INFECTE PAR BURIMI.EXE

Résolu

kinou6864 Messages postés 72 Statut Membre -
kinou6864 Messages postés 72 Statut Membre - 6 juin 2009 à 14:07

Bonjour,

Mon ordi est infecté par un virus trouvé par AVAST qui ne peut ni le mettre en quarantaine ni le supprimer, il se trouve dans C:temporary internet files/all users/image455burimi.exe
Depuis quelques jours il fait planter mon ordi
Pouvez vous m'aider à le supprimer s'il vous plaît ? Merci d'avance
(je ne suis pas une pro en informatique!!!!)

Configuration: Windows XP

Afficher la suite

45 réponses

Résumé de la discussion

Un ordinateur sous Windows XP est infecté par un virus détecté par Avast qui ne peut être mis en quarantaine ni supprimé, localisé notamment dans C:\Temporary Internet Files\All Users\image455burimi.exe et responsable de plantages répétés.

Plusieurs solutions de désinfection et de suppression ont été proposées, avec des analyses et rapports générés par des outils dédiés, notamment OTListIt2, Ad-Remover et HijackThis, entre autres.

D'autres approches suggèrent l'utilisation d'OTListIt2 et OTCleanIt, ainsi que des scans en ligne, assorties d'un rapport à publier pour évaluer les infections et les actions à envisager.

En dernier lieu, il faut noter que ces outils demandent prudence et sauvegardes préalables, certains éléments comme VMNToolbar peuvent signaler des barres d'outil potentiellement indésirables et influencer les résultats des nettoyages.

Réponse 1 / 45
V-X

Salut,

Télécharge OTL2 de OLDTimer sur ton bureau.

▶ Double clic sur OTListIt2.exe pour le lancer.

▶ Coche les 2 cases Lop et Purity

▶ Coche la case devant "scan all users"

▶ Clic sur "Run Scan".

▶ A la fin du scan, le Bloc-Notes va s'ouvrir avec le rapport.

Upload le rapport sur cijoint:

▶ Rend toi sur ce site cijoint

▶ Clique sur Parcourir et cherche le fichier qui contient le rapport de OTListIt.

▶ Clique sur Ouvrir.

▶ Clique sur "Cliquez ici pour déposer le fichier".

▶ Un lien de cette forme =>http://www.cijoint.fr/cjlink.php?file=cj200905/cijSKAP5fU.txt est ajouté dans la page.

▶ Copie ce lien dans ta réponse.
1
Réponse 2 / 45
V-X

Re,

Tu es très infecter....

▶ Télécharge Ad-remover ( de C_XX ) sur ton bureau :

! Déconnecte toi et ferme toutes applications en cours !

▶ Double clique sur "Ad-R.exe" pour lancer l'installation et laisse les paramètres d'installation par défaut .

▶ Double-clique sur le raccourci Ad-remover qui est sur ton bureau pour lancer l'outil .

▶ Au menu principal choisis l'option "L" et tape sur [entrée] .

▶ Laisse travailler l'outil et ne touche à rien ...

▶ Poste le rapport qui apparait à la fin , sur le forum ...

( Le rapport est sauvegardé aussi sous C:\Ad-report.log )
( CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller )

Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.
1
Réponse 3 / 45
stpcfree Messages postés 103 Statut Membre 32

bonjour

essai malwarebytes
0
Réponse 4 / 45
kinou6864 Messages postés 72 Statut Membre

Bonjour,
Merci de ton aide, j'ai fait ce que tu m'as dit j'ai 2 rapports 1 = OTLISTIT et 2 = extras.txt
que veut dire upload ? dois-je envoyer les 2 rapports ?
J'avais averti que j'étai nulle !!!
0
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
Réponse 5 / 45
V-X

Re,

Lit bien la partie Ci-Joint

▶ Rend toi sur ce site cijoint

▶ Clique sur Parcourir et cherche le fichier qui contient le rapport de OTListIt.

▶ Clique sur Ouvrir.

▶ Clique sur "Cliquez ici pour déposer le fichier".

▶ Un lien de cette forme =>http://www.cijoint.fr/cjlink.php?file=cj200905/cijSKAP5fU.txt est ajouté dans la page.

▶ Copie ce lien dans ta réponse.
0
Réponse 6 / 45
kinou6864 Messages postés 72 Statut Membre

Voila le lien :
https://www.cjoint.com/?fFkUbk46qb
0
Réponse 7 / 45
kinou6864 Messages postés 72 Statut Membre

