PC infecter ; Rapport Hijackthis

Question

Bonjour,
je suis maintenant sur un autre pc qui est infecter donc voici le rapport Hijackthis 

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:34:18, on 04/09/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16850)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\WINDOWS\system32undll32.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\HP\HP Software Update\HPWuSchd.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\Logitech\QuickCam\Quickcam.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\APPS\SMP\SmpSys.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\DNA\btdna.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Documents and Settings\Utilisateur\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe
C:\WINDOWS\system32\svchost.exe
C:\Documents and Settings\Utilisateur\Application Data\Microsoft\Live Search\Mise-a-jour-LiveSearch.exe
C:\Program Files\AGI\common\win32\PythonService.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\iWin Games\iWinTrusted.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Java\jre1.6.0_05\bin\jucheck.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Documents and Settings\Utilisateur\Bureau\HiJackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\AGI\Python25\pythonw.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: AGSearchHook Class - {0BC6E3FA-78EF-4886-842C-5A1258C4455A} - C:\Program Files\AGI\common\agcutils.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AGSearchHook Class - {0BC6E3FA-78EF-4886-842C-5A1258C4455A} - C:\Program Files\AGI\common\agcutils.dll
O2 - BHO: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Kiwee Toolbar - {6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - C:\Program Files\Kiwee Toolbar\2.8.167\KiweeIEToolbar.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: IEHlprObj Class - {8CA5ED52-F3FB-4414-A105-2E3491156990} - C:\Program Files\iWin Games\iWinGamesHookIE.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: VMN Toolbar - {A057A204-BACC-4D26-8287-79A187E26987} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: GamesBarBHO Class - {CB0D163C-E9F4-4236-9496-0597E24B23A5} - C:\Program Files\GamesBar\oberontb.dll
O2 - BHO: iWin Toolbar - {ce0c2586-da36-452b-acdb-320d9bcb19bf} - C:\Program Files\iWin	biWi1.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL
O3 - Toolbar: VMN Toolbar - {A057A204-BACC-4D26-8287-79A187E26987} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL
O3 - Toolbar: GamesBar - {6F282B65-56BF-4BD1-A8B2-A4449A05863D} - C:\Program Files\GamesBar\oberontb.dll
O3 - Toolbar: Kiwee Toolbar - {6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - C:\Program Files\Kiwee Toolbar\2.8.167\KiweeIEToolbar.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: iWin Toolbar - {ce0c2586-da36-452b-acdb-320d9bcb19bf} - C:\Program Files\iWin	biWi1.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Raccourci vers la page des propriétés de High Definition Audio] HDAShCut.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [DetectorApp] C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [DXDllRegExe] C:\WINDOWS\system32\dxdllreg.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [ppmate] C:\Program Files\PPMate\PPMate\ppmate.exe -autoplay
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [KiweeHook] "C:\Program Files\Kiwee Toolbar\2.9.168\kwtbaim.exe"
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [16328754] C:\Documents and Settings\All Users\Application Data\16328754\16328754.exe
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [SmpcSys] C:\APPS\SMP\SmpSys.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [BitComet] "C:\Program Files\BitComet\BitComet.exe" /tray
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\RunOnce: [Shockwave Updater] C:\WINDOWS\system32\Adobe\SHOCKW~1\SWHELP~1.EXE -Update -1100465 -"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB5; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 1.0.3705; .NET CLR 1.1.4322; .NET CLR 2.0.50727; Media Center PC 4.0; MSN Optimized;FR; MSN Optimized;FR)" -"https://www.gamesload.fr/home.html"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: ikowin32.exe
O4 - Startup: Outil de notification Live Search.lnk = C:\Documents and Settings\Utilisateur\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: (no name) - {1A93C934-025B-4c3a-B38E-9654A7003239} - C:\Program Files\GamesBar\oberontb.dll
O9 - Extra 'Tools' menuitem: GamesBar - {1A93C934-025B-4c3a-B38E-9654A7003239} - C:\Program Files\GamesBar\oberontb.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing)
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.mail.live.com/mail/w1/resources/MSNPUpld.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://www.adobe.com/products/acrobat/nos/gp.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O23 - Service: AG Windows Service (AGWinService) - Unknown owner - C:\Program Files\AGI\common\win32\PythonService.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: iWinTrusted - iWin Inc. - C:\Program Files\iWin Games\iWinTrusted.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: USBDeviceService - Unknown owner - C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe

neo*** · Answer

slt

j'avoue que c'est un beau rapport, chapeau, on commence par ou ?^^

bon :

Télécharge Toolbar-S&D (Team IDN) sur ton Bureau. 

