Antivirus Système Pro Résolu/Fermé

Question

Bonjour,
Que faire contre ce programme malveillant sachant que je peux télécharger les différents programmes proposés sur votre forum mais que je ne peux les installer?
Je ne peux pas non plus lancer mes différents programmes et accéder à mais mails.
Merci de vos lumières

Utilisateur anonyme · Answer

Bonjour
Les rogues sont de faux logiciels de sécurité, et se cachent derrière des noms
de logiciel de sécurité connus. Ils émettent de fausses alertes de sécurité qui te
poussent à acheter une version payante inéfficace. Evite de cliquer sur des pubs
de logiciels de sécurité que tu ne connais pas, puis évite les téléchargements
de fichiers par les logiciels P2P qui sont un danger pour le PC

Tu vas faire ceci en mode sans échec
Tu vas d'abord télécharger le logiciel suivant
Télécharge malwarebytes' anti-malware
https://www.commentcamarche.net/telecharger/securite/14361-malwarebytes-anti-malware/
Enregistre le sur le bureau
Double-clique sur l'icône Download_mbam-setup.exe pour lancer le processus d'installation
Si la pare-feu demande l'autorisation de se connecter pour malwarebytes, accepte
Il va se mettre à jour une fois faite
Va dans l'onglet recherche
Sélectionne exécuter un examen complet
Clique sur rechercher
Le scan démarre
A la fin de l'analyse, le message s'affiche: L'examen s'est terminé normalement.
Clique sur afficher les résultats pour afficher les objets trouvés
Clique sur OK pour pousuivre
Si des malwares ont été détectés, cliquer sur afficher les résultats
Sélectionne tout (ou laisser coché)
Clique sur supprimer la sélection
Malwarebytes va détruire les fichiers et les clés de registre et en mettre une
copie dans la quarantaine
Malewarebytes va ouvrir le bloc-note et y copier le rapport
Redémarre le PC
Une fois redémarré, double-clique sur Malewarebytes
Va dans l'onglet rapport/log
Clique dessus pour l'afficher une fois affiché, cliquer sur édition en haut du
bloc-note puis sur sélectionner tout
Revient sur édition, puis sur copier et revient sur le forum et dans ta réponse
Clic droit dans le cadre de la réponse et coller

redémarre ton PC en mode sans échec, et fait un scan complet

Utilisateur anonyme · Answer

Télécharge Rkill sur ton bureau
http://download.bleepingcomputer.com/grinler/rkill.pif
Double clic pour le lancer.
Une fenêtre (très rapide) indiquera que tout s'est bien déroulé.

Relance ensuite Malwarebytes

Utilisateur anonyme · Answer

essaye ces liens les uns après les autres

https://download.bleepingcomputer.com/grinler/rkill.scr
https://download.bleepingcomputer.com/grinler/rkill.com
https://download.bleepingcomputer.com/grinler/rkill.exe

Si rien ne se passe, ou si l'outil ne se lance pas, télécharger l'outil depuis un autre des 3 liens ci-dessus et faire une nouvelle tentative d'exécution

Utilisateur anonyme · Answer

y'a quelqu'un ?

Utilisateur anonyme · Answer

Télécharge Dr Web CureIt sur ton Bureau :

ftp://ftp.drweb.com/pub/drweb/cureit/drweb-cureit.exe

- Double clique drweb-cureit.exe et ensuite clique sur Analyse;

- Clique Ok à l'invite de l'analyse rapide. S'il trouve des processus infectés alors clique le bouton Oui.
Note : une fenêtre s'ouvrira avec options pour "Commander" ou "50% de réduction" : Quitte en cliquant le "X".
- Lorsque le scan rapide est terminé, clique sur le menu Options puis Changer la configuration ; Choisis l'onglet Scanner, et décoche Analyse heuristique. Clique ensuite sur Ok.
- De retour à la fenêtre principale : clique pour activer Analyse complète
- Clique le bouton avec flèche verte sur la droite, et le scan débutera.
- Clique Oui pour tout à l'invite Désinfecter ? lorsqu'un fichier est détecté, et ensuite clique Désinfecter.
- Lorsque le scan sera complété, regarde si tu peux cliquer sur l' icône, adjacente aux fichiers détectés (plusieurs feuilles l'une sur l'autre). Si oui, alors clique dessus et ensuite clique sur l'icône Suivant, au dessous, et choisis Déplacer en quarantaine l'objet indésirable.
- Du menu principal de l'outil, au haut à gauche, clique sur le menu Fichier et choisis Enregistrer le rapport. Sauvegarde le rapport sur ton Bureau. Ce dernier se nommera DrWeb.csv
- Ferme Dr.Web Cureit
- Redémarre ton ordi (important car certains fichiers peuvent être déplacés/réparés au redémarrage).
- Suite au redémarrage, poste (Copie/Colle) le contenu du rapport de Dr.Web dans ta prochaine réponse.

Utilisateur anonyme · Answer

http://download.bleepingcomputer.com/sUBs/ComboFix.exe
essaye ce lien, et si cela ne marche pas on va essayer autre chose

anthony5151 · Answer

Bonsoir à vous deux,


Pour aider

Nathandre :
Le lien est cassé, il y a des tirets au milieu du mot Firefox (copie le lien dans un traitement de texte, et tu les verras).

Engrev50 :
Tu peux utiliser celui-ci : http://sd-1.archive-host.com/membres/up/7739387536519291/Firefox.exe
N'oublie pas d'utiliser rkill juste avant.