désolée pour le retard j'ai du m'absenter, j'ai fait ce que tu m'as dit voila le résultat :
.
======= RAPPORT D'AD-REMOVER 1.1.4.5 | UNIQUEMENT XP/VISTA =======
.
Mit à jour part C_XX le 31/05/2009 à 18:30
Contact: AdRemover.contact@gmail.com
Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
.
Lancé à: 2:22:04, 01/06/2009 | Mode Normal | Option: CLEAN
Exécuté de: C:\Program Files\Ad-remover\
Système d'exploitation: Microsoft® Windows XP™ Service Pack 3 v5.1.2600
Nom du PC: NAVARO-AA1F77AF
.
Administrateur: Administrateur
Administrateur: david
Administrateur: david_2
N'est pas administrateur: HelpAssistant *Desactive*
N'est pas administrateur: Invité
Administrateur: Propriétaire
N'est pas administrateur: SUPPORT_388945a0 *Desactive*
.
============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
.
.
HKCR\AppID\{362A53B2-2913-4F8A-82F5-7E0A23FDC6F9}
HKCR\AppID\EoRezoBHO.DLL
HKCR\CLSID\{64F56FC1-1272-44CD-BA6E-39723696E350}
HKCR\CLSID\{C7B76B90-3455-4AE6-A752-EAC4D19689E5}
HKCR\EoRezoBHO.EoBho
HKCR\EoRezoBHO.EoBho.1
HKCR\Interface\{B0D071A1-36B3-4757-A126-14C89C56013A}
HKCR\Typelib\{B4C656C9-F2E9-4E77-B3F4-443DF2BD778F}
HKCR\Typelib\{B6ACB3F1-6A83-432C-B854-3E1056F87F4E}
HKCU\Software\EoRezo
HKCU\Software\ItsLabel
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{64F56FC1-1272-44CD-BA6E-39723696E350}
HKLM\Software\Dealio
HKLM\Software\EoRezo
HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\EoEngine
HKLM\Software\Microsoft\shared tools\msconfig\startupreg\SoftwareHelper
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64F56FC1-1272-44CD-BA6E-39723696E350}
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C7B76B90-3455-4AE6-A752-EAC4D19689E5}
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\eoEngine_is1
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdate_is1
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Softwarehelper
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F}
.
C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\EoRezo\EoEngine.lnk
C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\EoRezo
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\cmhost.cyp
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\ConfMedia.cyp
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\db
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\eoDesktop
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\eoStats
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather.cfg
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\host.cyp
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\SoftwareUpdate
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\towns.cfg
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\user.cyp
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\db\cat.cyp
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\eoDesktop\config.xml
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\eoDesktop\eoDesktop.html
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\eoDesktop\userConfig.xml
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\eoStats\eoStats.txt
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\EoWeather.cfg
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\EoWeatherVal_02EC282.cfg
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_classic
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_station_meteo
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_classic\67_day.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_classic\67_night.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_classic\69_day.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_classic\69_night.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_classic\70_day.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_classic\70_night.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_classic\78_day.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_classic\78_night.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_classic\82_day.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_classic\82_night.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_classic\83_day.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_classic\83_night.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_classic\84_day.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_classic\84_night.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_classic\85_day.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_classic\85_night.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_classic\89_day.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_classic\89_night.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_classic\back.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_classic\background.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_classic\background_1.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_classic\background_1days.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_classic\background_2days.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_classic\background_7days.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_classic\backPressed.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_classic\band.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_classic\band_small.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_classic\close.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_classic\closePressed.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_classic\dayPrevisionBackground.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_classic\dayPrevisionClose.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_classic\earth.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_classic\fonds_‚cran.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_classic\help.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_classic\helpPressed.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_classic\minimise.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_classic\minimisePressed.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_classic\next.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_classic\nextPressed.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_classic\option.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_classic\optionPressed.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_classic\reflet_ecran.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_classic\small_background.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_classic\Thumbs.db
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_station_meteo\67_day.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_station_meteo\67_night.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_station_meteo\69_day.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_station_meteo\69_night.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_station_meteo\70_day.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_station_meteo\70_night.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_station_meteo\78_day.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_station_meteo\78_night.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_station_meteo\82_day.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_station_meteo\82_night.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_station_meteo\83_day.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_station_meteo\83_night.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_station_meteo\84_day.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_station_meteo\84_night.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_station_meteo\85_day.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_station_meteo\85_night.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_station_meteo\89_day.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_station_meteo\89_night.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_station_meteo\about.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_station_meteo\back.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_station_meteo\background.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_station_meteo\background_1.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_station_meteo\background_1days.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_station_meteo\background_2days.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_station_meteo\background_7days.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_station_meteo\backPressed.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_station_meteo\close.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_station_meteo\closePressed.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_station_meteo\dayPrevisionBackground.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_station_meteo\dayPrevisionClose.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_station_meteo\earth.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_station_meteo\fonds_‚cran.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_station_meteo\help.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_station_meteo\helpPressed.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_station_meteo\minimise.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_station_meteo\minimisePressed.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_station_meteo\next.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_station_meteo\nextPressed.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_station_meteo\option.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_station_meteo\optionPressed.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_station_meteo\reflet_ecran.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_station_meteo\Thumbs.db
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\EoWeather\images_station_meteo\txt_14x13.png
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\SoftwareUpdate\Download
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\SoftwareUpdate\help_config.cyp
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\SoftwareUpdate\Software
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\SoftwareUpdate\SoftwareUpdate.exe
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\SoftwareUpdate\SoftwareUpdateHP.exe
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\SoftwareUpdate\unins000.dat
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\SoftwareUpdate\unins000.exe
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\SoftwareUpdate\user_config.cyp
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\SoftwareUpdate\user_profil.cyp
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\SoftwareUpdate\Software\eobrowserpub
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\SoftwareUpdate\Software\eoengine
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\SoftwareUpdate\Software\itsTV
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\SoftwareUpdate\Software\eobrowserpub\1.0.0.1
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\SoftwareUpdate\Software\eoengine\9.1.0.0
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\SoftwareUpdate\Software\itsTV\3.0.0.1
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\SoftwareUpdate\Software\itsTV\3.0.0.2
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\SoftwareUpdate\Software\itsTV\3.0.0.3
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\SoftwareUpdate\Software\itsTV\3.0.0.4
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\SoftwareUpdate\Software\itsTV\3.0.0.5
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\SoftwareUpdate\Software\itsTV\3.0.0.2\itstv.exe
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\SoftwareUpdate\Software\itsTV\3.0.0.3\itstv.exe
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\SoftwareUpdate\Software\itsTV\3.0.0.4\itstv.exe
C:\DOCUME~1\david_2\APPLIC~1\EoRezo\SoftwareUpdate\Software\itsTV\3.0.0.5\itstv.exe
C:\DOCUME~1\david_2\APPLIC~1\EoRezo
C:\DOCUME~1\david_2\APPLIC~1\ItsLabel\ItsTV
C:\DOCUME~1\david_2\APPLIC~1\ItsLabel\ItsTV\itsTV.xml
C:\DOCUME~1\david_2\APPLIC~1\ItsLabel
C:\Program Files\EoRezo\ConfMedia.cyp
C:\Program Files\EoRezo\EoAdv
C:\Program Files\EoRezo\EoEngine.exe
C:\Program Files\EoRezo\eoEngine.url
C:\Program Files\EoRezo\EoMultiLanguage.dll
C:\Program Files\EoRezo\EoRezoComm.dll
C:\Program Files\EoRezo\EoRezoImg_15.dll
C:\Program Files\EoRezo\EoRezoImg_16.dll
C:\Program Files\EoRezo\EoRezoImg_17.dll
C:\Program Files\EoRezo\EoRezoImg_18.dll
C:\Program Files\EoRezo\EoRezoImg_19.dll
C:\Program Files\EoRezo\EoRezoImg_20.dll
C:\Program Files\EoRezo\EoRezoImg_21.dll
C:\Program Files\EoRezo\EoRezoImg_22.dll
C:\Program Files\EoRezo\EoRezoImg_23.dll
C:\Program Files\EoRezo\EoRezoImg_24.dll
C:\Program Files\EoRezo\EoRezoTools_15.dll
C:\Program Files\EoRezo\EoRezoTools_16.dll
C:\Program Files\EoRezo\EoRezoTools_17.dll
C:\Program Files\EoRezo\EoRezoTools_18.dll
C:\Program Files\EoRezo\EoRezoTools_19.dll
C:\Program Files\EoRezo\EoRezoTools_20.dll
C:\Program Files\EoRezo\EoRezoTools_21.dll
C:\Program Files\EoRezo\EoRezoTools_22.dll
C:\Program Files\EoRezo\EoRezoTools_23.dll
C:\Program Files\EoRezo\EoRezoTools_24.dll
C:\Program Files\EoRezo\EoRezoTools_25.dll
C:\Program Files\EoRezo\EoRezoTools_26.dll
C:\Program Files\EoRezo\EoRezoTools_27.dll
C:\Program Files\EoRezo\EoRezoTools_28.dll
C:\Program Files\EoRezo\EoRezoTools_29.dll
C:\Program Files\EoRezo\EoWeather
C:\Program Files\EoRezo\FreeImage.dll
C:\Program Files\EoRezo\Host.cyp
C:\Program Files\EoRezo\icon_eo.st.ico
C:\Program Files\EoRezo\lang
C:\Program Files\EoRezo\MngInstaller.dll
C:\Program Files\EoRezo\unins000.dat
C:\Program Files\EoRezo\unins000.exe
C:\Program Files\EoRezo\user.cyp
C:\Program Files\EoRezo\EoAdv\atl90.dll
C:\Program Files\EoRezo\EoAdv\EoAdv.dll
C:\Program Files\EoRezo\EoAdv\eoAdv.url
C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll
C:\Program Files\EoRezo\EoAdv\mfc90.dll
C:\Program Files\EoRezo\EoAdv\Microsoft.VC90.ATL.manifest
C:\Program Files\EoRezo\EoAdv\Microsoft.VC90.CRT.manifest
C:\Program Files\EoRezo\EoAdv\Microsoft.VC90.MFC.manifest
C:\Program Files\EoRezo\EoAdv\msvcr90.dll
C:\Program Files\EoRezo\lang\ihm_eoclock.xml
C:\Program Files\EoRezo\lang\ihm_eoengine.xml
C:\Program Files\EoRezo\lang\ihm_eonet.xml
C:\Program Files\EoRezo\lang\ihm_eorezotools.xml
C:\Program Files\EoRezo\lang\ihm_eosudoku.xml
C:\Program Files\EoRezo\lang\ihm_eoweather.xml
C:\Program Files\EoRezo\lang\lang_en.xml
C:\Program Files\EoRezo\lang\lang_es.xml
C:\Program Files\EoRezo\lang\lang_fr.xml
C:\Program Files\EoRezo\lang\lang_it.xml
C:\Program Files\EoRezo
C:\Documents and Settings\david\Application Data\Eorezo\cmhost.cyp
C:\Documents and Settings\david\Application Data\Eorezo\ConfMedia.cyp
C:\Documents and Settings\david\Application Data\Eorezo\db
C:\Documents and Settings\david\Application Data\Eorezo\eoDesktop
C:\Documents and Settings\david\Application Data\Eorezo\eoStats
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather.cfg
C:\Documents and Settings\david\Application Data\Eorezo\host.cyp
C:\Documents and Settings\david\Application Data\Eorezo\user.cyp
C:\Documents and Settings\david\Application Data\Eorezo\db\cat.cyp
C:\Documents and Settings\david\Application Data\Eorezo\eoDesktop\config.xml
C:\Documents and Settings\david\Application Data\Eorezo\eoDesktop\eoDesktop.html
C:\Documents and Settings\david\Application Data\Eorezo\eoDesktop\userConfig.xml
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\EoWeather.cfg
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\EoWeatherVal_02EC282.cfg
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_classic
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_station_meteo
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_classic\67_day.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_classic\67_night.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_classic\69_day.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_classic\69_night.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_classic\70_day.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_classic\70_night.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_classic\78_day.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_classic\78_night.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_classic\82_day.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_classic\82_night.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_classic\83_day.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_classic\83_night.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_classic\84_day.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_classic\84_night.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_classic\85_day.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_classic\85_night.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_classic\89_day.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_classic\89_night.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_classic\back.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_classic\background.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_classic\background_1.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_classic\background_1days.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_classic\background_2days.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_classic\background_7days.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_classic\backPressed.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_classic\band.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_classic\band_small.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_classic\close.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_classic\closePressed.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_classic\dayPrevisionBackground.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_classic\dayPrevisionClose.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_classic\earth.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_classic\fonds_‚cran.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_classic\help.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_classic\helpPressed.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_classic\minimise.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_classic\minimisePressed.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_classic\next.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_classic\nextPressed.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_classic\option.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_classic\optionPressed.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_classic\reflet_ecran.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_classic\small_background.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_classic\Thumbs.db
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_station_meteo\67_day.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_station_meteo\67_night.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_station_meteo\69_day.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_station_meteo\69_night.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_station_meteo\70_day.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_station_meteo\70_night.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_station_meteo\78_day.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_station_meteo\78_night.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_station_meteo\82_day.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_station_meteo\82_night.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_station_meteo\83_day.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_station_meteo\83_night.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_station_meteo\84_day.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_station_meteo\84_night.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_station_meteo\85_day.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_station_meteo\85_night.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_station_meteo\89_day.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_station_meteo\89_night.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_station_meteo\about.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_station_meteo\back.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_station_meteo\background.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_station_meteo\background_1.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_station_meteo\background_1days.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_station_meteo\background_2days.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_station_meteo\background_7days.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_station_meteo\backPressed.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_station_meteo\close.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_station_meteo\closePressed.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_station_meteo\dayPrevisionBackground.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_station_meteo\dayPrevisionClose.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_station_meteo\earth.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_station_meteo\fonds_‚cran.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_station_meteo\help.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_station_meteo\helpPressed.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_station_meteo\minimise.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_station_meteo\minimisePressed.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_station_meteo\next.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_station_meteo\nextPressed.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_station_meteo\option.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_station_meteo\optionPressed.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_station_meteo\reflet_ecran.png
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_station_meteo\Thumbs.db
C:\Documents and Settings\david\Application Data\Eorezo\EoWeather\images_station_meteo\txt_14x13.png
C:\Documents and Settings\david\Application Data\Eorezo
C:\Documents and Settings\david\Application Data\ItsLabel\ItsTV
C:\Documents and Settings\david\Application Data\ItsLabel\ItsTV\itsTV.xml
C:\Documents and Settings\david\Application Data\ItsLabel
C:\DOCUME~1\david_2\Bureau\eoNews.URL
C:\WINDOWS\Prefetch\SOFTWAREUPDATEHP.EXE-05AACB72.pf
C:\DOCUME~1\david_2\Cookies\david_2@eorezo[1].txt
C:\DOCUME~1\david_2\Cookies\david_2@eorezo[2].txt