* Lance l'installation du programme en exécutant le fichier téléchargé. 

sous xp : Double-clique 
sous vista : clic doit en tant qu'administrateur 

*maintenant sur le raccourci de Toolbar-S&D. 
* Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée. 
* Tape sur "2" puis valide en appuyant sur "Entrée". 

! Ne ferme pas la fenêtre lors de la suppression ! 

Un rapport sera généré, poste son contenu ici. 


NOTE : Si ton Bureau ne réapparait pas, appuie simultanément sur Ctrl+Alt+Suppr pour ouvrir le Gestionnaire des tâches. 
Rends-toi sur l'onglet "Processus". Clique en haut à gauche sur Fichier et choisis "Exécuter..." 
Tape explorer puis valide. 
 


Ce qu'il faut savoir sur les toolbars (barres d'outils)


ENSUITE 


Télécharge SmitfraudFix (de S!Ri) : 

 Enregistre-le sur le Bureau 

 Double-clique sur SmitfraudFix.exe et choisis l'option 1 puis Entrée 

 Un rapport sera généré, poste-le dans ta prochaine réponse stp. 

Tutoriel illustré

neo*** · Answer

slt electricien

je m'excuse pour l'introsion sur le topic mais message en doublon, une désinfection déjà en cours ici : 

t'as pas a t'excuser et merci ;)

neo*** · Answer

ccm est un forum enorme qui regroupe toutes sortes de personnes ^^ des bons et ...

guz0410 · Answer

désolé pour le double poste mais pour les autres discussions, ce sont des pc differents.

rapport TB 


   -----------\  ToolBar S&D 1.2.9   XP/Vista

   Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
   X86-based PC ( Multiprocessor Free : AMD Turion(tm) 64 X2 Mobile Technology TL-52 )
   BIOS : Insyde Software MobilePRO BIOS Version 4.20.10
   USER : Utilisateur ( Administrator )
   BOOT : Normal boot
   Antivirus : avast! antivirus 4.8.1201 [VPS 080713-0] 4.8.1201 (Not Activated)
   Firewall  : Norton Internet Worm Protection 2006 (Not Activated)
   C:\ (Local Disk) - NTFS - Total:103 Go (Free:64 Go)
   D:\ (CD or DVD)

   "C:\ToolBar SD" ( MAJ : 22-08-2009|18:42 )
   Option : [2] ( 04/09/2009|22:06 )