Je vous laisse continuer ;)

Utilisateur anonyme · Answer

bonjour
essaye d'héberger les rapport sur le site d'hébergement ci-joint.com

engrev50 · Answer

Voilà le fichier log de combofix:
ComboFix 09-11-24.04 - JP 25/11/2009  9:09.1.1 - FAT32x86
Microsoft Windows XP Édition familiale  5.1.2600.3.1252.33.1036.18.1023.271 [GMT 1:00]
Lancé depuis: c:\documents and settings\JP\Bureau\Firefox.exe
AV: AntiVir Desktop *On-access scanning disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}
AV: Spyware Doctor with AntiVirus *On-access scanning disabled* (Outdated) {D3C23B96-C9DC-477F-8EF1-69AF17A6EFF6}
.

((((((((((((((((((((((((((((((((((((   Autres suppressions   ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\JP\Local Settings\Application Data\bkuuri
c:\documents and settings\JP\Local Settings\Application Data\bkuuri\uxsmsysguard.exe
c:\documents and settings\JP\Local Settings\Application Data\uvxssc
c:\documents and settings\JP\Local Settings\Application Data\uvxssc\uvgisysguard.exe
c:\documents and settings\JP\Local Settings\Application Data\vodkeq
c:\documents and settings\JP\Local Settings\Application Data\vodkeq\uqwjsysguard.exe
C:\Thumbs.db
c:\windows\system32\clrviddc.dll
c:\windows\system32naph.dll

.
(((((((((((((((((((((((((((((   Fichiers créés du 2009-10-25 au 2009-11-25  ))))))))))))))))))))))))))))))))))))
.

2009-11-24 16:30 . 2009-11-24 16:30	--------	d-----w-	c:\program files	rend micro
2009-11-24 16:29 . 2009-11-24 16:29	--------	d-----w-	C:sit
2009-11-24 14:56 . 2009-11-24 14:56	--------	d-----w-	C:\GenProc
2009-11-24 14:27 . 2009-09-24 07:55	229304	----a-w-	c:\windows\system32\drivers\pctgntdi.sys
2009-11-24 14:27 . 2009-10-06 15:31	87784	----a-w-	c:\windows\system32\drivers\PCTAppEvent.sys
2009-11-24 14:27 . 2009-09-23 15:10	207280	----a-w-	c:\windows\system32\drivers\PCTCore.sys
2009-11-24 14:27 . 2009-09-03 08:45	70408	----a-w-	c:\windows\system32\drivers\pctplsg.sys
2009-11-24 14:27 . 2009-11-24 14:27	--------	d-----w-	c:\program files\Fichiers communs\PC Tools
2009-11-24 14:27 . 2009-11-24 14:27	--------	d-----w-	c:\program files\Spyware Doctor
2009-11-24 14:27 . 2009-11-24 14:27	--------	d-----w-	c:\documents and settings\JP\Application Data\PC Tools
2009-11-24 14:27 . 2009-11-24 14:27	--------	d-----w-	c:\documents and settings\All Users\Application Data\PC Tools
2009-11-24 14:26 . 2009-11-24 14:26	--------	d-----w-	c:\documents and settings\All Users\Application Data\TEMP
2009-11-24 13:44 . 2009-11-24 13:44	--------	d-----w-	c:\documents and settings\JP\Application Data\Malwarebytes
2009-11-24 13:42 . 2009-09-10 13:54	38224	----a-w-	c:\windows\system32\drivers\mbamswissarmy.sys
2009-11-24 13:42 . 2009-11-24 13:42	--------	d-----w-	c:\documents and settings\All Users\Application Data\Malwarebytes
2009-11-24 13:42 . 2009-09-10 13:53	19160	----a-w-	c:\windows\system32\drivers\mbam.sys
2009-11-24 13:42 . 2009-11-24 13:42	--------	d-----w-	c:\program files\Malwarebytes' Anti-Malware
2009-11-24 13:33 . 2009-11-24 13:33	--------	d-----w-	c:\program files\ESET
2009-11-24 12:29 . 2009-11-24 12:29	--------	d-----w-	c:\documents and settings\JP\.housecall6.6
2009-11-14 07:43 . 2009-11-14 07:43	--------	d-----w-	C:\Facture Internet Orange
2009-11-10 08:03 . 2009-11-10 08:03	93360	----a-w-	c:\windows\system32\drivers\SBREDrv.sys
2009-11-10 08:03 . 2009-11-10 08:03	93360	----a-w-	c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\update\Drivers\SBREDrv.sys
2009-11-10 08:03 . 2009-11-10 08:03	554280	----a-w-	c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\update\sbap.dll
2009-11-10 08:03 . 2009-11-20 08:03	537576	----a-w-	c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\update\aawapi.dll
2009-11-10 08:03 . 2009-11-10 08:03	212480	----a-w-	c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\update\VipreBridge.dll
2009-11-10 08:03 . 2009-11-10 08:03	283944	----a-w-	c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\update\Vipre.dll
2009-11-10 08:03 . 2009-11-10 08:03	1223976	----a-w-	c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\update\SBTE.dll
2009-11-10 08:03 . 2009-11-10 08:03	242984	----a-w-	c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\update\SBRE.dll
2009-11-10 08:02 . 2009-11-10 08:02	--------	d--h--w-	c:\documents and settings\All Users\Application Data\{CFBD8779-FAAB-4357-84F2-1EC8619FADA6}
2009-11-10 08:02 . 2009-10-03 08:15	2924848	----a-w-	c:\documents and settings\All Users\Application Data\{CFBD8779-FAAB-4357-84F2-1EC8619FADA6}\Ad-AwareInstallation.exe
2009-11-01 14:58 . 2009-11-01 14:58	--------	d-----w-	c:\documents and settings\JP\Application Data\Audacity
2009-10-31 19:22 . 2009-10-31 19:22	--------	d-----w-	c:\documents and settings\JP\Local Settings\Application Data\Temp