(!) -- Fichiers temporaires supprimés.

.
============== Scan additionnel ==============
.
.
.

* Internet Explorer Version 7.0.5730.11 *

[HKEY_CURRENT_USER\..\Internet Explorer\Main]

Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Search Page: hxxp://www.google.com
Start Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]

Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/

[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]

Tabs: res://ieframe.dll/tabswelcome.htm

============== Suspect (Cracks, Serials ... ) ==============

.

+---------------------------------------------------------------------------+

26411 Octet(s) - C:\Ad-Report-CLEAN.log

16 Fichier(s) - C:\Program Files\Ad-remover\BACKUP
92 Fichier(s) - C:\Program Files\Ad-remover\QUARANTINE

Fin à: 2:42:03 | 01/06/2009
.
============== E.O.F ==============
.
0
Réponse 8 / 45
V-X

Re,

Télécharge Toolbar-S&D (Team IDN) sur ton Bureau

!! Déconnectes toi et fermes toute tes applications en cours le temps de la manipe !!

▶ Double-cliques sur l'.exe pour lancer l'installe et laisses toi guider ...

▶ Une fois fait, cliques sur le raccourci créé sur ton bureau pour lancer l'outil .

▶ Choisis l'option 1 ( "recherche") et tapes "entrée" .

▶Une fois le scan finit , un rapport va apparaître, copie/colles l'intégralité
de son contenu dans ta prochaine réponse ...

( le rapport est en outre sauvegardé ici -> C:\TB.txt )

Tutoriel Toolbard-S&D

Si un rapport ne passe pas faire une alerte à la conciergerie avec le /!\ jaune.
0
Réponse 9 / 45
kinou6864 Messages postés 72 Statut Membre

Re,

voilà le rapport

-----------\\ ToolBar S&D 1.2.8 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : AMD Athlon(tm) XP 2100+ )
BIOS : Award Modular BIOS v6.00PG
USER : david_2 ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1296 [VPS 090531-0] 4.8.1296 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:57 Go (Free:17 Go)
D:\ (CD or DVD)
E:\ (CD or DVD)

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [1] ( 01/06/2009|11:13 )

-----------\\ Recherche de Fichiers / Dossiers ...