   -----------\ SUPPRESSION

   Supprime! - C:\Program Files\baidu\bar
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-12-14-18-54-07
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-12-14-18-54-07.xm_
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\about.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\action.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\annas_ice_cream16x16.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\arcade.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\around_the_world_in_80_days16x16.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\buy.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\cards.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\chicken_invaders_3_xmas16x16.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\deals.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\download.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\farm_frenzy_216x16.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\feedback.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\help.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\highlight.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\jigsaw.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\mahjong.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\multiplayer.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\mygames.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\mystery_stories_island_of_hope16x16.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar
ewGames.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\oberonconfig.xm_
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\obSearchHistory.dat
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\onload
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\partner.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\peggle_nights16x16.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\piggly_christmas_edition16x16.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\puzzle.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\search.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\search_yahoo.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\season_match_216x16.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\sendafriend.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\sports.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar	rial.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\uninstall.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\update.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\webgame.gif
   Supprime! - C:\Program Files\GamesBar\Localization-French.ini
   Supprime! - C:\Program Files\GamesBar\Localization2-French.ini
   Supprime! - C:\Program Files\GamesBar\oberontb.dll
   Supprime! - C:\Program Files\GamesBar\OBGet.exe
   Supprime! - C:\Program Files\GamesBar\uninst.exe
   Supprime! - C:\DOCUME~1\ALLUSE~1\MENUDÉ~1\PROGRA~1\GamesBar
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\config
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images
   Supprime! - C:\Program Files\Kiwee Toolbar\2.8.167
   Supprime! - C:\DOCUME~1\ALLUSE~1\MENUDÉ~1\PROGRA~1\Kiwee Toolbar
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\---Yahoo.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\01net.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\1px_dark.gif
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\1px_green.gif
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\1px_white.gif
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\a.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\amazon.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\an.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\arrowB.gif
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\arrowT.gif
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\arrow_down.gif
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\arrow_red.gif
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\arrow_red2.gif
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\arrow_up.gif
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\autofill.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\avstate.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\b.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\background2.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\bgmeteo_results.gif
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\bg_pub.gif
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\bg_ttl.gif
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\bn.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\bottom.png
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\bottom_left.png
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\bottom_right.png
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\btn_close.gif
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\btn_minus.gif
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\btn_moreforecast.gif
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\c.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\canalblog.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\cn.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\COMBOSEARCH.acs
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\d.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\dictionary2.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\dn.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\downfile
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\Download
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\DownloadCOM.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\dropdown.css
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\ErrorLog.txt
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\ErrorPageTemplate.css
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\f.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\flag_argentine.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\flag_australia.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\flag_brazil.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\flag_canada.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\flag_china.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\flag_france.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\flag_germany.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\flag_greece.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\flag_hongkong.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\flag_india.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\flag_indonesia.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\flag_italy.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\flag_japan.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\flag_korea.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\flag_mexico.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\flag_netherlands.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\flag_spain.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\flag_sweeden.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\flag_taiwan.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\flag_uk.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\flag_usa.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\fn.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\g.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\gaming.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\gn.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\gograph.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\graphred0.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\graphred0_5.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\graphred1.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\graphred1_5.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\graphred2.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\graphred2_5.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\graphred3.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\graphred3_5.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\graphred4.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\graphred4_5.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\graphred5.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\h.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\help.gif
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\hideremove.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\highlight.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\hn.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\h_aquarius.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\h_aries.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\h_cancer.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\h_capricorn.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\h_gemini.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\h_leo.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\h_libra.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\h_pisces.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\h_sagittarius.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\h_scorpio.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\h_taurus.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\h_virgo.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\i.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\icotemp_placeholder.gif
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\IEtab1_7d.zip
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\in.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\ipsearch.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\j.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\jn.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\k.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\kn.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\l.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\left.png
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\ln.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\loading.gif
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\login.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\logo.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\Lyon_FR_weather.txt
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\Lyon_FR_weather.txt10188921
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\Lyon_FR_weather.txt11067031
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\Lyon_FR_weather.txt11095015
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\Lyon_FR_weather.txt12856015
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\Lyon_FR_weather.txt12927015
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\Lyon_FR_weather.txt12993000
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\Lyon_FR_weather.txt13355015
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\Lyon_FR_weather.txt13450000
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\Lyon_FR_weather.txt135182015
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\Lyon_FR_weather.txt143849015
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\Lyon_FR_weather.txt145500
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\Lyon_FR_weather.txt14669031
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\Lyon_FR_weather.txt154234
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\Lyon_FR_weather.txt16559015
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\Lyon_FR_weather.txt179796
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\Lyon_FR_weather.txt19672000
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\Lyon_FR_weather.txt206046
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\Lyon_FR_weather.txt20876000
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\Lyon_FR_weather.txt215937
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\Lyon_FR_weather.txt357153515
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\Lyon_FR_weather.txt3735046
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\Lyon_FR_weather.txt37591796
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\Lyon_FR_weather.txt4502000
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\Lyon_FR_weather.txt515726015
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\Lyon_FR_weather.txt5231015
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\Lyon_FR_weather.txt5668453
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\Lyon_FR_weather.txt5760578
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\Lyon_FR_weather.txt6794000
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\Lyon_FR_weather.txt8052000
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\Lyon_FR_weather.txt8852375
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\Lyon_FR_weather.txt9417015
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar
.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\New York_NY_weather.txt
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar
ew02.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\NewCfg
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar
ews.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar
ews.html
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar
n.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\o.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\on.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\p.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\pestscanimg.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\pixsy.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\pn.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\popup_off.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\popup_on.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\popup_ona.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\p_yahoo.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\p_yahoo_fr.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\q.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\qn.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbarelatedlinks.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbareport.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbaright.png
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbarn.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbarss.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbarss.xsl
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbarss1.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbarsslib.js
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbarssmenu1_7a.zip
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\s.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\search.gif
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\search_fr.gif
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\security.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt1000843
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt10319593
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt103440046
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt10448859
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt105790500
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt10590390
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt10757171
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt10858437
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt109814328
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt109987906
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt110026078
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt110028750
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt110043203
