Msnmsgrz.exe genproc toolbar et nailog1

Bonsoir,

j ai suivi tous vos consignes mais pour l analyse naviolog1, s a pas du tous durée 10 min juste 2 min( super rapide) et encore merci de m aider!
mais voila les rapports:

celui du Tool BAr S&D

-----------\\ ToolBar S&D 1.2.8 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) 4 CPU 3.40GHz )
BIOS : BIOS Date: 09/27/04 21:48:26 Ver: 08.00.10
USER : Tahir ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1296 [VPS 090224-0] 4.8.1296 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:58 Go (Free:8 Go)
D:\ (Local Disk) - NTFS - Total:79 Go (Free:19 Go)
E:\ (Local Disk) - NTFS - Total:47 Go (Free:34 Go)
F:\ (CD or DVD)
G:\ (CD or DVD)
H:\ (CD or DVD)
I:\ (CD or DVD)

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [1] ( 24.02.2009|19:37 )

-----------\\ Recherche de Fichiers / Dossiers ...

C:\DOCUME~1\Musta\APPLIC~1\Dealio
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\resFF
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\temp
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\alerts.gif
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\alerts_over.gif
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\alerts_rec.gif
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\alerts_rec_over.gif
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\chevron-small.gif
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\DealioSearch.html
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\deals-leftcap.gif
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\deal_report.jpg
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\ebay_login.jpg
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\err_mainwindow.html
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\err_toolbar.html
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\global_scripts.js
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\headerbgthin.jpg
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\highlight-bg.png
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\logo.gif
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\logo_over.gif
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\man_toolbar.css
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\man_toolbar.html
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\man_toolbar.js
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\man_toolbarl.js
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\post-this-deal.gif
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\post-this-deal_over.gif
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\scripts.js
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\scroller.js
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\search-chevron.gif
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\search-chevron_over.gif
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\search_bg_blink.gif
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\separator.gif
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\settings.gif
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\settings_over.gif
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\res\yahoo-search.png
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\resFF\deal_report.jpg
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\resFF\ebay_login.jpg
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\index.76.35
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.10.76
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.109.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.110.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.12.52
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.13.58
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.130.58
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.135.50
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.153.44
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.155.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.156.49
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.16.60
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.161.52
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.178.66
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.184.55
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.188.52
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.189.45
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.196.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.198.56
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.199.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.200.53
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.201.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.202.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.203.71
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.205.62
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.213.71
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.214.49
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.215.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.216.67
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.217.67
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.218.52
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.219.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.220.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.221.57
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.222.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.223.68
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.226.68
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.227.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.228.62
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.229.76
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.23.63
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.239.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.24.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.240.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.241.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.242.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.243.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.244.63
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.245.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.247.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.248.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.249.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.250.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.251.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.252.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.253.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.254.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.255.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.256.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.257.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.279.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.28.58
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.282.75
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.283.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.284.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.289.67
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.290.62
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.291.61
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.296.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.297.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.304.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.307.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.308.75
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.31.47
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.310.46
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.311.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.315.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.316.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.317.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.318.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.319.49
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.32.48
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.334.44
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.335.60
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.336.44
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.337.44
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.338.75
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.339.47
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.34.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.340.47
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.341.47
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.349.50
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.35.48
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.350.50
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.351.51
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.352.54
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.353.51
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.354.51
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.357.62
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.358.52
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.359.52
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.360.53
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.361.54
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.362.68
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.363.58
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.364.54
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.365.53
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.367.56
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.368.58
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.369.55
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.370.56
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.371.56
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.372.57
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.373.55
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.375.56
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.376.57
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.377.55
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.378.65
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.384.58
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.386.71
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.387.59
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.388.59
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.389.59
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.390.60
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.391.60
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.392.60
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.393.60
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.394.60
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.396.61
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.397.61
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.398.60
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.399.60
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.403.61
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.404.63
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.405.61
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.406.61
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.407.76
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.408.63
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.409.61
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.412.62
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.413.62
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.414.62
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.415.62
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.416.62
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.417.62
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.418.62
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.419.62
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.420.62
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.421.62
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.423.63
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.424.63
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.425.63
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.426.63
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.427.63
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.428.65
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.429.63
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.430.63
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.432.65
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.433.64
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.434.65
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.435.64
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.436.76
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.437.64
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.438.71
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.439.71
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.440.75
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.442.73
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.443.73
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.444.73
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.445.68
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.446.69
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.450.67
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.451.67
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.452.68
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.453.68
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.454.69
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.456.69
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.457.75
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.458.70
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.459.70
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.460.69
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.462.74
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.463.69
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.464.70
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.465.68
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.468.70
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.469.70
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.470.70
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.471.73
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.472.70
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.478.74
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.479.73
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.480.68
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.481.71
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.482.74
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.49.67
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.50.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.500.71
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.501.74
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.502.71
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.51.69
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.52.72
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.520.76
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.521.76
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.522.76
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.53.51
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.531.76
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.532.75
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.534.75
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.54.47
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.55.45
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.56.69
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.57.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.58.47
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.593.76
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.595.76
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.63.57
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.66.47
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.70.75
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rules\rules.1.71.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\index.3.67.22
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.109.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.178.66
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.198.56
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.245.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.247.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.279.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.283.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.284.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.289.67
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.290.62
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.297.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.315.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.319.49
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.335.60
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.337.44
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.340.47
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.360.53
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.386.59
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.388.59
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.391.60
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.398.60
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.399.60
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.403.61
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.404.63
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.405.61
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.406.61
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.407.61
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.408.63
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.409.61
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.412.62
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.413.62
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.414.62
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.415.62
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.416.62
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.417.62
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.418.62
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.419.62
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.420.62
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.421.62
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.424.63
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.427.63
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.432.65
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.49.67
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.51.46
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.52.57
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.53.51
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.54.47
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.57.43
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\rulesFF\rules.3.58.47
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\temp\dod_cache.xml
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3596_2524_1.html
C:\DOCUME~1\Musta\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3596_2524_3.html
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\CHROME\CONTENT\searchsettingsplugin.js
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\CHROME\CONTENT\searchsettingsplugin.xul
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\CHROME\LOCALE\EN-US\searchsettingsplugin.dtd
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\CHROME\LOCALE\EN-US\searchsettingsplugin.properties
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\COMPONENTS\SearchSettingsFF.dll
C:\DOCUME~1\Musta\APPLIC~1\Search Settings
C:\DOCUME~1\Musta\APPLIC~1\Search Settings\kb127
C:\DOCUME~1\Musta\APPLIC~1\Search Settings\kb127\res
C:\DOCUME~1\Musta\APPLIC~1\Search Settings\kb127\temp
C:\DOCUME~1\Musta\APPLIC~1\Search Settings\kb127\temp\ws-14287.log
C:\DOCUME~1\Tahir\APPLIC~1\Search Settings
C:\DOCUME~1\Tahir\APPLIC~1\Search Settings\kb127
C:\DOCUME~1\Tahir\APPLIC~1\Search Settings\kb127\res
C:\DOCUME~1\Tahir\APPLIC~1\Search Settings\kb127\temp
C:\DOCUME~1\Tahir\APPLIC~1\Search Settings\kb127\temp\ws-14296.log
C:\DOCUME~1\Tahir\APPLIC~1\Search Settings\kb127\temp\ws-14297.log
C:\DOCUME~1\Tahir\APPLIC~1\Search Settings\kb127\temp\ws-14298.log
C:\DOCUME~1\Tahir\APPLIC~1\Search Settings\kb127\temp\ws-14299.log
C:\Program Files\Search Settings
C:\Program Files\Search Settings\kb127
C:\Program Files\Search Settings\SearchSettings.exe
C:\Program Files\Search Settings\kb127\res
C:\Program Files\Search Settings\kb127\SearchSettings.dll
C:\Program Files\Search Settings\kb127\SearchSettingsRes409.dll
C:\Program Files\Search Settings\kb127\temp
C:\WINDOWS\iun6002.exe