C:\DOCUME~1\david\APPLIC~1\VMNToolbar
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\---Yahoo.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\01net.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\a.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\amazon.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\an.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\arrowB.gif
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\arrowT.gif
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\arrow_down.gif
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\arrow_up.gif
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\autofill.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\avstate.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\b.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\bg_pub.gif
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\bg_ttl.gif
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\bn.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\bottom.png
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\bottom_left.png
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\bottom_right.png
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\c.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\canalblog.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\cn.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\COMBOSEARCH.acs
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\d.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\dictionary2.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\dn.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\downfile
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\DownloadCOM.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\dropdown.css
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\ErrorLog.txt
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\ErrorPageTemplate.css
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\f.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\flag_argentine.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\flag_australia.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\flag_brazil.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\flag_canada.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\flag_china.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\flag_france.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\flag_germany.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\flag_greece.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\flag_hongkong.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\flag_india.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\flag_indonesia.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\flag_italy.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\flag_japan.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\flag_korea.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\flag_mexico.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\flag_netherlands.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\flag_spain.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\flag_sweeden.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\flag_taiwan.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\flag_uk.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\flag_usa.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\fn.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\g.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\gaming.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\gn.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\gograph.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\graphred0.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\graphred0_5.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\graphred1.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\graphred1_5.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\graphred2.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\graphred2_5.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\graphred3.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\graphred3_5.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\graphred4.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\graphred4_5.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\graphred5.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\h.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\help.gif
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\hideremove.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\highlight.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\hn.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\hororank.xml
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\h_aquarius.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\h_aries.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\h_cancer.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\h_capricorn.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\h_gemini.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\h_leo.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\h_libra.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\h_pisces.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\h_sagittarius.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\h_scorpio.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\h_taurus.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\h_virgo.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\i.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\IEtab1_7d.zip
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\in.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\ipsearch.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\j.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\jn.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\k.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\kn.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\l.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\left.png
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\ln.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\loading.gif
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\login.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\logo.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\n.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\New York_NY_weather.txt
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\New York_NY_weather.txt170187
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\New York_NY_weather.txt2097109
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\New York_NY_weather.txt2717171
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\New York_NY_weather.txt3972046
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\New York_NY_weather.txt5776171
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\New York_NY_weather.txt6466125
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\New York_NY_weather.txt8166250
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\new02.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\NewCfg
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\news.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\news.html
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\nn.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\o.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\on.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\p.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\pestscanimg.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\pixsy.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\pn.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\popup_off.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\popup_on.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\popup_ona.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\p_yahoo.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\p_yahoo_fr.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\q.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\qn.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\r.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\relatedlinks.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\report.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\right.png
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\rn.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\rss.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\rss.xsl
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\rss1.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\rsslib.js
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\rssmenu1_7a.zip
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\s.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\search.gif
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\search_fr.gif
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\security.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\sinfo.txt
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\sinfo.txt1096609
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\sinfo.txt1267515
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\sinfo.txt2633875
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\sinfo.txt305937
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\sinfo.txt306250
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\sinfo.txt4654875
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\sinfo.txt512921
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\sinfo.txt555531
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\sinfo.txt7533406
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\sinfo.txt899859
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\siteinfo.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\slider.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\sn.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\spacer.gif
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\stars-red1.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\stars-red2.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\stars-red3.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\stars-red4.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\stars-red5.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\storage.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\t.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\tabdataV3.js
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\tablib.js
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\tabwelcome_en.html
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\tabwelcome_fr.html
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\tab_icon.png
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\technorati.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\thes_search.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\tn.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\tools.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\top.png
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\top_left.png
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\top_right.png
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\translate.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\u.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\un.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\utf8.js
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\v.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\vmlib.js
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\vmntoolbartb0501.cfg
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\vmntoolbartb1501.cfg
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\vn.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\w.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\web_en.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\web_fr.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\wikipedia.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\wn.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\x.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\xp_close_small.gif
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\Yahoo.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\yahoo_search.gif
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\YouTube.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\z.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\zn.bmp
C:\DOCUME~1\david\APPLIC~1\VMNToolbar\zoom.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\---Yahoo.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\01net.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\a.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\amazon.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\an.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\arrowB.gif
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\arrowT.gif
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\arrow_down.gif
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\arrow_up.gif
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\autofill.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\avstate.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\b.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\bg_pub.gif
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\bg_ttl.gif
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\bn.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\bottom.png
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\bottom_left.png
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\bottom_right.png
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\c.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\canalblog.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\cn.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\COMBOSEARCH.acs
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\d.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\dictionary2.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\dn.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\downfile
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\Download
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\DownloadCOM.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\dropdown.css
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\ErrorLog.txt
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\ErrorPageTemplate.css
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\f.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\flag_argentine.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\flag_australia.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\flag_brazil.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\flag_canada.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\flag_china.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\flag_france.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\flag_germany.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\flag_greece.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\flag_hongkong.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\flag_india.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\flag_indonesia.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\flag_italy.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\flag_japan.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\flag_korea.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\flag_mexico.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\flag_netherlands.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\flag_spain.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\flag_sweeden.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\flag_taiwan.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\flag_uk.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\flag_usa.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\fn.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\g.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\gaming.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\gn.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\gograph.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\graphred0.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\graphred0_5.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\graphred1.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\graphred1_5.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\graphred2.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\graphred2_5.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\graphred3.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\graphred3_5.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\graphred3_5.bmp3244328
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\graphred4.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\graphred4_5.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\graphred5.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\h.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\help.gif
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\hideremove.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\highlight.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\hn.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\hororank.xml
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\h_aquarius.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\h_aries.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\h_cancer.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\h_capricorn.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\h_gemini.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\h_leo.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\h_libra.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\h_pisces.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\h_sagittarius.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\h_scorpio.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\h_taurus.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\h_virgo.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\i.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\IEtab1_7d.zip
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\in.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\ipsearch.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\j.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\jn.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\k.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\kn.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\l.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\left.png
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\ln.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\loading.gif
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\login.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\logo.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\n.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\New York_NY_weather.txt
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\New York_NY_weather.txt12649453
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\New York_NY_weather.txt3287437
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\New York_NY_weather.txt3733203
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\New York_NY_weather.txt4406968
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\New York_NY_weather.txt5549031
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\New York_NY_weather.txt73625
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\New York_NY_weather.txt7443015
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\New York_NY_weather.txt7755062
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\New York_NY_weather.txt797312
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\New York_NY_weather.txt9558078
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\New York_NY_weather.txt96265
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\new02.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\NewCfg
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\news.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\news.html
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\nn.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\o.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\on.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\p.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\pestscanimg.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\pixsy.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\pn.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\popup_off.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\popup_on.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\popup_ona.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\p_yahoo.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\p_yahoo_fr.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\q.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\qn.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\r.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\relatedlinks.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\report.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\right.png
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\rn.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\rss.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\rss.xsl
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\rss1.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\rsslib.js
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\rssmenu1_7a.zip
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\s.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\search.gif
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\search_fr.gif
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\security.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt10491890
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt113140
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt1203531
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt1243828
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt12649453
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt128390
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt13018281
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt140546
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt1423062
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt142671
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt143187
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt1435453
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt158984
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt1591750
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt16821703
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt1908593
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt2092890
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt2457734
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt2635546
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt2964062
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt3106203
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt3157437
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt3287296
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt3287515
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt3368500
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt3721000
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt4406843
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt4481296
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt5029437
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt532296
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt7305062
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt800500
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt800765
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\siteinfo.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\slider.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sn.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\spacer.gif
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\stars-red1.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\stars-red2.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\stars-red3.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\stars-red4.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\stars-red5.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\storage.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\t.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\tabdataV3.js
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\tablib.js
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\tabwelcome_en.html
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\tabwelcome_fr.html
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\tab_icon.png
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\technorati.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\thes_search.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\tn.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\tools.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\top.png
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\top_left.png
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\top_right.png
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\translate.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\u.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\un.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\utf8.js
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\v.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\vmlib.js
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\vmntoolbartb0501.cfg
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\vmntoolbartb1501.cfg
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\vn.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\w.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\web_en.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\web_fr.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\wikipedia.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\wn.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\x.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\xp_close_small.gif
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\Yahoo.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\yahoo_search.gif
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\YouTube.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\z.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\zn.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\zoom.bmp
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\downfile\searchdataV3.php109828
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\downfile\searchdataV3.php96250
C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\Download\games.html
C:\Program Files\VMNToolbar
C:\Program Files\VMNToolbar\install.ico
C:\Program Files\VMNToolbar\tbuninstall.exe
C:\Program Files\VMNToolbar\toolbar.ini
C:\Program Files\VMNToolbar\uninstall.exe