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt110046234
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt110048203
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt110048984
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt110051187
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt110053406
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt110055171
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt110055593
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt110061875
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt110067359
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt110069187
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt110069656
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt110076796
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt110089859
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt110098265
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt110122203
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt110126640
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt110162687
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt110165640
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt110167390
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt110172375
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt110174484
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt110179218
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt110180984
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt110183265
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt110185718
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt110187531
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt110188250
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt110194765
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt110196765
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt110198296
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt110202390
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt110204968
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt110208265
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt110209046
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt110214281
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt110221234
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt110227109
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt110228781
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt110230281
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt110230437
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt110232812
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt110234593
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt110239359
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt110241234
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt110281687
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt112872109
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt11639781
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt11936593
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt12072828
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt1271406
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt12867828
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt131248359
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt135703
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt1373421
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt140125
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt14164937
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt148808484
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt15330031
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt15528234
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt15528343
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt15553140
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt157640
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt15790203
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt158671
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt16268109
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt163571062
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt16610796
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt167843
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt17067468
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt1710500
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt17302390
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt17383906
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt1749843
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt17772562
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt17987828
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt181781
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt182001687
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt189000
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt1927968
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt19744531
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt19891187
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt1990593
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt2040031
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt204625
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt2072890
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt20976796
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt2098781
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt210687921
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt210787953
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt211314000
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt211350046
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt211352093
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt211383921
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt211393953
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt211394109
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt211403078
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt211403234
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt211443656
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt211443859
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt211457875
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt211478218
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt211482687
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt211482843
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt211503906
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt211504078
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt211533234
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt211536500
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt211537296
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt211540062
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt211553421
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt211565218
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt213218
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt2151062
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt2164125
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt2168781
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt217781
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt2183140
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt2197140
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt2198078
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt2216046
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt2249609
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt227703
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt22866625
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt22897000
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt2293140
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt2295859
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt2399765
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt2428093
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt2456140
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt246531
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt24913421
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt250890
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt2512937
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt25475687
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt254921
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt262640
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt266785250
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt2677015
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt2697296
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt27084781
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt27155578
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt27304718
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt27340062
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt27375375
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt27378328
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt27430093
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt27498234
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt27500781
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt27541640
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt27558421
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt28398531
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt285656
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt30702531
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt31885453
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt337546
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt34170890
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt352906
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt35600734
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt358484
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt3899890
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt39264406
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt3943968
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt427500
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt444156
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt4449593
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt4470125
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt4470218
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt4542781
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt45934593
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt46104125
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt468063781
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt480421
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt5084796
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt5134515
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt6120921
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt631515
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt6912265
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt7108453
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt7289343
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt7445765
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt7446500
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt8184515
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt8321359
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt846906
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt8517609
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt8535343
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt86217843
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt866734
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt8706140
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt8946265
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt8956281
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt92017062
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt92161546
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt9344640
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sinfo.txt9627515
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\siteinfo.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\slider.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\sn.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\spacer.gif
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\stars-red1.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\stars-red2.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\stars-red3.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\stars-red4.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\stars-red5.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\storage.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar	.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar	abdataV3.js
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar	ablib.js
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar	abwelcome_en.html
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar	abwelcome_fr.html
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar	ab_icon.png
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar	echnorati.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar	hes_search.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\Thumbs.db
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar	n.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar	ools.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar	op.png
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar	op_left.png
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar	op_right.png
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar	ranslate.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\u.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\un.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\utf8.js
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\v.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\vmlib.js
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\vmntoolbartb1501.cfg
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\vn.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\w.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\web.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\web_fr.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\wikipedia.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\wn.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\x.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\xp_close_small.gif
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\yahoo.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\yahoo_search.gif
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\YouTube.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\z.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\zn.bmp
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar\zoom.bmp
   Supprime! - C:\Program Files\VMNToolbar\install.ico
   Supprime! - C:\Program Files\VMNToolbar	buninstall.exe
   Supprime! - C:\Program Files\VMNToolbar	oolbar.ini
   Supprime! - C:\Program Files\VMNToolbar\uninstall.exe
   Supprime! - C:\Program Files\VMNToolbar\vmntoolbar.dll
   Supprime! - C:\Program Files\baidu
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar
   Supprime! - C:\Program Files\GamesBar
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar
   Supprime! - C:\Program Files\Kiwee Toolbar
   Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\VMNToolbar
   Supprime! - C:\Program Files\VMNToolbar