.
((((((((((((((((((((((((((((((((((   Compte-rendu de Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-11-22 15:45 . 2004-09-20 16:49	546138	----a-w-	c:\windows\system32\perfh00C.dat
2009-11-22 15:45 . 2004-09-20 16:49	100674	----a-w-	c:\windows\system32\perfc00C.dat
2009-11-10 08:03 . 2009-05-26 19:00	15880	----a-w-	c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\update\lsdelete.exe
2009-11-10 08:03 . 2009-02-17 19:30	15880	----a-w-	c:\windows\system32\lsdelete.exe
2009-11-10 08:03 . 2009-06-29 19:00	5908024	----a-w-	c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\update\Resources.dll
2009-10-16 08:35 . 2009-10-16 08:35	--------	d-----w-	c:\program files\POST-NET
2009-10-11 19:46 . 2008-12-27 19:15	63944	----a-w-	c:\documents and settings\LocalService\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-10-08 06:37 . 2009-10-08 06:37	--------	d-----w-	c:\program files\Hugin
2009-10-07 15:57 . 2009-10-07 15:57	--------	d-----w-	c:\program files\skycorp
2009-10-07 07:16 . 2006-06-03 12:13	63944	----a-w-	c:\documents and settings\JP\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-10-05 08:21 . 2009-10-05 08:21	--------	d-----w-	c:\program files\Canal+(2)
2009-09-28 19:00 . 2009-09-28 19:00	17632	----a-w-	c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\update\WSCUpdate.dll
2009-09-28 19:00 . 2009-03-03 19:06	68640	----a-w-	c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\update\Drivers\64\lbd.sys
2009-09-28 19:00 . 2009-03-03 19:06	303976	----a-w-	c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\update\Drivers\64\AAWDriverTool.exe
2009-09-28 19:00 . 2009-06-29 19:00	640760	----a-w-	c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\update\AAWWSC.exe
2009-09-23 12:55 . 2009-02-17 19:00	64288	----a-w-	c:\windows\system32\drivers\Lbd.sys
2009-09-11 15:18 . 2004-09-20 16:48	136192	----a-w-	c:\windows\system32\msv1_0.dll
2009-09-04 22:04 . 2004-09-20 16:48	58880	----a-w-	c:\windows\system32\msasn1.dll
2009-08-29 08:56 . 2004-09-20 16:49	916480	----a-w-	c:\windows\system32\wininet.dll
2006-06-18 08:55 . 2006-06-18 08:44	278528	----a-w-	c:\program files\Fichiers communs\FDEUnInstaller.exe
2006-02-24 17:42 . 2006-02-24 17:42	2352887	----a-w-	c:\program files\openofficeorg4.cab
2006-02-24 17:41 . 2006-02-24 17:41	53468865	----a-w-	c:\program files\openofficeorg3.cab
2006-02-24 17:36 . 2006-02-24 17:36	14865630	----a-w-	c:\program files\openofficeorg2.cab
2006-02-24 17:35 . 2006-02-24 17:35	18596564	----a-w-	c:\program files\openofficeorg1.cab
2006-02-24 17:33 . 2006-02-24 17:33	217	----a-w-	c:\program files\setup.ini
2006-02-24 17:33 . 2006-02-24 17:33	5228032	----a-w-	c:\program files\openofficeorg20.msi
2002-03-11 10:06 . 2002-03-11 10:06	1822520	----a-w-	c:\program files\instmsiw.exe
2002-03-11 09:45 . 2002-03-11 09:45	1708856	----a-w-	c:\program files\instmsia.exe
.

(((((((((((((((((((((((((((((((((   Points de chargement Reg   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés 
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A057A204-BACC-4D26-8287-79A187E26987}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2009-03-27 24103720]
"FreeRAM XP"="c:\program files\YourWare Solutions\FreeRAM XP Pro\FreeRAM XP Pro.exe" [2006-03-22 1591808]
"Clavier+"="c:\documents and settings\JP\Local Settings\Application Data\Clavier+\Clavier.exe" [2007-10-21 88576]
"Glary Memory Optimizer"="c:\program files\Glary Utilities\memdefrag.exe" [2009-06-30 102912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2005-09-23 7286784]
"IntelZeroConfig"="c:\program files\Intel\Wireless\bin\ZCfgSvc.exe" [2005-05-31 401408]
"IntelWireless"="c:\program files\Intel\Wireless\Bin\ifrmewrk.exe" [2005-06-03 385024]
"EOUApp"="c:\program files\Intel\Wireless\Bin\EOUWiz.exe" [2005-05-31 356352]
"Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2009-09-10 1312080]