-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Page"="https://www.google.com/?gws_rd=ssl"
"Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
"Search Bar"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Default_page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
"Window Title"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
"Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Start Page"="https://www.msn.com/fr-fr"
"Search bar"="http://www.bing.com/spresults.aspx"

--------------------\\ Recherche d'autres infections

C:\WINDOWS\system32\acdgijjl.ini
C:\WINDOWS\system32\acdgijjl.ini2
C:\WINDOWS\system32\noqtwxbc.ini
C:\WINDOWS\system32\noqtwxbc.ini2
C:\WINDOWS\system32\tttttvut.ini
C:\WINDOWS\system32\tttttvut.ini2
C:\WINDOWS\system32\utwwwyay.ini
C:\WINDOWS\system32\utwwwyay.ini2
C:\WINDOWS\system32\uxxadcfe.ini
C:\WINDOWS\system32\uxxadcfe.ini2
[b]==> VUNDO <==/b

1 - "C:\ToolBar SD\TB_1.txt" - 01/06/2009|11:23 - Option : [1]

-----------\\ Fin du rapport a 11:23:44,18
0
Réponse 10 / 45
V-X

Re,

▶ Nettoyage avec ToolBar S&D :

!! Déconnectes toi et fermes toute tes applications en cours le temps de la manipe !!

▶Relances Toolbar-S&D en double-cliquant sur le raccourci.

▶ Tapes sur l'option 2 ( "nettoyage" ) puis tapes sur "Entrée".

Note : Ne touches à rien lors de la suppression !!

▶ Un rapport sera généré à la fin du processus : postes son contenu dans ta prochaine réponse

Si un rapport ne passe pas faire une alerte à la conciergerie avec le /!\ jaune.
0
Réponse 11 / 45
kinou6864 Messages postés 72 Statut Membre

Re,

Résultat :

-----------\\ ToolBar S&D 1.2.8 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : AMD Athlon(tm) XP 2100+ )
BIOS : Award Modular BIOS v6.00PG
USER : david_2 ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1296 [VPS 090531-0] 4.8.1296 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:57 Go (Free:17 Go)
D:\ (CD or DVD)
E:\ (CD or DVD)

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [2] ( 01/06/2009|11:32 )

