Probleme de pub

lilie510 -  
Bonjour,
j'ai un problème de pub, il y a des pub qui s'affiche sans que je clique sur un site et donc j'aimerai si quelqu'un c'est pour réparer ça , merci d'avance
Configuration: Windows XP
Firefox 3.0.6

25 réponses

  1.  J_O_J_O
    Merci . J'ai vu que tu à Malware byt'es Donc ouvre le met le à jour !! Puis fait un scan Complet avec et supprime ce qu'il te trouve . Si il te trouve des infection dit le moi en postant son rapport là .

    Voilà je te conseil d'opter pour un meilleur Antivirus ... Soit vigilante sur le net ;) on continue demain Je doit go on .
    0
    1. lilie510 Auteur
      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 20:49:28, on 10/02/2009
      Platform: Windows XP SP3 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.6000.16762)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
      C:\WINDOWS\system32\nvsvc32.exe
      C:\WINDOWS\system32\HPZipm12.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
      C:\Program Files\DNA\btdna.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\eMule\emule.exe
      C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkcalrem.exe
      C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe
      C:\Documents and Settings\aurelie huret\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe
      C:\Documents and Settings\aurelie huret\Application Data\Microsoft\Live Search\Mise-a-jour-LiveSearch.exe
      C:\PROGRA~1\WIDCOMM\LOGICI~1\BTSTAC~1.EXE
      C:\Program Files\Messenger\msmsgs.exe
      C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
      C:\Program Files\Windows Live\Contacts\wlcomm.exe
      C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
      C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
      C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
      C:\WINDOWS\explorer.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\Program Files\BitTorrent\bittorrent.exe
      C:\WINDOWS\system32\wscntfy.exe
      C:\WINDOWS\system32\wuauclt.exe
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/ie/defaults/su/yme/*https://fr.yahoo.com/?p=us
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - Default URLSearchHook is missing
      O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
      O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
      O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
      O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eMule\emule.exe -AutoStart
      O4 - HKLM\..\Policies\Explorer\Run: []
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-19\..\RunOnce: [] (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
      O4 - HKUS\S-1-5-20\..\RunOnce: [] (User 'SERVICE RÉSEAU')
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\S-1-5-18\..\RunOnce: [] (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
      O4 - HKUS\.DEFAULT\..\RunOnce: [] (User 'Default user')
      O4 - Startup: Registration .LNK = C:\Program Files\Ubisoft\Telltale Games\CSI-3 Dimensions of Murder Demo\Registration\RegistrationReminder.exe
      O4 - Startup: MSN Pictures Displayer.lnk = C:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe
      O4 - Startup: Outil de notification Live Search.lnk = C:\Documents and Settings\aurelie huret\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe
      O4 - Global Startup: Rappels du Calendrier Microsoft Works.lnk = ?
      O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
      O4 - Global Startup: BTTray.lnk = ?
      O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
      O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
      O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
      O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
      O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
      O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
      O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
      O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
      O18 - Protocol: symres - {AA1061FE-6C41-421F-9344-69640C9732AB} - C:\Program Files\Norton Internet Security\Norton Internet Security\Engine\16.2.0.7\coIEPlg.dll (file missing)
      O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Alpha Networks Inc. - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
      O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
      O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
      O23 - Service: Planificateur LiveUpdate automatique (Automatic LiveUpdate Scheduler) - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
      O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
      O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
      0
      1. J_O_J_O
        Non pas obligatoire Mais Norton est vraiment Bidon tu peux avoir cent fois mieux et gratuit . Mais c'est juste un conseil . Bref [ quand ta installer Msn plus tu peux vérifier si "()" y'a pas écrit sponsor CID dessus [ dans les programme via ajout et supression de programme dans Panneau de configuration . ] Si oui désinstalle Msn plus ! et réinstalle le sans les SPONSOR ! Voilà

        Refait un nouveau hijackthis stp .
        0
        1. lilie510 Auteur
          c'est obliger de supprimer norton?

          --------------------\\ Lop S&D 4.2.5-0 XP/Vista

          Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
          X86-based PC ( Uniprocessor Free : Intel(R) Celeron(R) CPU 2.80GHz )
          BIOS : Phoenix - AwardBIOS v6.00PG
          USER : aurelie huret ( Administrator )
          BOOT : Normal boot
          Antivirus : Avira AntiVir PersonalEdition Classic 8.0.1.30 (Activated)
          C:\ (Local Disk) - FAT32 - Total:91 Go (Free:54 Go)
          D:\ (Local Disk) - NTFS - Total:91 Go (Free:89 Go)
          E:\ (CD or DVD)
          F:\ (USB)
          G:\ (USB)
          H:\ (USB)
          I:\ (USB)
          J:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
          K:\ (CD or DVD)

          "C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
          Option : [2] ( 10/02/2009|20:34 )

          \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

          Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\does dog two city\Wave wma.dat
          Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\ELSE PLUS\AXISNEW.exe
          Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\ELSE PLUS\vxjtvqvi.exe
          Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\ELSE PLUS\JoyPokeForkBlue.exe
          Supprime! - C:\Program Files\BitTorrent Fastest Tool\BitP.exe
          Supprime! - C:\Program Files\BitTorrent Fastest Tool\BitDownload-4.5-setup.exe
          Supprime! - C:\Program Files\BitTorrent Fastest Tool\INSTALL.LOG
          Supprime! - C:\WINDOWS\Tasks\AC7B281B90C8DCCF.job
          Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\does dog two city
          Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\ELSE PLUS
          Supprime! - C:\Program Files\ELSE PLUS
          Supprime! - C:\Program Files\BitTorrent Fastest Tool
          -
          [ Fichier Hosts ] .. Restaure!

          \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

          --------------------\\ Listing des dossiers dans APPLIC~1

          [03/05/2005|02:13] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
          [03/05/2005|01:54] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
          [03/05/2005|02:20] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec

          [06/01/2008|15:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
          [10/02/2009|17:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
          [22/11/2008|16:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BigFishGamesCache
          [03/05/2005|02:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
          [04/04/2008|11:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Downloaded Installations
          [21/08/2008|08:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\EmailNotifier
          [18/08/2008|13:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ENJOY Plus!
          [03/11/2008|15:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Flood Light Games
          [30/04/2008|19:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Fugazo
          [01/05/2008|13:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
          [06/01/2008|19:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
          [04/04/2008|11:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Installations
          [30/04/2008|14:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Legacy Interactive
          [12/09/2008|19:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\License
          [17/11/2008|18:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macromedia
          [04/07/2008|18:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
          [16/11/2008|13:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Mediafour
          [09/02/2009|06:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
          [03/10/2008|21:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Micro Application
          [03/05/2005|01:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
          [15/03/2008|13:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
          [05/10/2008|09:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Norton
          [05/10/2008|09:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NortonInstaller
          [05/01/2008|14:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles
          [24/03/2008|13:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Oberon Games
          [05/10/2008|09:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PCSettings
          [24/03/2008|12:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PlayFirst
          [02/11/2008|19:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\RockEnFolie le Player
          [03/05/2005|02:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
          [24/03/2008|11:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
          [21/04/2008|18:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia
          [20/06/2008|19:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems
          [06/01/2008|15:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
          [05/01/2008|18:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
          [06/01/2008|10:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\YAHOO
          [23/03/2008|18:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom

          [03/05/2005|01:54] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

          [03/05/2005|01:54] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

          [05/01/2008|21:11] C:\DOCUME~1\AURELI~1\APPLIC~1\Adobe
          [06/01/2008|15:13] C:\DOCUME~1\AURELI~1\APPLIC~1\AdobeUM
          [04/09/2008|19:07] C:\DOCUME~1\AURELI~1\APPLIC~1\Audacity
          [20/10/2008|13:13] C:\DOCUME~1\AURELI~1\APPLIC~1\Big Fish Games
          [05/12/2008|19:18] C:\DOCUME~1\AURELI~1\APPLIC~1\BitTorrent
          [07/11/2008|14:56] C:\DOCUME~1\AURELI~1\APPLIC~1\BloodTies
          [13/05/2008|20:27] C:\DOCUME~1\AURELI~1\APPLIC~1\Chicken Chase
          [07/12/2008|21:23] C:\DOCUME~1\AURELI~1\APPLIC~1\Chrysanth
          [08/01/2008|14:00] C:\DOCUME~1\AURELI~1\APPLIC~1\Creative
          [03/10/2008|22:12] C:\DOCUME~1\AURELI~1\APPLIC~1\CyberLink
          [11/09/2008|16:57] C:\DOCUME~1\AURELI~1\APPLIC~1\DivX
          [05/12/2008|19:17] C:\DOCUME~1\AURELI~1\APPLIC~1\DNA
          [22/11/2008|16:54] C:\DOCUME~1\AURELI~1\APPLIC~1\Dragon Altar Games
          [21/08/2008|08:03] C:\DOCUME~1\AURELI~1\APPLIC~1\EmailNotifier
          [18/08/2008|13:08] C:\DOCUME~1\AURELI~1\APPLIC~1\ENJOY Plus!
          [03/11/2008|15:31] C:\DOCUME~1\AURELI~1\APPLIC~1\Flood Light Games
          [10/06/2008|18:39] C:\DOCUME~1\AURELI~1\APPLIC~1\Gaijin Ent
          [30/04/2008|14:23] C:\DOCUME~1\AURELI~1\APPLIC~1\Gamelab
          [06/01/2008|14:51] C:\DOCUME~1\AURELI~1\APPLIC~1\Google
          [01/05/2008|13:33] C:\DOCUME~1\AURELI~1\APPLIC~1\Grisoft
          [21/10/2008|19:42] C:\DOCUME~1\AURELI~1\APPLIC~1\Help
          [03/05/2005|02:13] C:\DOCUME~1\AURELI~1\APPLIC~1\Identities
          [21/10/2008|12:49] C:\DOCUME~1\AURELI~1\APPLIC~1\iWin
          [24/03/2008|13:25] C:\DOCUME~1\AURELI~1\APPLIC~1\Jane s Hotel
          [06/01/2008|10:17] C:\DOCUME~1\AURELI~1\APPLIC~1\Leadertech
          [05/01/2008|21:11] C:\DOCUME~1\AURELI~1\APPLIC~1\Macromedia
          [04/07/2008|18:30] C:\DOCUME~1\AURELI~1\APPLIC~1\Malwarebytes
          [16/04/2008|21:16] C:\DOCUME~1\AURELI~1\APPLIC~1\Media Player Classic
          [03/05/2005|01:54] C:\DOCUME~1\AURELI~1\APPLIC~1\Microsoft
          [05/01/2008|14:36] C:\DOCUME~1\AURELI~1\APPLIC~1\Mozilla
          [02/11/2008|19:25] C:\DOCUME~1\AURELI~1\APPLIC~1\MSN Pictures Displayer
          [10/06/2008|12:36] C:\DOCUME~1\AURELI~1\APPLIC~1\My Games
          [01/03/2008|15:56] C:\DOCUME~1\AURELI~1\APPLIC~1\Notepad++
          [07/11/2008|07:47] C:\DOCUME~1\AURELI~1\APPLIC~1\Pi Eye Games
          [19/05/2008|13:12] C:\DOCUME~1\AURELI~1\APPLIC~1\Pirateville
          [24/03/2008|12:31] C:\DOCUME~1\AURELI~1\APPLIC~1\PlayFirst
          [02/11/2008|19:24] C:\DOCUME~1\AURELI~1\APPLIC~1\RockEnFolie le Player
          [31/05/2008|19:04] C:\DOCUME~1\AURELI~1\APPLIC~1\Samsung
          [02/06/2008|20:19] C:\DOCUME~1\AURELI~1\APPLIC~1\SecuROM
          [06/01/2008|10:17] C:\DOCUME~1\AURELI~1\APPLIC~1\Sonic
          [22/04/2008|16:01] C:\DOCUME~1\AURELI~1\APPLIC~1\SprillBermudeFr
          [30/01/2009|18:59] C:\DOCUME~1\AURELI~1\APPLIC~1\SulusGames
          [08/01/2008|21:12] C:\DOCUME~1\AURELI~1\APPLIC~1\Sun
          [03/05/2005|02:20] C:\DOCUME~1\AURELI~1\APPLIC~1\Symantec
          [05/02/2008|19:17] C:\DOCUME~1\AURELI~1\APPLIC~1\Template
          [20/06/2008|19:15] C:\DOCUME~1\AURELI~1\APPLIC~1\Ulead Systems
          [09/09/2008|19:57] C:\DOCUME~1\AURELI~1\APPLIC~1\vlc
          [20/08/2008|13:50] C:\DOCUME~1\AURELI~1\APPLIC~1\Windows Live Writer
          [15/03/2008|13:09] C:\DOCUME~1\AURELI~1\APPLIC~1\WinRAR
          [30/01/2009|18:43] C:\DOCUME~1\AURELI~1\APPLIC~1\YoudaGames
          [23/03/2008|19:08] C:\DOCUME~1\AURELI~1\APPLIC~1\Zylom

          --------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

          [10/02/2009 17:18][--ah-----] C:\WINDOWS\tasks\SA.DAT
          [05/08/2004 05:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