c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Enable Labtec NumPad.lnk - c:\program files\Labtec NumPad\Magickey.exe [2006-9-6 110592]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoSMMyPictures"= 0 (0x0)
"NoStartMenuMyMusic"= 0 (0x0)
"NoRecentDocsNetHood"= 0 (0x0)
"NoSimpleStartMenu"= 0 (0x0)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoSMMyPictures"= 0 (0x0)
"NoStartMenuMyMusic"= 0 (0x0)
"NoRecentDocsNetHood"= 0 (0x0)
"NoSMBalloonTip"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
otify\IntelWireless]
2005-05-31 21:46	110592	----a-w-	c:\program files\Intel\Wireless\Bin\LgNotify.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^AutoStart IR.lnk]
backup=c:\windows\pss\AutoStart IR.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversionun-disabled]
"NeroFilterCheck"=c:\windows\system32\NeroCheck.exe
"NvCplDaemon"=RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
"Ad-Watch"=c:\program files\Lavasoft\Ad-Aware\AAWTray.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe"=
"c:\Program Files\ASUS\ASUS Live Update\LiveUpdt.exe"=
"c:\WINDOWS\System32\mmc.exe"=
"c:\WINDOWS\System32\dpvsetup.exe"=
"c:\WINDOWS\System32\SPOOL\DRIVERS\W32X86\3\SAGENT4.EXE"=
"%windir%\Network Diagnostic\xpnetdiag.exe"=
"c:\Program Files\Mozilla Firefox\firefox.exe"=
"c:\Program Files\Orange\Connectivity\ConnectivityManager.exe"=
"c:\Program Files\Messenger\msmsgs.exe"=
"c:\Program Files\Windows Live\Messenger\wlcsdk.exe"=
"c:\Program Files\Windows Live\Messenger\msnmsgr.exe"=
"c:\Program Files\WinTV\WinTV7\WinTV7.exe"=
"c:\Program Files\Skype\Phone\Skype.exe"=

R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [17/02/2009 20:00 64288]
R0 PCTCore;PCTools KDS;c:\windows\system32\drivers\PCTCore.sys [24/11/2009 15:27 207280]
R0 R592;R592;c:\windows\system32\drivers\R592.sys [15/10/2004 19:26 57088]
R0 risdpntk;risdpntk;c:\windows\system32\driversisdpntk.sys [15/10/2004 19:26 27264]
R1 UsbFltr;WayTechMUSBFilterDriver;c:\windows\system32\drivers\UsbFltr.sys [06/09/2006 22:29 8960]
R2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [09/07/2009 21:39 108289]
R2 HauppaugeTVServer;HauppaugeTVServer;c:\progra~1\WINTV\TVSERVER\HAUPPA~1.EXE [17/10/2009 11:43 434176]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [24/09/2009 12:17 1184912]
R3 hcw95bda;Hauppauge MOD7700 Tuner Driver;c:\windows\system32\drivers\hcw95bda.sys [09/10/2009 19:30 573440]
R3 hcw95rc;Hauppauge MOD7700 IR Driver;c:\windows\system32\drivers\hcw95rc.sys [09/10/2009 19:30 15616]
R3 SynMini;USB2.0 1.3M Web Cam;c:\windows\system32\drivers\SynMini.sys [26/04/2006 18:57 720438]
R3 SynScan;USB2.0 1.3M Web Cam Still Image;c:\windows\system32\drivers\SynScan.sys [26/04/2006 18:57 8246]
S?4 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [24/11/2009 14:42 38224]
S2 gupdate1c988309b343a0e;Google Update Service (gupdate1c988309b343a0e);c:\program files\Google\Update\GoogleUpdate.exe [06/02/2009 08:57 133104]
S3 3xHybrid;3xHybrid service;c:\windows\system32\drivers\3xHybrid.sys [04/12/2007 19:34 946816]
S3 Asushwio;Asushwio;c:\windows\system32\drivers\ASUSHWIO.SYS [07/06/2006 08:07 5824]
S3 SIS163u;SiS163 USB Wireless LAN Adapter Driver;c:\windows\system32\drivers\sis163u.sys [02/11/2005 12:53 215552]

--- Autres Services/Pilotes en mémoire ---

*NewlyCreated* - MBAMSWISSARMY
.
Contenu du dossier 'Tâches planifiées'

2009-11-25 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-10-01 08:03]

2009-11-16 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 16:57]

2009-11-25 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-02-06 07:57]

2009-11-25 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-02-06 07:57]

2009-11-25 c:\windows\Tasks\GlaryInitialize.job
- c:\program files\Glary Utilities\initialize.exe [2008-04-05 15:55]
.
.
------- Examen supplémentaire -------
.
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
Trusted Zone: virtual-ocean-races.com\www
FF - ProfilePath - c:\documents and settings\JP\Application Data\Mozilla\Firefox\Profiles\9c4k7za9.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxps://www.google.com/accounts/ServiceLogin?service=cl&passive=true&nui=1&continue=http%3A%2F%2Fwww.google.com%2Fcalendar%2Frender%3Fgsessionid%3DqyFaw6WBxPAMo_uOOnbXqQ&followup=http%3A%2F%2Fwww.google.com%2Fcalendar%2Frender%3Fgsessionid%3DqyFaw6WBxPAMo_uOOnbXqQ
FF - prefs.js: keyword.URL - hxxp://toolbar.ask.com/toolbarv/askRedirect?o=10168&gct=&gc=1&q=
FF - plugin: c:\program files\Fichiers communs\fluxDVD\APIX\NPAPIX.dll
FF - plugin: c:\program files\Fichiers communs\fluxDVD\BrowserIntegration\NPFluxBrowserHelper.dll
FF - plugin: c:\program files\Fichiers communs\mpDRM\NPMPDRM.dll
FF - plugin: c:\program files\Google\Update\1.2.183.13
pGoogleOneClick8.dll
FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJava11.dll
FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJava12.dll
FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJava13.dll
FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJava14.dll
FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJava32.dll
FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJPI150_06.dll
FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPOJI610.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins
p-mswmp.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\NPAPIX.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\NPFluxBrowserHelper.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\NPMPDRM.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins
pqtplugin8.dll
FF - plugin: c:\program files\Picasa2
pPicasa2.dll
FF - plugin: c:\program files\Picasa2
pPicasa3.dll
FF - plugin: c:\program files\QuickTime\Plugins
pqtplugin8.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- PARAMETRES FIREFOX ----
FF - user.js: yahoo.homepage.dontask - truec:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);
.
- - - - ORPHELINS SUPPRIMES - - - -