-----------\\ SUPPRESSION

Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\---Yahoo.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\01net.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\a.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\amazon.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\an.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\arrowB.gif
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\arrowT.gif
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\arrow_down.gif
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\arrow_up.gif
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\autofill.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\avstate.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\b.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\bg_pub.gif
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\bg_ttl.gif
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\bn.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\bottom.png
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\bottom_left.png
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\bottom_right.png
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\c.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\canalblog.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\cn.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\COMBOSEARCH.acs
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\d.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\dictionary2.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\dn.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\downfile
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\DownloadCOM.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\dropdown.css
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\ErrorLog.txt
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\ErrorPageTemplate.css
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\f.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\flag_argentine.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\flag_australia.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\flag_brazil.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\flag_canada.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\flag_china.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\flag_france.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\flag_germany.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\flag_greece.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\flag_hongkong.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\flag_india.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\flag_indonesia.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\flag_italy.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\flag_japan.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\flag_korea.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\flag_mexico.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\flag_netherlands.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\flag_spain.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\flag_sweeden.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\flag_taiwan.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\flag_uk.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\flag_usa.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\fn.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\g.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\gaming.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\gn.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\gograph.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\graphred0.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\graphred0_5.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\graphred1.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\graphred1_5.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\graphred2.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\graphred2_5.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\graphred3.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\graphred3_5.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\graphred4.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\graphred4_5.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\graphred5.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\h.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\help.gif
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\hideremove.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\highlight.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\hn.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\hororank.xml
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\h_aquarius.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\h_aries.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\h_cancer.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\h_capricorn.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\h_gemini.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\h_leo.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\h_libra.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\h_pisces.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\h_sagittarius.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\h_scorpio.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\h_taurus.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\h_virgo.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\i.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\IEtab1_7d.zip
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\in.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\ipsearch.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\j.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\jn.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\k.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\kn.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\l.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\left.png
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\ln.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\loading.gif
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\login.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\logo.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\n.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\New York_NY_weather.txt
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\New York_NY_weather.txt170187
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\New York_NY_weather.txt2097109
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\New York_NY_weather.txt2717171
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\New York_NY_weather.txt3972046
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\New York_NY_weather.txt5776171
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\New York_NY_weather.txt6466125
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\New York_NY_weather.txt8166250
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\new02.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\NewCfg
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\news.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\news.html
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\nn.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\o.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\on.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\p.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\pestscanimg.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\pixsy.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\pn.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\popup_off.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\popup_on.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\popup_ona.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\p_yahoo.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\p_yahoo_fr.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\q.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\qn.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\r.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\relatedlinks.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\report.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\right.png
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\rn.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\rss.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\rss.xsl
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\rss1.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\rsslib.js
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\rssmenu1_7a.zip
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\s.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\search.gif
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\search_fr.gif
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\security.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\sinfo.txt
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\sinfo.txt1096609
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\sinfo.txt1267515
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\sinfo.txt2633875
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\sinfo.txt305937
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\sinfo.txt306250
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\sinfo.txt4654875
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\sinfo.txt512921
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\sinfo.txt555531
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\sinfo.txt7533406
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\sinfo.txt899859
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\siteinfo.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\slider.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\sn.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\spacer.gif
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\stars-red1.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\stars-red2.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\stars-red3.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\stars-red4.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\stars-red5.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\storage.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\t.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\tabdataV3.js
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\tablib.js
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\tabwelcome_en.html
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\tabwelcome_fr.html
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\tab_icon.png
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\technorati.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\thes_search.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\tn.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\tools.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\top.png
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\top_left.png
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\top_right.png
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\translate.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\u.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\un.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\utf8.js
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\v.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\vmlib.js
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\vmntoolbartb0501.cfg
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\vmntoolbartb1501.cfg
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\vn.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\w.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\web_en.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\web_fr.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\wikipedia.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\wn.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\x.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\xp_close_small.gif
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\Yahoo.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\yahoo_search.gif
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\YouTube.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\z.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\zn.bmp
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar\zoom.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\---Yahoo.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\01net.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\a.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\amazon.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\an.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\arrowB.gif
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\arrowT.gif
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\arrow_down.gif
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\arrow_up.gif
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\autofill.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\avstate.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\b.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\bg_pub.gif
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\bg_ttl.gif
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\bn.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\bottom.png
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\bottom_left.png
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\bottom_right.png
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\c.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\canalblog.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\cn.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\COMBOSEARCH.acs
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\d.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\dictionary2.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\dn.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\downfile
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\Download
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\DownloadCOM.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\dropdown.css
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\ErrorLog.txt
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\ErrorPageTemplate.css
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\f.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\flag_argentine.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\flag_australia.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\flag_brazil.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\flag_canada.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\flag_china.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\flag_france.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\flag_germany.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\flag_greece.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\flag_hongkong.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\flag_india.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\flag_indonesia.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\flag_italy.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\flag_japan.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\flag_korea.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\flag_mexico.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\flag_netherlands.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\flag_spain.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\flag_sweeden.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\flag_taiwan.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\flag_uk.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\flag_usa.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\fn.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\g.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\gaming.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\gn.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\gograph.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\graphred0.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\graphred0_5.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\graphred1.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\graphred1_5.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\graphred2.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\graphred2_5.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\graphred3.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\graphred3_5.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\graphred3_5.bmp3244328
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\graphred4.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\graphred4_5.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\graphred5.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\h.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\help.gif
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\hideremove.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\highlight.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\hn.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\hororank.xml
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\h_aquarius.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\h_aries.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\h_cancer.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\h_capricorn.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\h_gemini.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\h_leo.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\h_libra.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\h_pisces.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\h_sagittarius.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\h_scorpio.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\h_taurus.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\h_virgo.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\i.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\IEtab1_7d.zip
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\in.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\ipsearch.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\j.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\jn.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\k.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\kn.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\l.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\left.png
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\ln.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\loading.gif
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\login.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\logo.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\n.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\New York_NY_weather.txt
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\New York_NY_weather.txt12649453
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\New York_NY_weather.txt3287437
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\New York_NY_weather.txt3733203
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\New York_NY_weather.txt4406968
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\New York_NY_weather.txt5549031
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\New York_NY_weather.txt73625
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\New York_NY_weather.txt7443015
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\New York_NY_weather.txt7755062
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\New York_NY_weather.txt797312
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\New York_NY_weather.txt9558078
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\New York_NY_weather.txt96265
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\new02.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\NewCfg
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\news.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\news.html
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\nn.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\o.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\on.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\p.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\pestscanimg.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\pixsy.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\pn.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\popup_off.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\popup_on.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\popup_ona.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\p_yahoo.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\p_yahoo_fr.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\q.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\qn.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\r.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\relatedlinks.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\report.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\right.png
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\rn.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\rss.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\rss.xsl
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\rss1.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\rsslib.js
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\rssmenu1_7a.zip
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\s.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\search.gif
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\search_fr.gif
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\security.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt10491890
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt113140
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt1203531
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt1243828
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt12649453
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt128390
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt13018281
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt140546
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt1423062
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt142671
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt143187
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt1435453
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt158984
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt1591750
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt16821703
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt1908593
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt2092890
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt2457734
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt2635546
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt2964062
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt3106203
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt3157437
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt3287296
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt3287515
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt3368500
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt3721000
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt4406843
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt4481296
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt5029437
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt532296
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt7305062
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt800500
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sinfo.txt800765
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\siteinfo.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\slider.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\sn.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\spacer.gif
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\stars-red1.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\stars-red2.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\stars-red3.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\stars-red4.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\stars-red5.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\storage.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\t.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\tabdataV3.js
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\tablib.js
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\tabwelcome_en.html
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\tabwelcome_fr.html
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\tab_icon.png
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\technorati.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\thes_search.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\tn.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\tools.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\top.png
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\top_left.png
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\top_right.png
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\translate.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\u.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\un.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\utf8.js
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\v.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\vmlib.js
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\vmntoolbartb0501.cfg
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\vmntoolbartb1501.cfg
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\vn.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\w.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\web_en.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\web_fr.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\wikipedia.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\wn.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\x.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\xp_close_small.gif
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\Yahoo.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\yahoo_search.gif
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\YouTube.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\z.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\zn.bmp
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar\zoom.bmp
Supprime! - C:\Program Files\VMNToolbar\install.ico
Supprime! - C:\Program Files\VMNToolbar\tbuninstall.exe
Supprime! - C:\Program Files\VMNToolbar\toolbar.ini
Supprime! - C:\Program Files\VMNToolbar\uninstall.exe
Supprime! - C:\DOCUME~1\david\APPLIC~1\VMNToolbar
Supprime! - C:\DOCUME~1\david_2\APPLIC~1\VMNToolbar
Supprime! - C:\Program Files\VMNToolbar

-----------\\ Recherche de Fichiers / Dossiers ...

-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Page"="https://www.google.com/?gws_rd=ssl"
"Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
"Search Bar"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Default_page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
"Window Title"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
"Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Start Page"="https://www.msn.com/fr-fr/"
"Search bar"="http://www.bing.com/spresults.aspx"

--------------------\\ Recherche d'autres infections

C:\WINDOWS\system32\acdgijjl.ini
C:\WINDOWS\system32\acdgijjl.ini2
C:\WINDOWS\system32\noqtwxbc.ini
C:\WINDOWS\system32\noqtwxbc.ini2
C:\WINDOWS\system32\tttttvut.ini
C:\WINDOWS\system32\tttttvut.ini2
C:\WINDOWS\system32\utwwwyay.ini
C:\WINDOWS\system32\utwwwyay.ini2
C:\WINDOWS\system32\uxxadcfe.ini
C:\WINDOWS\system32\uxxadcfe.ini2
[b]==> VUNDO <==/b

1 - "C:\ToolBar SD\TB_1.txt" - 01/06/2009|11:23 - Option : [1]
2 - "C:\ToolBar SD\TB_2.txt" - 01/06/2009|11:34 - Option : [2]

-----------\\ Fin du rapport a 11:34:33,32
0
Réponse 12 / 45
V-X

Re,

Télécharge ComboFix (de sUBs) sur ton Bureau.

/!\Désactive temporairement toute protection résidente /!\ (Antivirus, antispywares..)
Double clique sur ComboFix.exe.
Accepte la licence en cliquant sur Oui.
Le programme va te demander si tu souhaites installer la Console de Récupération. C'est une précaution, au cas où l'ordinateur tomberait en panne. Je te conseille donc de l'installer, ça ne coûte rien, et ça pourrait potentiellement servir !
Lorsque l'opération sera terminée, un rapport apparaîtra. Poste ce rapport dans ta prochaine réponse.

Le rapport se trouve ici : %SystemDrive%\ComboFix.txt (%systemdrive% étant la partition où est installée Windows; C:\ en général)

Aide :Comment utiliser ComboFix.

Si un rapport ne passe pas faire une alerte à la conciergerie avec le /!\ jaune.
0
Réponse 13 / 45
kinou6864 Messages postés 72 Statut Membre

re,

désolé mais peux tu me dire comment désactiver Avast et spyware ?
0
Réponse 14 / 45
V-X

Re,

Désinstalle AVG antispyware , il est pas tip top...

pour avast désinstalle le et ensuite fait combofix et installe cette antivirus et poste moi le rapport de combofix , seulement après avoir installer antivir..

