx.dat
[b]==> EGDACCESS <==/b

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\Tahir\Desktop\jeuxx\Crack
C:\DOCUME~1\Tahir\Desktop\jeuxx\Crack\AssassinsCreed_Dx10.exe
C:\DOCUME~1\Tahir\Desktop\jeuxx\Crack\AssassinsCreed_Dx9.exe
C:\DOCUME~1\Tahir\Favorites\tahir\Game KeyGenerators.url

[F:288][D:11]-> C:\DOCUME~1\Tahir\LOCALS~1\Temp
[F:47][D:0]-> C:\DOCUME~1\Tahir\Cookies
[F:459][D:12]-> C:\DOCUME~1\Tahir\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 26.02.2009|20:19 - Option : [1]

--------------------\\ Fin du rapport a 20:19:07

desactive tes protections antivirus et antispyware puis

Suppression + Hosts

double-clique sur le raccourci Lop S&D présent sur ton Bureau
* Séléctionne la langue souhaitée , puis choisis l'option "Suppression + Hosts"
* Patiente jusqu'à la fin du scan
* Poste le rapport généré (C:\lopR.txt)

ensuite :

retente l'option 2 de Navilog

bonsoir,

je suis vraiment dsl mais je sais pas vraiment comment désactiver mon antivirus et antispyware! pourriez vous svp me dire comment faire? merci bcp de m aider

clic droit sur les icones et "desactiver la protection en temps reel"

boonsoir,

je crois que j ai réussi avec netlog1( avec le boutton 2) voila le rapport mnt je dois faire quoi? er encore merci de m aider

le rapport:

Clean Navipromo version 3.7.4 commencé le 02.03.2009 à 22:19:34.79

Outil exécuté depuis C:\Program Files\navilog1

Mise à jour le 16.02.2009 à 18h00 par IL-MAFIOSO

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) 4 CPU 3.40GHz )
BIOS : BIOS Date: 09/27/04 21:48:26 Ver: 08.00.10
USER : Tahir ( Administrator )
BOOT : Fail-safe boot

Antivirus : avast! antivirus 4.8.1296 [VPS 090302-0] 4.8.1296 (Activated)

A:\ (USB)
C:\ (Local Disk) - NTFS - Total:58 Go (Free:8 Go)
D:\ (Local Disk) - NTFS - Total:79 Go (Free:19 Go)
E:\ (Local Disk) - NTFS - Total:47 Go (Free:34 Go)
F:\ (CD or DVD)
G:\ (CD or DVD)
H:\ (CD or DVD)

Mode suppression automatique
avec prise en charge résultats Catchme et GNS

Nettoyage executé en mode sans échec

*** fsbl1.txt non trouvé ***
(Assurez-vous que Catchme n'avait rien trouvé lors de la recherche)

*** Suppression avec sauvegardes résultats GenericNaviSearch ***

* Suppression dans "C:\WINDOWS\System32" *

* Suppression dans "C:\Documents and Settings\Tahir\locals~1\applic~1" *

* Suppression dans "C:\DOCUME~1\admin\locals~1\applic~1" *

* Suppression dans "C:\DOCUME~1\Musta\locals~1\applic~1" *

* Suppression dans "C:\DOCUME~1\Secir\locals~1\applic~1" *

*** Suppression dossiers dans "C:\WINDOWS" ***

*** Suppression dossiers dans "C:\Program Files" ***

*** Suppression dossiers dans "C:\Documents and Settings\All Users\startm~1\programs" ***

*** Suppression dossiers dans "C:\Documents and Settings\All Users\startm~1" ***

*** Suppression dossiers dans "c:\docume~1\alluse~1\applic~1" ***

*** Suppression dossiers dans "C:\Documents and Settings\Tahir\applic~1" ***

*** Suppression dossiers dans "C:\DOCUME~1\admin\applic~1" ***

*** Suppression dossiers dans "C:\DOCUME~1\Musta\applic~1" ***

*** Suppression dossiers dans "C:\DOCUME~1\Secir\applic~1" ***

*** Suppression dossiers dans "C:\Documents and Settings\Tahir\locals~1\applic~1" ***

*** Suppression dossiers dans "C:\DOCUME~1\admin\locals~1\applic~1" ***

*** Suppression dossiers dans "C:\DOCUME~1\Musta\locals~1\applic~1" ***

*** Suppression dossiers dans "C:\DOCUME~1\Secir\locals~1\applic~1" ***

*** Suppression dossiers dans "C:\Documents and Settings\Tahir\startm~1\programs" ***

*** Suppression dossiers dans "C:\DOCUME~1\admin\startm~1\programs" ***

*** Suppression dossiers dans "C:\DOCUME~1\Musta\startm~1\programs" ***

*** Suppression dossiers dans "C:\DOCUME~1\Secir\startm~1\programs" ***

*** Suppression fichiers ***

*** Suppression fichiers temporaires ***

Nettoyage contenu C:\WINDOWS\Temp effectué !
Nettoyage contenu C:\Documents and Settings\Tahir\locals~1\Temp effectué !

*** Traitement Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Suppression avec sauvegardes nouveaux fichiers Instant Access :

2)Recherche, création sauvegardes et suppression Heuristique :

* Dans "C:\WINDOWS\system32" *

* Dans "C:\Documents and Settings\Tahir\locals~1\applic~1" *

cuyye_navfx.dat trouvé !
Copie cuyye_navfx.dat réalisée avec succès !
cuyye_navfx.dat supprimé !

vlulbj_navfx.dat trouvé !
Copie vlulbj_navfx.dat réalisée avec succès !
vlulbj_navfx.dat supprimé !

* Dans "C:\DOCUME~1\admin\locals~1\applic~1" *

* Dans "C:\DOCUME~1\Musta\locals~1\applic~1" *

* Dans "C:\DOCUME~1\Secir\locals~1\applic~1" *

*** Sauvegarde du Registre vers dossier Safebackup ***

sauvegarde du Registre réalisée avec succès !

*** Nettoyage Registre ***

Nettoyage Registre Ok

*** Certificats ***

Certificat Egroup supprimé !
Certificat Electronic-Group supprimé !
Certificat Montorgueil absent !
Certificat OOO-Favorit supprimé !
Certificat Sunny-Day-Design-Ltdt absent !

*** Recherche autres dossiers et fichiers connus ***

*** Nettoyage terminé le 02.03.2009 à 22:21:22.85 ***

ok LOP S&D option 2 maintenant :)