          --------------------\\ Listing des dossiers dans C:\Program Files

          [04/05/2005|10:12] C:\Program Files\acer
          [03/05/2005|02:15] C:\Program Files\Adobe
          [10/02/2009|17:31] C:\Program Files\Ad-remover
          [25/11/2008|21:21] C:\Program Files\Advanced Diary
          [30/04/2008|19:28] C:\Program Files\Airport Mania
          [05/01/2008|12:21] C:\Program Files\ANI
          [15/06/2008|09:45] C:\Program Files\ASUS
          [10/02/2009|17:27] C:\Program Files\Avira
          [03/05/2005|02:10] C:\Program Files\AvRack
          [01/08/2008|14:42] C:\Program Files\Barbie(tm)
          [22/11/2008|16:34] C:\Program Files\bfgclient
          [05/12/2008|19:17] C:\Program Files\BitTorrent
          [13/05/2008|18:35] C:\Program Files\Burger Rush
          [08/02/2009|14:27] C:\Program Files\Circle Developemen
          [03/05/2005|01:59] C:\Program Files\ComPlus Applications
          [15/05/2008|16:37] C:\Program Files\Conduit
          [06/01/2008|20:51] C:\Program Files\Creative
          [03/05/2005|02:18] C:\Program Files\CyberLink
          [23/02/2008|11:02] C:\Program Files\DAEMON Tools
          [24/03/2008|16:04] C:\Program Files\Delicious 2 Deluxe
          [16/06/2008|18:50] C:\Program Files\Deviens Miss France
          [06/01/2008|13:41] C:\Program Files\Dictionnaire
          [09/09/2008|19:46] C:\Program Files\DivX
          [05/01/2008|12:21] C:\Program Files\D-Link
          [05/12/2008|19:17] C:\Program Files\DNA
          [13/11/2008|20:34] C:\Program Files\Dofus
          [17/05/2008|16:24] C:\Program Files\D-Tools
          [12/02/2008|09:06] C:\Program Files\EA GAMES
          [25/06/2008|18:54] C:\Program Files\Ediser
          [05/01/2008|18:19] C:\Program Files\eMule
          [18/08/2008|13:07] C:\Program Files\ENJOY Plus!
          [01/05/2008|11:35] C:\Program Files\Fab Fashion
          [01/05/2008|10:37] C:\Program Files\Fashion Fits
          [03/05/2005|01:54] C:\Program Files\Fichiers communs
          [06/01/2008|14:51] C:\Program Files\Google
          [01/05/2008|13:32] C:\Program Files\Grisoft
          [06/01/2008|19:25] C:\Program Files\Hewlett-Packard
          [06/01/2008|19:15] C:\Program Files\HP
          [06/01/2008|10:01] C:\Program Files\illiminable
          [03/05/2005|02:10] C:\Program Files\InstallShield Installation Information
          [03/05/2005|01:59] C:\Program Files\Internet Explorer
          [05/01/2008|12:15] C:\Program Files\Java
          [30/01/2009|18:57] C:\Program Files\Jewelleria
          [21/01/2009|20:19] C:\Program Files\kicad
          [16/04/2008|21:07] C:\Program Files\K-Lite Codec Pack
          [02/05/2008|20:37] C:\Program Files\Lavalys
          [24/03/2008|17:44] C:\Program Files\Lopxp
          [17/11/2008|18:33] C:\Program Files\Macromedia
          [04/07/2008|18:30] C:\Program Files\Malwarebytes' Anti-Malware
          [16/11/2008|13:36] C:\Program Files\Mediafour
          [03/05/2005|01:58] C:\Program Files\Messenger
          [25/01/2009|12:27] C:\Program Files\Messenger Plus! Live
          [03/10/2008|20:53] C:\Program Files\Micro Application
          [10/01/2009|17:47] C:\Program Files\Microsoft
          [03/05/2005|02:02] C:\Program Files\microsoft frontpage
          [07/03/2008|21:31] C:\Program Files\Microsoft Office
          [10/01/2009|17:50] C:\Program Files\Microsoft Office Outlook Connector
          [10/01/2009|17:50] C:\Program Files\Microsoft Silverlight
          [05/01/2008|18:27] C:\Program Files\Microsoft SQL Server Compact Edition
          [15/03/2008|13:23] C:\Program Files\Microsoft Visual Studio
          [06/01/2008|19:06] C:\Program Files\Microsoft Works
          [15/03/2008|13:22] C:\Program Files\Microsoft.NET
          [03/05/2005|02:00] C:\Program Files\Movie Maker
          [05/01/2008|14:36] C:\Program Files\Mozilla Firefox
          [15/03/2008|13:24] C:\Program Files\MSBuild
          [07/03/2008|21:31] C:\Program Files\MSECache
          [03/05/2005|01:58] C:\Program Files\MSN
          [03/05/2005|01:58] C:\Program Files\MSN Gaming Zone
          [02/11/2008|19:23] C:\Program Files\MSN Pictures Displayer
          [07/01/2008|21:37] C:\Program Files\MSXML 4.0
          [03/10/2008|21:19] C:\Program Files\MSXML 6.0
          [25/02/2008|19:39] C:\Program Files\Navilog1
          [03/05/2005|02:00] C:\Program Files\NetMeeting
          [03/05/2005|02:17] C:\Program Files\NewTech Infosystems
          [04/04/2008|11:25] C:\Program Files\Nokia
          [05/10/2008|09:31] C:\Program Files\Norton Internet Security
          [05/10/2008|09:13] C:\Program Files\NortonInstaller
          [01/03/2008|15:56] C:\Program Files\Notepad++
          [04/04/2008|11:13] C:\Program Files\NSS
          [03/05/2005|01:58] C:\Program Files\Online Services
          [25/11/2008|20:58] C:\Program Files\OriaSoft
          [03/05/2005|02:00] C:\Program Files\Outlook Express
          [26/10/2008|18:27] C:\Program Files\PhotoFiltre
          [10/06/2008|13:14] C:\Program Files\Profitville
          [01/10/2008|13:35] C:\Program Files\QuickTime
          [01/03/2008|07:07] C:\Program Files\Realtek
          [03/05/2005|02:10] C:\Program Files\Realtek Sound Manager
          [03/10/2008|21:25] C:\Program Files\Reference Assemblies
          [24/03/2008|11:26] C:\Program Files\ReflexiveArcade
          [02/11/2008|19:24] C:\Program Files\RockEnFolie
          [09/12/2008|20:03] C:\Program Files\Rockstar Games
          [01/10/2008|13:35] C:\Program Files\Sabrina
          [31/05/2008|18:56] C:\Program Files\Samsung
          [03/05/2005|02:00] C:\Program Files\Services en ligne
          [16/06/2008|18:41] C:\Program Files\Simulateur de conduite 3D
          [05/01/2008|12:09] C:\Program Files\SiSLan
          [06/01/2008|10:12] C:\Program Files\Sonic
          [05/10/2008|13:49] C:\Program Files\Sqirlz Morph
          [25/01/2009|12:18] C:\Program Files\StuffPlug3
          [03/05/2005|02:19] C:\Program Files\Symantec
          [07/11/2008|07:43] C:\Program Files\System Mania
          [06/01/2008|09:48] C:\Program Files\Thomson
          [21/03/2008|21:07] C:\Program Files\TI Education
          [05/03/2008|14:56] C:\Program Files\Trend Micro
          [16/05/2008|16:16] C:\Program Files\Ubisoft
          [20/06/2008|19:14] C:\Program Files\Ulead Systems
          [05/01/2008|12:14] C:\Program Files\Uninstall Information
          [02/11/2008|12:00] C:\Program Files\Veoh Networks
          [19/08/2008|17:57] C:\Program Files\Visicom Media
          [31/05/2008|19:33] C:\Program Files\WIDCOMM
          [05/01/2008|18:17] C:\Program Files\Windows Live
          [10/01/2009|17:46] C:\Program Files\Windows Live SkyDrive
          [06/01/2008|15:14] C:\Program Files\Windows Media Connect 2
          [03/05/2005|01:58] C:\Program Files\Windows Media Player
          [03/05/2005|01:58] C:\Program Files\Windows NT
          [03/05/2005|02:00] C:\Program Files\WindowsUpdate
          [15/03/2008|13:09] C:\Program Files\WinRAR
          [03/05/2005|02:02] C:\Program Files\xerox
          [06/01/2008|09:57] C:\Program Files\Yahoo!
          [30/01/2009|18:42] C:\Program Files\Youda Farmer
          [23/03/2008|18:18] C:\Program Files\Zylom Games