-----------\\ Extensions

(Musta) - {1650a312-02bc-40ee-977e-83f158701739} => safe
(Musta) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar

(Tahir) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar
(Tahir) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar
(Tahir) - {991A772A-BA13-4c1d-A9EF-F897F31DEC7D} => megaupload

-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Start Page"="https://www.google.ch/?gws_rd=ssl"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Search Bar"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
"Default_Search_URL"="http://www.google.com/toolbar/ie8/sidebar.html"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Local Page"="https://www.msn.com/fr-fr/"
"Start Page"="http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home"

--------------------\\ Recherche d'autres infections

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"sqyos"="c:\\documents and settings\\tahir\\local settings\\application data\\sqyos.exe sqyos"

C:\DOCUME~1\Tahir\LOCALS~1\APPLIC~1\cuyye_navfx.dat
C:\DOCUME~1\Tahir\LOCALS~1\APPLIC~1\vlulbj_navfx.dat
[b]==> EGDACCESS <==/b

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\Tahir\Desktop\jeuxx\Crack
C:\DOCUME~1\Tahir\Desktop\jeuxx\Crack\AssassinsCreed_Dx10.exe
C:\DOCUME~1\Tahir\Desktop\jeuxx\Crack\AssassinsCreed_Dx9.exe
C:\DOCUME~1\Tahir\Favorites\tahir\Game KeyGenerators.url