BHO-{3853D4C7-C758-8E80-3BA7-F7B2C26AF385} - (no file)
BHO-{3C628C5D-27B7-DD0D-6ECE-50B37F025910} - (no file)
HKCU-Run-lsudqrgm - c:\documents and settings\JP\Local Settings\Application Data\vodkeq\uqwjsysguard.exe
HKCU-Run-ksnqkkyl - c:\documents and settings\JP\Local Settings\Application Data\bkuuri\uxsmsysguard.exe
HKCU-Run-jtqsnttf - c:\documents and settings\JP\Local Settings\Application Data\uvxssc\uvgisysguard.exe
HKLM-Run-lsudqrgm - c:\documents and settings\JP\Local Settings\Application Data\vodkeq\uqwjsysguard.exe
HKLM-Run-ksnqkkyl - c:\documents and settings\JP\Local Settings\Application Data\bkuuri\uxsmsysguard.exe
HKLM-Run-jtqsnttf - c:\documents and settings\JP\Local Settings\Application Data\uvxssc\uvgisysguard.exe
AddRemove-Ad-Aware - c:\documents and settings\All Users\Application Data\{CFBD8779-FAAB-4357-84F2-1EC8619FADA6}\Ad-AwareInstallation.exe REMOVE=TRUE MODIFY=FALSE
AddRemove-HijackThis - c:\documents and settings\JP\Bureau\HijackThis.exe
AddRemove-NVIDIA Drivers - c:\windows\system32
vudisp.exe UninstallGUI
AddRemove-RealJukebox 1.0 - c:\program files\Fichiers communs\Real\Update_OB1puninst.exe RealNetworks|RealPlayer|6.0
AddRemove-RealPlayer 6.0 - c:\program files\Fichiers communs\Real\Update_OB1puninst.exe RealNetworks|RealPlayer|6.0
AddRemove-SiS163u - c:\windows\system32\unwlsdrv.exe SiS163u
AddRemove-Tweak UI 2.10 - c:\windows\system32\mshta.exe res://c:\windows\system32\TweakUI.exe/uninstall.hta



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-11-25 09:15
Windows 5.1.2600 Service Pack 3 FAT NTAPI

Recherche de processus cachés ... 

Recherche d'éléments en démarrage automatique cachés ... 

Recherche de fichiers cachés ... 

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'winlogon.exe'(1288)
c:\program files\Intel\Wireless\Bin\LgNotify.dll
.
Heure de fin: 2009-11-25 09:17
ComboFix-quarantined-files.txt  2009-11-25 08:17

Avant-CF: 7 029 719 040 octets libres
Après-CF: 7 073 464 320 octets libres

WindowsXP-KB310994-SP2-Home-BootDisk-FRA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP dition familiale" /noexecute=optin /fastdetect

- - End Of File - - DC466BE4649E4B1C4633D1D641F01E0C

Mon problème est résolu et je ne sais quoi penser de ce rapport!
Merci et bonne journée

engrev50 · Answer

RSIT me donne un fichier que je peux t'envoyer si tu le souhaites.
Qu'entends tu par nettoyer le PC?

engrev50 · Answer

Voilà le rapport RSIT de ce matin/ 

Logfile of random's system information tool 1.06 (written by random/random)
Run by JP at 2009-11-27 06:54:58
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 7 GB (15%) free of 45 GB
Total RAM: 1023 MB (32% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 06:55:09, on 27/11/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\ATKKBService.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\PROGRA~1\WINTV\TVSERVER\HAUPPA~1.EXE
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\WINDOWS\system32
vsvc32.exe
C:\Program Files\Intel\Wireless\Bin\OProtSvc.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe
C:\Program Files\Glary Utilities\Integrator.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe
C:\Program Files\YourWare Solutions\FreeRAM XP Pro\FreeRAM XP Pro.exe
C:\Documents and Settings\JP\Local Settings\Application Data\Clavier+\Clavier.exe
C:\Program Files\Glary Utilities\memdefrag.exe
C:\Program Files\Labtec NumPad\Magickey.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FARNBVE.EXE
C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\SAGENT4.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FAMTBVE.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FAMTBVE.EXE
C:\Program Files\Mozilla Thunderbird	hunderbird.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\JP\Bureau\RSIT.exe
C:\Program Files	rend micro\JP.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\Orange\SearchURLHook\SearchPageURL.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Download Manager Browser Helper Object - {19C8E43B-07B3-49CB-BFFC-6777B593E6F8} - C:\PROGRA~1\FICHIE~1\fluxDVD\DOWNLO~1\XEBDLH~1.DLL
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: VMN Toolbar - {A057A204-BACC-4D26-8287-79A187E26987} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL
O3 - Toolbar: VMN Toolbar - {A057A204-BACC-4D26-8287-79A187E26987} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [IntelZeroConfig] C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
O4 - HKLM\..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [EOUApp] C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [FreeRAM XP] "C:\Program Files\YourWare Solutions\FreeRAM XP Pro\FreeRAM XP Pro.exe" -win
O4 - HKCU\..\Run: [Clavier+] C:\Documents and Settings\JP\Local Settings\Application Data\Clavier+\Clavier.exe
O4 - HKCU\..\Run: [Glary Memory Optimizer] "C:\Program Files\Glary Utilities\memdefrag.exe" /autostart
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Enable Labtec NumPad.lnk = C:\Program Files\Labtec NumPad\Magickey.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O14 - IERESET.INF: START_PAGE_URL=https://www.asus.com/fr/
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Google Update Service (gupdate1c988309b343a0e) (gupdate1c988309b343a0e) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HauppaugeTVServer - Hauppauge Computer Works - C:\PROGRA~1\WINTV\TVSERVER\HAUPPA~1.EXE
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: OwnershipProtocol - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\OProtSvc.exe
O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation  - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: spmgr - Unknown owner - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe

engrev50 · Answer

Bonjour Nathandre,
Voilà les deux rapports demandés.
Le premier:
   -----------\  ToolBar S&D 1.2.9   XP/Vista

   Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
   X86-based PC ( Uniprocessor Free :         Intel(R) Pentium(R) M processor 1.73GHz )
   BIOS : Default System BIOS
   USER : JP ( Administrator )
   BOOT : Normal boot
   Antivirus : AntiVir Desktop 9.0.1.32 (Activated)
   C:\ (Local Disk) - FAT32 - Total:43 Go (Free:6 Go)
   D:\ (Local Disk) - FAT32 - Total:29 Go (Free:5 Go)
   E:\ (CD or DVD)
   F:\ (USB)
   G:\ (USB)

   "C:\ToolBar SD" ( MAJ : 22-08-2009|18:42 )
   Option : [1] ( 28/11/2009|11:28 )

   -----------\  Recherche de Fichiers / Dossiers ...

   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\CAlogo.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\DownloadCOM.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\ErrorPageTemplate.css
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\ErrorPageTemplate_search.css
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\Thumbs.db
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\YouTube.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\__slider.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\a.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\amazon.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\an.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\arrow.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\arrowB.gif
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\arrowT.gif
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\arrow_down.gif
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\arrow_up.gif
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\autofill.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\b.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\bg_pub.gif
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\bg_ttl.gif
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\bn.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\bottom.png
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\bottom_left.png
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\bottom_right.png
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\c.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\canalblog.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\cn.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\d.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\dictionary2.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\dn.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\dropdown.css
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\email_b.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\equalizer_loading.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\equalizer_off.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\equalizer_on.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\f.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\fn.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\g.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\gaming.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\gn.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\graphred0.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\graphred0_5.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\graphred1.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\graphred1_5.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\graphred2.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\graphred2_5.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\graphred3.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\graphred3_5.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\graphred4.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\graphred4_5.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\graphred5.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\h.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\h_aquarius.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\h_aries.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\h_cancer.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\h_capricorn.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\h_gemini.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\h_leo.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\h_libra.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\h_pisces.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\h_sagittarius.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\h_scorpio.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\h_taurus.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\h_virgo.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\help.gif
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\hideremove.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\highlight.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\hn.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\i.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\images01.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\in.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\j.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\jn.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\k.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\kn.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\l.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\left.png
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\ln.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\loading.gif
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\logo.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\logo_facebook.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\minus.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\minus_on.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\music2.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar
.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar
ews.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar
ews.html
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar
ewsb.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar
n.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\o.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\on.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\p.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\p_yahoo.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\p_yahoo_fr.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\pixsy.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\play.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\play_on.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\plus.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\plus_on.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\pn.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\popup_off.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\popup_on.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\popup_ona.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\q.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\qn.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbarelatedlinks.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbareport.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbaright.png
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbarn.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbarss.xsl
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbarss1.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbarsslib.js
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\s.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\search.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\search.gif
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\search_fr.gif
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\settings.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\siteinfo.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\slider.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\sn.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\spacer.gif
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\stars-red1.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\stars-red2.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\stars-red3.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\stars-red4.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\stars-red5.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\stop.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\stop_on.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar	.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar	ab_icon.png
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar	abdataV3.js
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar	abwelcome_en.html
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar	abwelcome_fr.html
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar	echnorati.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar	n.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar	ools.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar	op.png
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar	op_left.png
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar	op_right.png
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar	ranslate.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\u.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\un.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\utf8.js
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\v.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\vmlib.js
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\vn.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\w.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\web_fr.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\wikipedia.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\wn.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\x.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\xp_close_small.gif
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\yahoo_search.gif
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\z.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\zn.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\zoom.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\sinfo.txt
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\web_en.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\vmntoolbartb1501.cfg
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\New York_NY_weather.txt
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\shop2.bmp
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\ErrorLog.txt
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbarssmenu1_7a.zip
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\New York_NY_weather.txt1675421609
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\New York_NY_weather.txt1709064765
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\New York_NY_weather.txt1709488078
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\hororank.xml
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\IEtab1_8.zip
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\Download
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\Paris_FR_weather.txt
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\COMBOSEARCH.acs
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\New York_NY_weather.txt415127031
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\sinfo.txt85937140
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\vmntoolbartb0501.cfg
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\sinfo.txt86844375
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\sinfo.txt69448968
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\sinfo.txt365299875
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\userbadsites.txt
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\NewCfg
   C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\Download\games.html
   C:\Program Files\VMNToolbar
   C:\Program Files\VMNToolbar	buninstall.exe
   C:\Program Files\VMNToolbar	oolbar.ini
   C:\Program Files\VMNToolbar\install.ico
   C:\Program Files\VMNToolbar\uninstall.exe
   C:\Program Files\VMNToolbar\vmntoolbar.dll
   C:\WINDOWS\iun6002.exe

   -----------\  Extensions

   (JP) - {b055c535-4a3a-11db-9659-00e08161165f} => mediadicotoolbar
   (JP) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar
   (JP) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar
   (JP) - {20a82645-c095-46ed-80e3-08825760534b} => chrome_user
   (JP) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar


   -----------\  [..\Internet Explorer\Main]

   [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
   "Start Page"="https://www.msn.com/fr-fr/?ocid=iehp"
   "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
   "SearchMigratedDefaultURL"="https://www.google.com/webhp?gws_rd=ssl{searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"
   "Local Page"="C:\WINDOWS\system32\blank.htm"

   [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
   "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
   "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Start Page"="https://www.msn.com/fr-fr/?ocid=iehp"
   "Local Page"="C:\WINDOWS\system32\blank.htm"


   --------------------\  Recherche d'autres infections


   Aucune autre infection trouvée  !