          --------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

          [12/05/2008|10:49] C:\Program Files\Fichiers communs\Adobe
          [01/08/2008|14:42] C:\Program Files\Fichiers communs\Barbie
          [15/03/2008|13:23] C:\Program Files\Fichiers communs\DESIGNER
          [06/01/2008|19:22] C:\Program Files\Fichiers communs\Hewlett-Packard
          [06/01/2008|19:34] C:\Program Files\Fichiers communs\HP
          [03/05/2005|02:10] C:\Program Files\Fichiers communs\InstallShield
          [05/01/2008|12:15] C:\Program Files\Fichiers communs\Java
          [17/11/2008|18:33] C:\Program Files\Fichiers communs\Macromedia
          [16/11/2008|13:37] C:\Program Files\Fichiers communs\Mediafour
          [03/05/2005|01:54] C:\Program Files\Fichiers communs\Microsoft Shared
          [03/05/2005|02:00] C:\Program Files\Fichiers communs\MSSoap
          [03/05/2005|02:17] C:\Program Files\Fichiers communs\muvee Technologies
          [03/05/2005|01:54] C:\Program Files\Fichiers communs\ODBC
          [03/05/2005|02:00] C:\Program Files\Fichiers communs\Services
          [03/05/2005|01:54] C:\Program Files\Fichiers communs\SpeechEngines
          [06/01/2008|10:12] C:\Program Files\Fichiers communs\SureThing Shared
          [03/05/2005|02:19] C:\Program Files\Fichiers communs\Symantec Shared
          [03/05/2005|01:59] C:\Program Files\Fichiers communs\System
          [10/01/2009|17:39] C:\Program Files\Fichiers communs\Windows Live
          [05/01/2008|18:17] C:\Program Files\Fichiers communs\WindowsLiveInstaller

          --------------------\\ Process

          ( 44 Processes )

          ... OK !

          --------------------\\ Recherche avec S_Lop

          Aucun fichier / dossier Lop trouvé !

          --------------------\\ Recherche de Fichiers / Dossiers Lop

          Aucun fichier / dossier Lop trouvé !

          --------------------\\ Verification du Registre

          ..... OK !

          --------------------\\ Verification du fichier Hosts

          Fichier Hosts PROPRE

          --------------------\\ Recherche de fichiers avec Catchme

          catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
          Rootkit scan 2009-02-10 20:37:51
          Windows 5.1.2600 Service Pack 3 FAT NTAPI
          scanning hidden processes ...
          scanning hidden files ...
          scan completed successfully
          hidden processes: 0
          hidden files: 0

          --------------------\\ Recherche d'autres infections

          --------------------\\ Cracks & Keygens ..

          C:\DOCUME~1\AURELI~1\Mes documents\Mes fichiers re‡us\crack adobe family.txt
          C:\DOCUME~1\AURELI~1\Mes documents\Downloads\Grand Theft Auto Vice City - PC\Crack
          C:\DOCUME~1\AURELI~1\Mes documents\Downloads\Grand Theft Auto Vice City - PC\Crack\gta-vc.exe

          [F:4][D:4]-> C:\DOCUME~1\AURELI~1\LOCALS~1\Temp
          [F:4][D:0]-> C:\DOCUME~1\AURELI~1\Cookies
          [F:30][D:5]-> C:\DOCUME~1\AURELI~1\LOCALS~1\TEMPOR~1\content.IE5
          [F:5][D:0]-> C:\Recycled

          1 - "C:\Lop SD\LopR_1.txt" - 10/02/2009|19:52 - Option : [1]
          2 - "C:\Lop SD\LopR_2.txt" - 10/02/2009|20:39 - Option : [2]

          --------------------\\ Fin du rapport a 20:39:25
          0
          2. J_O_J_O
            Relance Lop S&D et fait l'option 2 poste son contenu . Et désinstalle NORTON
            0
            1. lilie510 Auteur
              20:24 10/02/2009
              --------------------\\ Lop S&D 4.2.5-0 XP/Vista

              Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
              X86-based PC ( Uniprocessor Free : Intel(R) Celeron(R) CPU 2.80GHz )
              BIOS : Phoenix - AwardBIOS v6.00PG
              USER : aurelie huret ( Administrator )
              BOOT : Normal boot
              Antivirus : Avira AntiVir PersonalEdition Classic 8.0.1.30 (Activated)
              C:\ (Local Disk) - FAT32 - Total:91 Go (Free:54 Go)
              D:\ (Local Disk) - NTFS - Total:91 Go (Free:89 Go)
              E:\ (CD or DVD)
              F:\ (USB)
              G:\ (USB)
              H:\ (USB)
              I:\ (USB)
              J:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
              K:\ (CD or DVD)

              "C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
              Option : [1] ( 10/02/2009|19:47 )

              --------------------\\ Listing des dossiers dans APPLIC~1

              [03/05/2005|02:13] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
              [03/05/2005|01:54] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
              [03/05/2005|02:20] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec

              [06/01/2008|15:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
              [10/02/2009|17:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
              [22/11/2008|16:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BigFishGamesCache
              [03/05/2005|02:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
              [08/02/2009|14:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\does dog two city
              [04/04/2008|11:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Downloaded Installations
              [21/08/2008|08:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\EmailNotifier
              [18/08/2008|13:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ENJOY Plus!
              [03/11/2008|15:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Flood Light Games
              [30/04/2008|19:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Fugazo
              [01/05/2008|13:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
              [06/01/2008|19:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
              [04/04/2008|11:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Installations
              [30/04/2008|14:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Legacy Interactive
              [12/09/2008|19:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\License
              [17/11/2008|18:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macromedia
              [04/07/2008|18:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
              [16/11/2008|13:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Mediafour
              [09/02/2009|06:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
              [03/10/2008|21:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Micro Application
              [03/05/2005|01:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
              [15/03/2008|13:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
              [05/10/2008|09:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Norton
              [05/10/2008|09:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NortonInstaller
              [05/01/2008|14:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles
              [24/03/2008|13:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Oberon Games
              [05/10/2008|09:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PCSettings
              [24/03/2008|12:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PlayFirst
              [02/11/2008|19:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\RockEnFolie le Player
              [03/05/2005|02:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
              [24/03/2008|11:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
              [21/04/2008|18:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia
              [20/06/2008|19:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems
              [06/01/2008|15:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
              [05/01/2008|18:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
              [06/01/2008|10:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\YAHOO
              [23/03/2008|18:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom

              [03/05/2005|01:54] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

              [03/05/2005|01:54] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

              [05/01/2008|21:11] C:\DOCUME~1\AURELI~1\APPLIC~1\Adobe
              [06/01/2008|15:13] C:\DOCUME~1\AURELI~1\APPLIC~1\AdobeUM
              [04/09/2008|19:07] C:\DOCUME~1\AURELI~1\APPLIC~1\Audacity
              [20/10/2008|13:13] C:\DOCUME~1\AURELI~1\APPLIC~1\Big Fish Games
              [05/12/2008|19:18] C:\DOCUME~1\AURELI~1\APPLIC~1\BitTorrent
              [07/11/2008|14:56] C:\DOCUME~1\AURELI~1\APPLIC~1\BloodTies
              [13/05/2008|20:27] C:\DOCUME~1\AURELI~1\APPLIC~1\Chicken Chase
              [07/12/2008|21:23] C:\DOCUME~1\AURELI~1\APPLIC~1\Chrysanth
              [08/01/2008|14:00] C:\DOCUME~1\AURELI~1\APPLIC~1\Creative
              [03/10/2008|22:12] C:\DOCUME~1\AURELI~1\APPLIC~1\CyberLink
              [11/09/2008|16:57] C:\DOCUME~1\AURELI~1\APPLIC~1\DivX
              [05/12/2008|19:17] C:\DOCUME~1\AURELI~1\APPLIC~1\DNA
              [22/11/2008|16:54] C:\DOCUME~1\AURELI~1\APPLIC~1\Dragon Altar Games
              [08/02/2009|14:28] C:\DOCUME~1\AURELI~1\APPLIC~1\Else plus
              [21/08/2008|08:03] C:\DOCUME~1\AURELI~1\APPLIC~1\EmailNotifier
              [18/08/2008|13:08] C:\DOCUME~1\AURELI~1\APPLIC~1\ENJOY Plus!
              [03/11/2008|15:31] C:\DOCUME~1\AURELI~1\APPLIC~1\Flood Light Games
              [10/06/2008|18:39] C:\DOCUME~1\AURELI~1\APPLIC~1\Gaijin Ent
              [30/04/2008|14:23] C:\DOCUME~1\AURELI~1\APPLIC~1\Gamelab
              [06/01/2008|14:51] C:\DOCUME~1\AURELI~1\APPLIC~1\Google
              [01/05/2008|13:33] C:\DOCUME~1\AURELI~1\APPLIC~1\Grisoft
              [21/10/2008|19:42] C:\DOCUME~1\AURELI~1\APPLIC~1\Help
              [03/05/2005|02:13] C:\DOCUME~1\AURELI~1\APPLIC~1\Identities
              [21/10/2008|12:49] C:\DOCUME~1\AURELI~1\APPLIC~1\iWin
              [24/03/2008|13:25] C:\DOCUME~1\AURELI~1\APPLIC~1\Jane s Hotel
              [06/01/2008|10:17] C:\DOCUME~1\AURELI~1\APPLIC~1\Leadertech
              [05/01/2008|21:11] C:\DOCUME~1\AURELI~1\APPLIC~1\Macromedia
              [04/07/2008|18:30] C:\DOCUME~1\AURELI~1\APPLIC~1\Malwarebytes
              [16/04/2008|21:16] C:\DOCUME~1\AURELI~1\APPLIC~1\Media Player Classic
              [03/05/2005|01:54] C:\DOCUME~1\AURELI~1\APPLIC~1\Microsoft
              [05/01/2008|14:36] C:\DOCUME~1\AURELI~1\APPLIC~1\Mozilla
              [02/11/2008|19:25] C:\DOCUME~1\AURELI~1\APPLIC~1\MSN Pictures Displayer
              [10/06/2008|12:36] C:\DOCUME~1\AURELI~1\APPLIC~1\My Games
              [01/03/2008|15:56] C:\DOCUME~1\AURELI~1\APPLIC~1\Notepad++
              [07/11/2008|07:47] C:\DOCUME~1\AURELI~1\APPLIC~1\Pi Eye Games
              [19/05/2008|13:12] C:\DOCUME~1\AURELI~1\APPLIC~1\Pirateville
              [24/03/2008|12:31] C:\DOCUME~1\AURELI~1\APPLIC~1\PlayFirst
              [02/11/2008|19:24] C:\DOCUME~1\AURELI~1\APPLIC~1\RockEnFolie le Player
              [31/05/2008|19:04] C:\DOCUME~1\AURELI~1\APPLIC~1\Samsung
              [02/06/2008|20:19] C:\DOCUME~1\AURELI~1\APPLIC~1\SecuROM
              [06/01/2008|10:17] C:\DOCUME~1\AURELI~1\APPLIC~1\Sonic
              [22/04/2008|16:01] C:\DOCUME~1\AURELI~1\APPLIC~1\SprillBermudeFr
              [30/01/2009|18:59] C:\DOCUME~1\AURELI~1\APPLIC~1\SulusGames
              [08/01/2008|21:12] C:\DOCUME~1\AURELI~1\APPLIC~1\Sun
              [03/05/2005|02:20] C:\DOCUME~1\AURELI~1\APPLIC~1\Symantec
              [05/02/2008|19:17] C:\DOCUME~1\AURELI~1\APPLIC~1\Template
              [20/06/2008|19:15] C:\DOCUME~1\AURELI~1\APPLIC~1\Ulead Systems
              [09/09/2008|19:57] C:\DOCUME~1\AURELI~1\APPLIC~1\vlc
              [20/08/2008|13:50] C:\DOCUME~1\AURELI~1\APPLIC~1\Windows Live Writer
              [15/03/2008|13:09] C:\DOCUME~1\AURELI~1\APPLIC~1\WinRAR
              [30/01/2009|18:43] C:\DOCUME~1\AURELI~1\APPLIC~1\YoudaGames
              [23/03/2008|19:08] C:\DOCUME~1\AURELI~1\APPLIC~1\Zylom