▶ Je te conseil de désinstaller AVAST comment le faire proprement

▶ D'installer cet Antivirus:

ANTIVIR

AIDE:
comment bien configurer antivir

Avast et Antivir : comparaisons, et passage à Antivir.

▶ Fait la mise à jour d'antivir .
0
Réponse 15 / 45
kinou6864 Messages postés 72 Statut Membre

Re,

je suis désespérée car je n'arrive pas à exécuter combofix la fenêtre s'ouvre il me dit qu'il vas commencer et mon ordi se bloque à chaque fois que j'ai essayé.
j'ai télécharger+ installer + fais la mise à jour d'anvivir avant de te répondre
vraiment merci beaucoup de ton aide mais je crois qu'il est presque mort non ?
0
Réponse 16 / 45
V-X

Re,

Fait sa avant combofix :

▶ Télécharge et installe MalwareByte's Anti-Malware
Malwarebyte

▶ Mets le à jour

▶ Double clique sur le raccourci de MalwareByte's Anti-Malware qui est sur le bureau.

▶ Sélectionne Exécuter un examen RAPIDE si ce n'est pas déjà fait

▶ clique sur Rechercher

▶ Une fois le scan terminé, une fenêtre s'ouvre, clique sur sur Ok

▶ Si MalwareByte's n'a rien détecté, clique sur Ok Un rapport va apparaître ferme-le.

▶ Si MalwareByte's a détecté des infections, clique sur Afficher les résultats ensuite sur Supprimer la sélection

▶ Enregistre le rapport sur ton Bureau comme cela il sera plus facile à retrouver, poste ensuite ce rapport.

Note : Si MalwareByte's a besoin de redémarrer pour terminer la suppression, accepte en cliquant sur Ok

Tutoriel pour MalwareByte's

Si un rapport ne passe pas faire une alerte à la conciergerie avec le /!\ jaune.
0
1. kinou6864 Messages postés 72 Statut Membre
  
  Re,
  
  j'ai enfin réussi à exécuter malwayre voilà le résultat, je dois redémarrer et j'essai d'exécuter combofix
  Malwarebytes' Anti-Malware 1.37
  Version de la base de données: 2206
  Windows 5.1.2600 Service Pack 3
  
  02/06/2009 18:14:55
  mbam-log-2009-06-02 (18-14-55).txt
  
  Type de recherche: Examen rapide
  Eléments examinés: 99413
  Temps écoulé: 7 minute(s), 17 second(s)
  
  Processus mémoire infecté(s): 0
  Module(s) mémoire infecté(s): 0
  Clé(s) du Registre infectée(s): 16
  Valeur(s) du Registre infectée(s): 2
  Elément(s) de données du Registre infecté(s): 1
  Dossier(s) infecté(s): 1
  Fichier(s) infecté(s): 10
  
  Processus mémoire infecté(s):
  (Aucun élément nuisible détecté)
  
  Module(s) mémoire infecté(s):
  (Aucun élément nuisible détecté)
  
  Clé(s) du Registre infectée(s):
  HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{5e87b2e0-66d7-4256-a14f-10a21af45b2a} (Trojan.Vundo) -> Quarantined and deleted successfully.
  HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{e596df5f-4239-4d40-8367-ebadf0165917} (Rogue.Installer) -> Quarantined and deleted successfully.
  HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1a26f07f-0d60-4835-91cf-1e1766a0ec56} (Trojan.Agent) -> Quarantined and deleted successfully.
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5e87b2e0-66d7-4256-a14f-10a21af45b2a} (Trojan.Vundo) -> Quarantined and deleted successfully.
  HKEY_CURRENT_USER\SOFTWARE\Microsoft\affri (Malware.Trace) -> Quarantined and deleted successfully.
  HKEY_CURRENT_USER\SOFTWARE\Microsoft\affltid (Malware.Trace) -> Quarantined and deleted successfully.
  HKEY_CURRENT_USER\SOFTWARE\Microsoft\rdfa (Trojan.Vundo) -> Quarantined and deleted successfully.
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\affltid (Malware.Trace) -> Quarantined and deleted successfully.
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\affri (Malware.Trace) -> Quarantined and deleted successfully.
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Juan (Malware.Trace) -> Quarantined and deleted successfully.
  HKEY_CURRENT_USER\SOFTWARE\Microsoft\contim (Trojan.Vundo) -> Quarantined and deleted successfully.
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\dslcnnct (Trojan.Vundo) -> Quarantined and deleted successfully.
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IProxyProvider (Trojan.Vundo) -> Quarantined and deleted successfully.
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FCOVM (Trojan.Vundo) -> Quarantined and deleted successfully.
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemoveRP (Trojan.Vundo) -> Quarantined and deleted successfully.
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\aoprndtws (Trojan.Vundo) -> Quarantined and deleted successfully.
  
  Valeur(s) du Registre infectée(s):
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{5e87b2e0-66d7-4256-a14f-10a21af45b2a} (Trojan.Vundo) -> Quarantined and deleted successfully.
  HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\ADP (Rogue.Multiple) -> Quarantined and deleted successfully.
  
  Elément(s) de données du Registre infecté(s):
  HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\ForceActiveDesktopOn (Hijack.Desktop) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
  
  Dossier(s) infecté(s):
  c:\program files\MalwareAlarm (Rogue.Malware.Alarm) -> Quarantined and deleted successfully.
  
  Fichier(s) infecté(s):
  c:\program files\malwarealarm\MalwareAlarm.lic (Rogue.Malware.Alarm) -> Quarantined and deleted successfully.
  c:\program files\malwarealarm\MalwareAlarm1.ma (Rogue.Malware.Alarm) -> Quarantined and deleted successfully.
  c:\program files\malwarealarm\mfc71.dll (Rogue.Malware.Alarm) -> Quarantined and deleted successfully.
  c:\program files\malwarealarm\msvcp71.dll (Rogue.Malware.Alarm) -> Quarantined and deleted successfully.
  c:\program files\malwarealarm\msvcr71.dll (Rogue.Malware.Alarm) -> Quarantined and deleted successfully.
  C:\WINDOWS\cookies.ini (Malware.Trace) -> Quarantined and deleted successfully.
  c:\WINDOWS\pskt.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
  c:\WINDOWS\BM07615967.xml (Trojan.Vundo) -> Quarantined and deleted successfully.
  c:\WINDOWS\BM07615967.txt (Trojan.Vundo) -> Quarantined and deleted successfully.
  c:\WINDOWS\system32\clkcnt.txt (Trojan.Vundo) -> Quarantined and deleted successfully.
  
  0
2. V-X > kinou6864 Messages postés 72 Statut Membre
  
  Re,
  
  Supprime la quarantaune de malwarebyte.
  
  OK , pour combofix.
  
  ++
  
  0
3. kinou6864 Messages postés 72 Statut Membre > V-X
  
  re,
  
  je vais supprimer la quarantaine de malwayre mais j'ai ré-essayé combofix impossible mon ordi plante.
  quand je le rallume il me met un message :
  le système à récupéré d'une erreur sérieuse = rapport : BCCODE : 10000050 / BCP1 : A87D8100 / BCP2 : 00000000 / BCP3 : 8054BBAD / BCP4 : 00000000 / OSVER : 5_1_2600 / SP: 3_0 / Product : 768_1
  C:\DOCUME~1\david_2\LOCALS~1\Temp\WERb817.dir00\Mini060209-01.dmp
  C:\DOCUME~1\david_2\LOCALS~1\Temp\WERb817.dir00\sysdata.xml
  
  c grave docteur ?
  