1 - "C:\ToolBar SD\TB_1.txt" - 24.02.2009|19:38 - Option : [1]

-----------\\ Fin du rapport a 19:38:04.67

et voila celui du navilog1:

Search Navipromo version 3.7.4 commencé le 24.02.2009 à 19:40:39.85

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files\navilog1

Mise à jour le 16.02.2009 à 18h00 par IL-MAFIOSO

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) 4 CPU 3.40GHz )
BIOS : BIOS Date: 09/27/04 21:48:26 Ver: 08.00.10
USER : Tahir ( Administrator )
BOOT : Normal boot

Antivirus : avast! antivirus 4.8.1296 [VPS 090224-0] 4.8.1296 (Activated)

A:\ (USB)
C:\ (Local Disk) - NTFS - Total:58 Go (Free:8 Go)
D:\ (Local Disk) - NTFS - Total:79 Go (Free:19 Go)
E:\ (Local Disk) - NTFS - Total:47 Go (Free:34 Go)
F:\ (CD or DVD)
G:\ (CD or DVD)
H:\ (CD or DVD)
I:\ (CD or DVD)

Recherche executé en mode normal

*** Recherche Programmes installés ***

Favorit
Favorit

*** Recherche dossiers dans "C:\WINDOWS" ***

*** Recherche dossiers dans "C:\Program Files" ***

*** Recherche dossiers dans "C:\Documents and Settings\All Users\startm~1\programs" ***

*** Recherche dossiers dans "C:\Documents and Settings\All Users\startm~1" ***

*** Recherche dossiers dans "c:\docume~1\alluse~1\applic~1" ***

*** Recherche dossiers dans "C:\Documents and Settings\Tahir\applic~1" ***

*** Recherche dossiers dans "C:\DOCUME~1\admin\applic~1" ***

*** Recherche dossiers dans "C:\DOCUME~1\Musta\applic~1" ***

*** Recherche dossiers dans "C:\DOCUME~1\Secir\applic~1" ***

*** Recherche dossiers dans "C:\Documents and Settings\Tahir\locals~1\applic~1" ***

*** Recherche dossiers dans "C:\DOCUME~1\admin\locals~1\applic~1" ***

*** Recherche dossiers dans "C:\DOCUME~1\Musta\locals~1\applic~1" ***

*** Recherche dossiers dans "C:\DOCUME~1\Secir\locals~1\applic~1" ***

*** Recherche dossiers dans "C:\Documents and Settings\Tahir\startm~1\programs" ***

*** Recherche dossiers dans "C:\DOCUME~1\admin\startm~1\programs" ***

*** Recherche dossiers dans "C:\DOCUME~1\Musta\startm~1\programs" ***

*** Recherche dossiers dans "C:\DOCUME~1\Secir\startm~1\programs" ***

*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans "C:\WINDOWS\system32" *

* Recherche dans "C:\Documents and Settings\Tahir\locals~1\applic~1" *

* Recherche dans "C:\DOCUME~1\admin\locals~1\applic~1" *

* Recherche dans "C:\DOCUME~1\Musta\locals~1\applic~1" *

* Recherche dans "C:\DOCUME~1\Secir\locals~1\applic~1" *

*** Recherche fichiers ***

*** Recherche clés spécifiques dans le Registre ***
!! Les clés trouvées ne sont pas forcément infectées !!

HKEY_CURRENT_USER\Software\Lanconfig

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"sqyos"="c:\\documents and settings\\tahir\\local settings\\application data\\sqyos.exe sqyos"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"camsemq"="\"c:\\documents and settings\\tahir\\local settings\\application data\\camsemq.exe\" camsemq"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"wogskyi"="\"c:\\documents and settings\\tahir\\local settings\\application data\\wogskyi.exe\" wogskyi"

*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :

2)Recherche Heuristique :

* Dans "C:\WINDOWS\system32" :

* Dans "C:\Documents and Settings\Tahir\locals~1\applic~1" :

cuyye_navfx.dat trouvé !
vlulbj_navfx.dat trouvé !

* Dans "C:\DOCUME~1\admin\locals~1\applic~1" :

* Dans "C:\DOCUME~1\Musta\locals~1\applic~1" :

* Dans "C:\DOCUME~1\Secir\locals~1\applic~1" :

3)Recherche Certificats :

Certificat Egroup trouvé !
Certificat Electronic-Group trouvé !
Certificat Montorgueil absent !
Certificat OOO-Favorit trouvé !
Certificat Sunny-Day-Design-Ltd absent !

4)Recherche autres dossiers et fichiers connus :

*** Analyse terminée le 24.02.2009 à 19:41:20.00 ***