              --------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

              [10/02/2009 19:00][--ah-----] C:\WINDOWS\tasks\AC7B281B90C8DCCF.job
              [10/02/2009 17:18][--ah-----] C:\WINDOWS\tasks\SA.DAT
              [05/08/2004 05:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

              ( AC7B281B90C8DCCF.job )=( c:\docume~1\aureli~1\applic~1\elsepl~1\Thunkdeafgreat.exe )

              --------------------\\ Listing des dossiers dans C:\Program Files

              [04/05/2005|10:12] C:\Program Files\acer
              [03/05/2005|02:15] C:\Program Files\Adobe
              [10/02/2009|17:31] C:\Program Files\Ad-remover
              [25/11/2008|21:21] C:\Program Files\Advanced Diary
              [30/04/2008|19:28] C:\Program Files\Airport Mania
              [05/01/2008|12:21] C:\Program Files\ANI
              [15/06/2008|09:45] C:\Program Files\ASUS
              [10/02/2009|17:27] C:\Program Files\Avira
              [03/05/2005|02:10] C:\Program Files\AvRack
              [01/08/2008|14:42] C:\Program Files\Barbie(tm)
              [22/11/2008|16:34] C:\Program Files\bfgclient
              [05/12/2008|19:17] C:\Program Files\BitTorrent
              [21/04/2008|19:20] C:\Program Files\BitTorrent Fastest Tool
              [13/05/2008|18:35] C:\Program Files\Burger Rush
              [08/02/2009|14:27] C:\Program Files\Circle Developemen
              [03/05/2005|01:59] C:\Program Files\ComPlus Applications
              [15/05/2008|16:37] C:\Program Files\Conduit
              [06/01/2008|20:51] C:\Program Files\Creative
              [03/05/2005|02:18] C:\Program Files\CyberLink
              [23/02/2008|11:02] C:\Program Files\DAEMON Tools
              [24/03/2008|16:04] C:\Program Files\Delicious 2 Deluxe
              [16/06/2008|18:50] C:\Program Files\Deviens Miss France
              [06/01/2008|13:41] C:\Program Files\Dictionnaire
              [09/09/2008|19:46] C:\Program Files\DivX
              [05/01/2008|12:21] C:\Program Files\D-Link
              [05/12/2008|19:17] C:\Program Files\DNA
              [13/11/2008|20:34] C:\Program Files\Dofus
              [17/05/2008|16:24] C:\Program Files\D-Tools
              [12/02/2008|09:06] C:\Program Files\EA GAMES
              [25/06/2008|18:54] C:\Program Files\Ediser
              [08/02/2009|14:28] C:\Program Files\Else plus
              [05/01/2008|18:19] C:\Program Files\eMule
              [18/08/2008|13:07] C:\Program Files\ENJOY Plus!
              [01/05/2008|11:35] C:\Program Files\Fab Fashion
              [01/05/2008|10:37] C:\Program Files\Fashion Fits
              [03/05/2005|01:54] C:\Program Files\Fichiers communs
              [06/01/2008|14:51] C:\Program Files\Google
              [01/05/2008|13:32] C:\Program Files\Grisoft
              [06/01/2008|19:25] C:\Program Files\Hewlett-Packard
              [06/01/2008|19:15] C:\Program Files\HP
              [06/01/2008|10:01] C:\Program Files\illiminable
              [03/05/2005|02:10] C:\Program Files\InstallShield Installation Information
              [03/05/2005|01:59] C:\Program Files\Internet Explorer
              [05/01/2008|12:15] C:\Program Files\Java
              [30/01/2009|18:57] C:\Program Files\Jewelleria
              [21/01/2009|20:19] C:\Program Files\kicad
              [16/04/2008|21:07] C:\Program Files\K-Lite Codec Pack
              [02/05/2008|20:37] C:\Program Files\Lavalys
              [24/03/2008|17:44] C:\Program Files\Lopxp
              [17/11/2008|18:33] C:\Program Files\Macromedia
              [04/07/2008|18:30] C:\Program Files\Malwarebytes' Anti-Malware
              [16/11/2008|13:36] C:\Program Files\Mediafour
              [03/05/2005|01:58] C:\Program Files\Messenger
              [25/01/2009|12:27] C:\Program Files\Messenger Plus! Live
              [03/10/2008|20:53] C:\Program Files\Micro Application
              [10/01/2009|17:47] C:\Program Files\Microsoft
              [03/05/2005|02:02] C:\Program Files\microsoft frontpage
              [07/03/2008|21:31] C:\Program Files\Microsoft Office
              [10/01/2009|17:50] C:\Program Files\Microsoft Office Outlook Connector
              [10/01/2009|17:50] C:\Program Files\Microsoft Silverlight
              [05/01/2008|18:27] C:\Program Files\Microsoft SQL Server Compact Edition
              [15/03/2008|13:23] C:\Program Files\Microsoft Visual Studio
              [06/01/2008|19:06] C:\Program Files\Microsoft Works
              [15/03/2008|13:22] C:\Program Files\Microsoft.NET
              [03/05/2005|02:00] C:\Program Files\Movie Maker
              [05/01/2008|14:36] C:\Program Files\Mozilla Firefox
              [15/03/2008|13:24] C:\Program Files\MSBuild
              [07/03/2008|21:31] C:\Program Files\MSECache
              [03/05/2005|01:58] C:\Program Files\MSN
              [03/05/2005|01:58] C:\Program Files\MSN Gaming Zone
              [02/11/2008|19:23] C:\Program Files\MSN Pictures Displayer
              [07/01/2008|21:37] C:\Program Files\MSXML 4.0
              [03/10/2008|21:19] C:\Program Files\MSXML 6.0
              [25/02/2008|19:39] C:\Program Files\Navilog1
              [03/05/2005|02:00] C:\Program Files\NetMeeting
              [03/05/2005|02:17] C:\Program Files\NewTech Infosystems
              [04/04/2008|11:25] C:\Program Files\Nokia
              [05/10/2008|09:31] C:\Program Files\Norton Internet Security
              [05/10/2008|09:13] C:\Program Files\NortonInstaller
              [01/03/2008|15:56] C:\Program Files\Notepad++
              [04/04/2008|11:13] C:\Program Files\NSS
              [03/05/2005|01:58] C:\Program Files\Online Services
              [25/11/2008|20:58] C:\Program Files\OriaSoft
              [03/05/2005|02:00] C:\Program Files\Outlook Express
              [26/10/2008|18:27] C:\Program Files\PhotoFiltre
              [10/06/2008|13:14] C:\Program Files\Profitville
              [01/10/2008|13:35] C:\Program Files\QuickTime
              [01/03/2008|07:07] C:\Program Files\Realtek
              [03/05/2005|02:10] C:\Program Files\Realtek Sound Manager
              [03/10/2008|21:25] C:\Program Files\Reference Assemblies
              [24/03/2008|11:26] C:\Program Files\ReflexiveArcade
              [02/11/2008|19:24] C:\Program Files\RockEnFolie
              [09/12/2008|20:03] C:\Program Files\Rockstar Games
              [01/10/2008|13:35] C:\Program Files\Sabrina
              [31/05/2008|18:56] C:\Program Files\Samsung
              [03/05/2005|02:00] C:\Program Files\Services en ligne
              [16/06/2008|18:41] C:\Program Files\Simulateur de conduite 3D
              [05/01/2008|12:09] C:\Program Files\SiSLan
              [06/01/2008|10:12] C:\Program Files\Sonic
              [05/10/2008|13:49] C:\Program Files\Sqirlz Morph
              [25/01/2009|12:18] C:\Program Files\StuffPlug3
              [03/05/2005|02:19] C:\Program Files\Symantec
              [07/11/2008|07:43] C:\Program Files\System Mania
              [06/01/2008|09:48] C:\Program Files\Thomson
              [21/03/2008|21:07] C:\Program Files\TI Education
              [05/03/2008|14:56] C:\Program Files\Trend Micro
              [16/05/2008|16:16] C:\Program Files\Ubisoft
              [20/06/2008|19:14] C:\Program Files\Ulead Systems
              [05/01/2008|12:14] C:\Program Files\Uninstall Information
              [02/11/2008|12:00] C:\Program Files\Veoh Networks
              [19/08/2008|17:57] C:\Program Files\Visicom Media
              [31/05/2008|19:33] C:\Program Files\WIDCOMM
              [05/01/2008|18:17] C:\Program Files\Windows Live
              [10/01/2009|17:46] C:\Program Files\Windows Live SkyDrive
              [06/01/2008|15:14] C:\Program Files\Windows Media Connect 2
              [03/05/2005|01:58] C:\Program Files\Windows Media Player
              [03/05/2005|01:58] C:\Program Files\Windows NT
              [03/05/2005|02:00] C:\Program Files\WindowsUpdate
              [15/03/2008|13:09] C:\Program Files\WinRAR
              [03/05/2005|02:02] C:\Program Files\xerox
              [06/01/2008|09:57] C:\Program Files\Yahoo!
              [30/01/2009|18:42] C:\Program Files\Youda Farmer
              [23/03/2008|18:18] C:\Program Files\Zylom Games