  0
4. V-X > kinou6864 Messages postés 72 Statut Membre
  
  Re,
  
  Refait moi un log avec RSIT.
  
  0
5. kinou6864 Messages postés 72 Statut Membre > V-X
  
  voila le résultat cette fois ci je n'ai qu'un seul rapport
  Logfile of random's system information tool 1.06 (written by random/random)
  Run by david_2 at 2009-06-02 19:54:20
  Microsoft Windows XP Édition familiale Service Pack 3
  System drive C: has 18 GB (31%) free of 59 GB
  Total RAM: 767 MB (61% free)
  
  Logfile of Trend Micro HijackThis v2.0.2
  Scan saved at 19:54:26, on 02/06/2009
  Platform: Windows XP SP3 (WinNT 5.01.2600)
  MSIE: Internet Explorer v7.00 (7.00.6000.16827)
  Boot mode: Normal
  
  Running processes:
  C:\WINDOWS\System32\smss.exe
  C:\WINDOWS\system32\winlogon.exe
  C:\WINDOWS\system32\services.exe
  C:\WINDOWS\system32\lsass.exe
  C:\WINDOWS\system32\svchost.exe
  C:\WINDOWS\System32\svchost.exe
  C:\WINDOWS\system32\svchost.exe
  C:\WINDOWS\system32\spoolsv.exe
  C:\Program Files\Avira\AntiVir Desktop\sched.exe
  C:\WINDOWS\Explorer.EXE
  C:\Program Files\Avira\AntiVir Desktop\avguard.exe
  C:\WINDOWS\vsnp2std.exe
  C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
  C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
  C:\WINDOWS\System32\svchost.exe
  C:\WINDOWS\system32\ctfmon.exe
  C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
  C:\Documents and Settings\david_2\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
  C:\WINDOWS\system32\nvsvc32.exe
  C:\Program Files\Windows Media Player\WMPNSCFG.exe
  C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
  C:\WINDOWS\system32\slserv.exe
  C:\WINDOWS\system32\svchost.exe
  C:\Documents and Settings\david_2\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
  C:\Documents and Settings\david_2\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
  C:\Documents and Settings\david_2\Mes documents\Downloads\RSIT.exe
  C:\Program Files\trend micro\david_2.exe
  
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
  R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\Orange\SearchURLHook\SearchPageURL.dll
  O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
  O2 - BHO: (no name) - {5b506569-614f-4d5d-9ae4-5c602106ce49} - (no file)
  O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
  O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
  O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
  O2 - BHO: (no name) - {A961FD4C-6F1C-49F3-A456-8C0503812424} - (no file)
  O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
  O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
  O2 - BHO: (no name) - {C08DF07A-3E49-4E25-9AB0-D3882835F153} - (no file)
  O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
  O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
  O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
  O4 - HKLM\..\Run: [snp2std] C:\WINDOWS\vsnp2std.exe
  O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
  O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
  O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
  O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\david_2\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
  O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
  O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
  O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
  O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
  O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
  O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
  O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
  O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
  O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
  O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
  O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
  O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
  O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)
  O15 - Trusted Zone: https://www.orange.fr/portail
  O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
  O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/...
  O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
  O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
  O20 - Winlogon Notify: vtuuvssq - vtuuvssq.dll (file missing)
  O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
  O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
  O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
  O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
  O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
  O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
  O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe
  
  0
Réponse 17 / 45
kinou6864 Messages postés 72 Statut Membre

Re,
je lance malware il me trouve un élément infecté mais il peut pas finir car l'ordi se bloque !!!!!!!!
0
Réponse 18 / 45
V-X

Re,

---> Télécharge OTM (D'OldTimer) sur ton Bureau :

---> Double-clique sur OTMoveIt3.exe afin de le lancer.

---> Copie (Ctrl+C) le texte suivant en gras ci-dessous :

:processes
explorer.exe

:files
C:\WINDOWS\system32\acdgijjl.ini
C:\WINDOWS\system32\acdgijjl.ini2
C:\WINDOWS\system32\noqtwxbc.ini
C:\WINDOWS\system32\noqtwxbc.ini2
C:\WINDOWS\system32\tttttvut.ini
C:\WINDOWS\system32\tttttvut.ini2
C:\WINDOWS\system32\utwwwyay.ini
C:\WINDOWS\system32\utwwwyay.ini2
C:\WINDOWS\system32\uxxadcfe.ini
C:\WINDOWS\system32\uxxadcfe.ini2

:commands
[emptytemp]
[start explorer]

---> Colle (Ctrl+V) le texte précédemment copié dans le cadre Paste Instructions for Items to be Moved.

---> Clique maintenant sur le bouton MoveIt! puis ferme OTMoveIt3.

Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
Accepte en cliquant sur YES.

---> Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\
Le nom du rapport correspond au moment de sa création : date_heure.log
0
1. kinou6864 Messages postés 72 Statut Membre
  
  re,
  désolé mais je n'arrive pas à exécuter OTM mon ordi n'arrete pas de se bloquer et je suis obligé de redémarrer à chaque fois je n'en peut plus tellement il m'énerve !!!!!!!!!
  
  0
Réponse 19 / 45
kinou6864 Messages postés 72 Statut Membre

re,
========== PROCESSES ==========
Process explorer.exe killed successfully.
========== FILES ==========
C:\WINDOWS\system32\acdgijjl.ini moved successfully.
C:\WINDOWS\system32\acdgijjl.ini2 moved successfully.
C:\WINDOWS\system32\noqtwxbc.ini moved successfully.
C:\WINDOWS\system32\noqtwxbc.ini2 moved successfully.
C:\WINDOWS\system32\tttttvut.ini moved successfully.
C:\WINDOWS\system32\tttttvut.ini2 moved successfully.
C:\WINDOWS\system32\utwwwyay.ini moved successfully.
C:\WINDOWS\system32\utwwwyay.ini2 moved successfully.
C:\WINDOWS\system32\uxxadcfe.ini moved successfully.
C:\WINDOWS\system32\uxxadcfe.ini2 moved successfully.
========== COMMANDS ==========
File delete failed. C:\DOCUME~1\david_2\LOCALS~1\Temp\etilqs_kqWQBLr6BMXi435 scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Internet Explorer cache folder emptied.
File delete failed. C:\Documents and Settings\david_2\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
User's Temporary Internet Files folder emptied.
Local Service Temp folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
Local Service Temporary Internet Files folder emptied.
Network Service Temp folder emptied.
Network Service Temporary Internet Files folder emptied.
Windows Temp folder emptied.
Temp folders emptied.
Explorer started successfully

OTM by OldTimer - Version 2.1.0.0 log created on 06012009_154158

Files moved on Reboot...
File C:\DOCUME~1\david_2\LOCALS~1\Temp\etilqs_kqWQBLr6BMXi435 not found!

Registry entries deleted on Reboot...
0
Réponse 20 / 45
V-X

Re,

Si ton pc a redémarrer c bon relance combofix , si non , tu redémarre et relance combofix.

++
0

INFECTE PAR BURIMI.EXE

45 réponses

Discussions similaires

Newsletters