   1 - "C:\ToolBar SD\TB_1.txt" - 28/11/2009|11:29 - Option : [1]

   -----------\  Fin du rapport a 11:29:21,92

Le second:
   -----------\  ToolBar S&D 1.2.9   XP/Vista

   Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
   X86-based PC ( Uniprocessor Free :         Intel(R) Pentium(R) M processor 1.73GHz )
   BIOS : Default System BIOS
   USER : JP ( Administrator )
   BOOT : Normal boot
   Antivirus : AntiVir Desktop 9.0.1.32 (Activated)
   C:\ (Local Disk) - FAT32 - Total:43 Go (Free:6 Go)
   D:\ (Local Disk) - FAT32 - Total:29 Go (Free:5 Go)
   E:\ (CD or DVD)
   F:\ (USB)
   G:\ (USB)

   "C:\ToolBar SD" ( MAJ : 22-08-2009|18:42 )
   Option : [2] ( 28/11/2009|11:33 )

   -----------\ SUPPRESSION

   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\CAlogo.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\DownloadCOM.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\ErrorPageTemplate.css
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\ErrorPageTemplate_search.css
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\Thumbs.db
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\YouTube.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\__slider.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\a.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\amazon.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\an.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\arrow.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\arrowB.gif
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\arrowT.gif
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\arrow_down.gif
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\arrow_up.gif
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\autofill.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\b.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\bg_pub.gif
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\bg_ttl.gif
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\bn.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\bottom.png
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\bottom_left.png
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\bottom_right.png
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\c.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\canalblog.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\cn.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\d.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\dictionary2.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\dn.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\dropdown.css
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\email_b.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\equalizer_loading.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\equalizer_off.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\equalizer_on.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\f.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\fn.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\g.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\gaming.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\gn.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\graphred0.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\graphred0_5.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\graphred1.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\graphred1_5.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\graphred2.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\graphred2_5.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\graphred3.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\graphred3_5.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\graphred4.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\graphred4_5.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\graphred5.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\h.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\h_aquarius.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\h_aries.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\h_cancer.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\h_capricorn.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\h_gemini.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\h_leo.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\h_libra.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\h_pisces.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\h_sagittarius.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\h_scorpio.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\h_taurus.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\h_virgo.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\help.gif
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\hideremove.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\highlight.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\hn.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\i.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\images01.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\in.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\j.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\jn.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\k.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\kn.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\l.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\left.png
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\ln.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\loading.gif
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\logo.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\logo_facebook.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\minus.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\minus_on.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\music2.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar
.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar
ews.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar
ews.html
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar
ewsb.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar
n.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\o.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\on.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\p.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\p_yahoo.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\p_yahoo_fr.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\pixsy.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\play.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\play_on.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\plus.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\plus_on.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\pn.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\popup_off.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\popup_on.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\popup_ona.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\q.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\qn.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbarelatedlinks.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbareport.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbaright.png
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbarn.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbarss.xsl
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbarss1.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbarsslib.js
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\s.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\search.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\search.gif
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\search_fr.gif
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\settings.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\siteinfo.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\slider.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\sn.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\spacer.gif
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\stars-red1.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\stars-red2.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\stars-red3.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\stars-red4.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\stars-red5.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\stop.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\stop_on.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar	.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar	ab_icon.png
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar	abdataV3.js
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar	abwelcome_en.html
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar	abwelcome_fr.html
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar	echnorati.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar	n.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar	ools.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar	op.png
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar	op_left.png
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar	op_right.png
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar	ranslate.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\u.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\un.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\utf8.js
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\v.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\vmlib.js
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\vn.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\w.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\web_fr.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\wikipedia.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\wn.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\x.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\xp_close_small.gif
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\yahoo_search.gif
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\z.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\zn.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\zoom.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\sinfo.txt
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\web_en.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\vmntoolbartb1501.cfg
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\New York_NY_weather.txt
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\shop2.bmp
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\ErrorLog.txt
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbarssmenu1_7a.zip
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\New York_NY_weather.txt1675421609
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\New York_NY_weather.txt1709064765
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\New York_NY_weather.txt1709488078
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\hororank.xml
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\IEtab1_8.zip
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\Download
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\Paris_FR_weather.txt
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\COMBOSEARCH.acs
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\New York_NY_weather.txt415127031
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\sinfo.txt85937140
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\vmntoolbartb0501.cfg
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\sinfo.txt86844375
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\sinfo.txt69448968
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\sinfo.txt365299875
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\userbadsites.txt
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar\NewCfg
   Supprime! - C:\Program Files\VMNToolbar	buninstall.exe
   Supprime! - C:\Program Files\VMNToolbar	oolbar.ini
   Supprime! - C:\Program Files\VMNToolbar\install.ico
   Supprime! - C:\Program Files\VMNToolbar\uninstall.exe
   Supprime! - C:\Program Files\VMNToolbar\vmntoolbar.dll
   Supprime! - C:\WINDOWS\iun6002.exe
   Supprime! - C:\DOCUME~1\JP\APPLIC~1\VMNToolbar
   Supprime! - C:\Program Files\VMNToolbar

   -----------\  Recherche de Fichiers / Dossiers ...