   -----------\  Recherche de Fichiers / Dossiers ...


   -----------\  Extensions

   (Utilisateur) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar
   (Utilisateur) - {800b5000-a755-47e1-992b-48a1c1357f07} => icqtoolbar


   -----------\  [..\Internet Explorer\Main]

   [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
   "Local Page"="C:\WINDOWS\system32\blank.htm"
   "Start Page"="https://www.msn.com/fr-fr/?ocid=iehp"
   "Search Page"="https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC"
   "Default_Page_URL"="https://www.msn.com/fr-fr"

   [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
   "Default_Page_URL"="https://www.msn.com/fr-fr"
   "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Start Page"="https://www.msn.com/fr-fr/"


   --------------------\  Recherche d'autres infections

   --------------------\  Cracks & Keygens ..

   C:\DOCUME~1\UTILIS~1\Mes documents\XP\Windows Xp Home Edition French Crack Keygen.zip
   C:\DOCUME~1\UTILIS~1\Mes documents\XP\Windows Xp Pro Fr (Le Vrai Pas La Corporate) Crack D'activation Keygen Et Serial Image Clone Cd (Cl‚ Valides).txt



   1 - "C:\ToolBar SD\TB_1.txt" - 04/09/2009|22:22 - Option : [2]

   -----------\  Fin du rapport a 22:22:35,14

guz0410 · Answer

SmitFraudFix v2.423

Rapport fait à 22:27:45,59, 04/09/2009
Executé à partir de C:\Documents and Settings\Utilisateur\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode normal

»»»»»»»»»»»»»»»»»»»»»»»» Process

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\WINDOWS\system32undll32.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\HP\HP Software Update\HPWuSchd.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\Logitech\QuickCam\Quickcam.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\APPS\SMP\SmpSys.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\DNA\btdna.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Documents and Settings\Utilisateur\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe
C:\WINDOWS\system32\svchost.exe
C:\Documents and Settings\Utilisateur\Application Data\Microsoft\Live Search\Mise-a-jour-LiveSearch.exe
C:\Program Files\AGI\common\win32\PythonService.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\iWin Games\iWinTrusted.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Java\jre1.6.0_05\bin\jucheck.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Documents and Settings\Utilisateur\Bureau\SmitfraudFix\Policies.exe
C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

»»»»»»»»»»»»»»»»»»»»»»»» hosts


»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Utilisateur


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\UTILIS~1\LOCALS~1\Temp


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Utilisateur\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\UTILIS~1\Favoris


»»»»»»»»»»»»»»»»»»»»»»»» Bureau


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files 


»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues


»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau
 
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Ma page d'accueil"
 

»»»»»»»»»»»»»»»»»»»»»»»» o4Patch
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

o4Patch
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» IEDFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» Agent.OMZ.Fix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

Agent.OMZ.Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» VACFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» 404Fix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="C:\WINDOWS\system32\userinit.exe,"

»»»»»»»»»»»»»»»»»»»»»»»» RK

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""




»»»»»»»»»»»»»»»»»»»»»»»» DNS

Description: RT73 USB Wireless LAN Card - Miniport d'ordonnancement de paquets
DNS Server Search Order: 212.27.40.241
DNS Server Search Order: 212.27.40.240

HKLM\SYSTEM\CCS\Services\Tcpip\..\{B7728BAC-C4BD-4A0F-82CB-DA02A2AC837D}: DhcpNameServer=212.27.40.241 212.27.40.240
HKLM\SYSTEM\CS1\Services\Tcpip\..\{B7728BAC-C4BD-4A0F-82CB-DA02A2AC837D}: DhcpNameServer=212.27.54.252 212.27.53.252
HKLM\SYSTEM\CS2\Services\Tcpip\..\{B7728BAC-C4BD-4A0F-82CB-DA02A2AC837D}: DhcpNameServer=212.27.40.241 212.27.40.240
HKLM\SYSTEM\CS3\Services\Tcpip\..\{B7728BAC-C4BD-4A0F-82CB-DA02A2AC837D}: DhcpNameServer=212.27.40.241 212.27.40.240
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=212.27.40.241 212.27.40.240
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=212.27.54.252 212.27.53.252
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=212.27.40.241 212.27.40.240
HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=212.27.40.241 212.27.40.240


»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin

neo*** · Answer

Pour analyser ton pc plus en profondeur : télécharge Random's System Information Tool (RSIT) (par random/random) sur ton Bureau. 

- Double-clique sur RSIT.exe afin de lancer le programme. 

- Clique sur Continue à l'écran Disclaimer. 

- Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence. 

- Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront. Poste le contenu de log.txt (c'est celui qui apparaît à l'écran) ainsi que de info.txt (que tu verras dans la barre des tâches). 

Note : Les rapports sont sauvegardés dans le dossier C:\rsit.

PC infecter ; Rapport Hijackthis

6 réponses

Votre réponse

Newsletters