              --------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

              [12/05/2008|10:49] C:\Program Files\Fichiers communs\Adobe
              [01/08/2008|14:42] C:\Program Files\Fichiers communs\Barbie
              [15/03/2008|13:23] C:\Program Files\Fichiers communs\DESIGNER
              [06/01/2008|19:22] C:\Program Files\Fichiers communs\Hewlett-Packard
              [06/01/2008|19:34] C:\Program Files\Fichiers communs\HP
              [03/05/2005|02:10] C:\Program Files\Fichiers communs\InstallShield
              [05/01/2008|12:15] C:\Program Files\Fichiers communs\Java
              [17/11/2008|18:33] C:\Program Files\Fichiers communs\Macromedia
              [16/11/2008|13:37] C:\Program Files\Fichiers communs\Mediafour
              [03/05/2005|01:54] C:\Program Files\Fichiers communs\Microsoft Shared
              [03/05/2005|02:00] C:\Program Files\Fichiers communs\MSSoap
              [03/05/2005|02:17] C:\Program Files\Fichiers communs\muvee Technologies
              [03/05/2005|01:54] C:\Program Files\Fichiers communs\ODBC
              [03/05/2005|02:00] C:\Program Files\Fichiers communs\Services
              [03/05/2005|01:54] C:\Program Files\Fichiers communs\SpeechEngines
              [06/01/2008|10:12] C:\Program Files\Fichiers communs\SureThing Shared
              [03/05/2005|02:19] C:\Program Files\Fichiers communs\Symantec Shared
              [03/05/2005|01:59] C:\Program Files\Fichiers communs\System
              [10/01/2009|17:39] C:\Program Files\Fichiers communs\Windows Live
              [05/01/2008|18:17] C:\Program Files\Fichiers communs\WindowsLiveInstaller

              --------------------\\ Process

              ( 45 Processes )

              ... OK !

              --------------------\\ Recherche avec S_Lop

              Aucun fichier / dossier Lop trouvé !

              --------------------\\ Recherche de Fichiers / Dossiers Lop

              C:\DOCUME~1\ALLUSE~1\APPLIC~1\does dog two city
              C:\DOCUME~1\ALLUSE~1\APPLIC~1\does dog two city\Wave wma.dat
              C:\DOCUME~1\AURELI~1\APPLIC~1\ELSE PLUS
              C:\DOCUME~1\AURELI~1\APPLIC~1\ELSE PLUS\AXISNEW.exe
              C:\DOCUME~1\AURELI~1\APPLIC~1\ELSE PLUS\vxjtvqvi.exe
              C:\DOCUME~1\AURELI~1\APPLIC~1\ELSE PLUS\JoyPokeForkBlue.exe
              C:\Program Files\ELSE PLUS
              C:\DOCUME~1\AURELI~1\APPLIC~1\elsepl~1
              C:\DOCUME~1\AURELI~1\APPLIC~1\elsepl~1\AXISNEW.exe
              C:\DOCUME~1\AURELI~1\APPLIC~1\elsepl~1\vxjtvqvi.exe
              C:\DOCUME~1\AURELI~1\APPLIC~1\elsepl~1\JoyPokeForkBlue.exe
              C:\Program Files\elsepl~1
              C:\Program Files\BitTorrent Fastest Tool
              C:\Program Files\BitTorrent Fastest Tool\BitP.exe
              C:\Program Files\BitTorrent Fastest Tool\BitDownload-4.5-setup.exe
              C:\Program Files\BitTorrent Fastest Tool\INSTALL.LOG
              C:\WINDOWS\Tasks\AC7B281B90C8DCCF.job

              --------------------\\ Verification du Registre

              [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
              "book ante"="C:\\DOCUME~1\\AURELI~1\\APPLIC~1\\ELSEPL~1\\AXISNEW.exe"