   -----------\  Extensions

   (JP) - {b055c535-4a3a-11db-9659-00e08161165f} => mediadicotoolbar
   (JP) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar
   (JP) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar
   (JP) - {20a82645-c095-46ed-80e3-08825760534b} => chrome_user
   (JP) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar


   -----------\  [..\Internet Explorer\Main]

   [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
   "Start Page"="https://www.msn.com/fr-fr/?ocid=iehp"
   "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
   "SearchMigratedDefaultURL"="https://www.google.com/webhp?gws_rd=ssl{searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"
   "Local Page"="C:\WINDOWS\system32\blank.htm"

   [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
   "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
   "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Start Page"="https://www.msn.com/fr-fr/"
   "Local Page"="C:\WINDOWS\system32\blank.htm"


   --------------------\  Recherche d'autres infections


   Aucune autre infection trouvée  !


   1 - "C:\ToolBar SD\TB_1.txt" - 28/11/2009|11:29 - Option : [1]
   2 - "C:\ToolBar SD\TB_2.txt" - 28/11/2009|11:34 - Option : [2]

   -----------\  Fin du rapport a 11:34:45,79

A+

engrev50 · Answer

Voilà le résultat:

 Logfile of random's system information tool 1.06 (written by random/random)
Run by JP at 2009-11-28 22:46:39
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 6 GB (14%) free of 45 GB
Total RAM: 1023 MB (29% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:46:51, on 28/11/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\ATKKBService.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\WINDOWS\system32
vsvc32.exe
C:\Program Files\Intel\Wireless\Bin\OProtSvc.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe
C:\Program Files\Glary Utilities\Integrator.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe
C:\Program Files\YourWare Solutions\FreeRAM XP Pro\FreeRAM XP Pro.exe
C:\Documents and Settings\JP\Local Settings\Application Data\Clavier+\Clavier.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FARNBVE.EXE
C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\SAGENT4.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FAMTBVE.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FAMTBVE.EXE
C:\Program Files\Labtec NumPad\Magickey.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FAMTBVE.EXE
C:\Program Files\Mozilla Thunderbird	hunderbird.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FAMTBVE.EXE
C:\PROGRA~1\WINTV\WINTV7\WINTVT~2.EXE
C:\PROGRA~1\WINTV\TVSERVER\HAUPPA~1.EXE
C:\WINDOWS\explorer.exe
C:\Program Files\Glary Utilities\memdefrag.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\JP\Bureau\RSIT.exe
C:\Program Files	rend micro\JP.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\Orange\SearchURLHook\SearchPageURL.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Download Manager Browser Helper Object - {19C8E43B-07B3-49CB-BFFC-6777B593E6F8} - C:\PROGRA~1\FICHIE~1\fluxDVD\DOWNLO~1\XEBDLH~1.DLL
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [IntelZeroConfig] C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
O4 - HKLM\..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [EOUApp] C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [FreeRAM XP] "C:\Program Files\YourWare Solutions\FreeRAM XP Pro\FreeRAM XP Pro.exe" -win
O4 - HKCU\..\Run: [Clavier+] C:\Documents and Settings\JP\Local Settings\Application Data\Clavier+\Clavier.exe
O4 - HKCU\..\Run: [Glary Memory Optimizer] "C:\Program Files\Glary Utilities\memdefrag.exe" /autostart
O4 - Global Startup: Enable Labtec NumPad.lnk = C:\Program Files\Labtec NumPad\Magickey.exe
O4 - Global Startup: WinTV Recording Status..lnk = C:\Program Files\WinTV\WinTV7\WinTVTray.exe
O4 - Global Startup: AutoStart IR.lnk = C:\Program Files\WinTV\Ir.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O14 - IERESET.INF: START_PAGE_URL=https://www.asus.com/fr/
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Google Update Service (gupdate1c988309b343a0e) (gupdate1c988309b343a0e) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HauppaugeTVServer - Hauppauge Computer Works - C:\PROGRA~1\WINTV\TVSERVER\HAUPPA~1.EXE
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: OwnershipProtocol - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\OProtSvc.exe
O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation  - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: spmgr - Unknown owner - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe

engrev50 · Answer

J'ai fait tout ce que tu m'as indiqué dans ton dernier message.

engrev50 · Answer

Voilà le rapport:

JavaRa 1.15 Removal Log.

Report follows after line.

------------------------------------

The JavaRa removal process was started on Sun Nov 29 17:44:37 2009

Found and removed: C:\Program Files\Java\jre-1_5_0_06-windows-i586-p.exe

Found and removed: C:\Windows\System32\jpicpl32.cpl

Found and removed: Software\JavaSoft\Java2D\1.5.0_06

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D510006

Found and removed: SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D510006

Found and removed: SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D510006

Found and removed: SOFTWARE\Classes\JavaPlugin.150_06

Found and removed: SOFTWARE\Classes\JavaWebStart.isInstalled.1.5.0.0

Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.5.0_06

Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.5

Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.5.0_06

Found and removed: SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D510006

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D510006

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0150060}

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.5.0_06

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_02

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_03

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_04

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2.0_01

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBB}

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\Java\jre1.5.0_06\

------------------------------------

Finished reporting.

engrev50 · Answer

Bonjour,
Oui, j'ai installé la dernière version.
Avec ça je suis paré pour l'avenir j'espère?
En tout cas merci pour ta patience et ta persévérance. La maintenance informatique est-elle un job pour toi?
Bonne journée

engrev50 · Answer

Merci de tous ces conseils.
Bonne soirée.

Antivirus Système Pro

17 réponses

Discussions similaires