              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
              "two city internet heck"="C:\\Documents and Settings\\All Users\\Application Data\\does dog two city\\Wave wma.exe"

              --------------------\\ Verification du fichier Hosts

              Fichier Hosts MODIFIE

              127.0.0.1 bin.errorprotector.com ## added by CiD
              127.0.0.1 br.errorsafe.com ## added by CiD
              127.0.0.1 br.winantivirus.com ## added by CiD
              127.0.0.1 br.winfixer.com ## added by CiD
              127.0.0.1 cdn.drivecleaner.com ## added by CiD
              127.0.0.1 cdn.errorsafe.com ## added by CiD
              127.0.0.1 cdn.winsoftware.com ## added by CiD
              127.0.0.1 de.errorsafe.com ## added by CiD
              127.0.0.1 de.winantivirus.com ## added by CiD
              127.0.0.1 download.cdn.drivecleaner.com ## added by CiD
              127.0.0.1 download.cdn.errorsafe.com ## added by CiD
              127.0.0.1 download.cdn.winsoftware.com ## added by CiD
              127.0.0.1 download.errorsafe.com ## added by CiD
              127.0.0.1 download.systemdoctor.com ## added by CiD
              127.0.0.1 download.winantispyware.com ## added by CiD
              127.0.0.1 download.windrivecleaner.com ## added by CiD
              127.0.0.1 download.winfixer.com ## added by CiD
              127.0.0.1 drivecleaner.com ## added by CiD
              127.0.0.1 dynamique.drivecleaner.com ## added by CiD
              127.0.0.1 errorprotector.com ## added by CiD
              127.0.0.1 errorsafe.com ## added by CiD
              127.0.0.1 es.winantivirus.com ## added by CiD
              127.0.0.1 fr.winantivirus.com ## added by CiD
              127.0.0.1 fr.winfixer.com ## added by CiD
              127.0.0.1 go.drivecleaner.com ## added by CiD
              127.0.0.1 go.errorsafe.com ## added by CiD
              127.0.0.1 go.winantispyware.com ## added by CiD
              127.0.0.1 go.winantivirus.com ## added by CiD
              127.0.0.1 hk.winantivirus.com ## added by CiD
              127.0.0.1 instlog.errorsafe.com ## added by CiD
              127.0.0.1 instlog.winantivirus.com ## added by CiD
              127.0.0.1 instlog.winfixer.com ## added by CiD
              127.0.0.1 jsp.drivecleaner.com ## added by CiD
              127.0.0.1 kb.errorsafe.com ## added by CiD
              127.0.0.1 kb.winantivirus.com ## added by CiD
              127.0.0.1 nl.errorsafe.com ## added by CiD
              127.0.0.1 se.errorsafe.com ## added by CiD
              127.0.0.1 secure.drivecleaner.com ## added by CiD
              127.0.0.1 secure.errorsafe.com ## added by CiD
              127.0.0.1 secure.winantispam.com ## added by CiD
              127.0.0.1 secure.winantispy.com ## added by CiD
              127.0.0.1 secure.winantivirus.com ## added by CiD
              127.0.0.1 support.winantivirus.com ## added by CiD
              127.0.0.1 trial.updates.winsoftware.com ## added by CiD
              127.0.0.1 ulog.winantivirus.com ## added by CiD
              127.0.0.1 utils.errorsafe.com ## added by CiD
              127.0.0.1 utils.winantivirus.com ## added by CiD
              127.0.0.1 utils.winfixer.com ## added by CiD
              127.0.0.1 winantispyware.com ## added by CiD
              127.0.0.1 winantivirus.com ## added by CiD
              127.0.0.1 winfixer.com ## added by CiD
              127.0.0.1 winfixer2006.com ## added by CiD
              127.0.0.1 winsoftware.com ## added by CiD
              127.0.0.1 [i]ww/iw.drivecleaner.com ## added by CiD
              127.0.0.1 [i]ww/iw.errorprotector.com ## added by CiD
              127.0.0.1 [i]ww/iw.errorsafe.com ## added by CiD
              127.0.0.1 [i]ww/iw.systemdoctor.com ## added by CiD
              127.0.0.1 [i]ww/iw.utils.winfixer.com ## added by CiD
              127.0.0.1 [i]ww/iw.win-anti-virus-pro.com ## added by CiD
              127.0.0.1 [i]ww/iw.win-virus-pro.com ## added by CiD
              127.0.0.1 [i]ww/iw.winantispam.com ## added by CiD
              127.0.0.1 [i]ww/iw.winantispy.com ## added by CiD
              127.0.0.1 [i]ww/iw.winantispyware.com ## added by CiD
              127.0.0.1 [i]ww/iw.winantivirus.com ## added by CiD
              127.0.0.1 [i]ww/iw.winantiviruspro.com ## added by CiD
              127.0.0.1 [i]ww/iw.windrivecleaner.com ## added by CiD
              127.0.0.1 [i]ww/iw.windrivesafe.com ## added by CiD
              127.0.0.1 [i]ww/iw.winfixer.com ## added by CiD
              127.0.0.1 [i]ww/iw.winfixer2006.com ## added by CiD
              127.0.0.1 [i]ww/iw.winsoftware.com ## added by CiD

              -> 71 [ 70 ## added by CiD ]

              --------------------\\ Recherche de fichiers avec Catchme

              catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
              Rootkit scan 2009-02-10 19:51:15
              Windows 5.1.2600 Service Pack 3 FAT NTAPI
              scanning hidden processes ...
              scanning hidden files ...
              scan completed successfully
              hidden processes: 0
              hidden files: 0

              --------------------\\ Recherche d'autres infections

              --------------------\\ Cracks & Keygens ..

              C:\DOCUME~1\AURELI~1\Mes documents\Mes fichiers re‡us\crack adobe family.txt
              C:\DOCUME~1\AURELI~1\Mes documents\Downloads\Grand Theft Auto Vice City - PC\Crack
              C:\DOCUME~1\AURELI~1\Mes documents\Downloads\Grand Theft Auto Vice City - PC\Crack\gta-vc.exe

              [F:3][D:4]-> C:\DOCUME~1\AURELI~1\LOCALS~1\Temp
              [F:3][D:0]-> C:\DOCUME~1\AURELI~1\Cookies
              [F:8][D:5]-> C:\DOCUME~1\AURELI~1\LOCALS~1\TEMPOR~1\content.IE5
              [F:2][D:0]-> C:\Recycled

              1 - "C:\Lop SD\LopR_1.txt" - 10/02/2009|19:52 - Option : [1]

              --------------------\\ Fin du rapport a 19:52:45
              0
              1. J_O_J_O
                Ok ^^ Maintenant on passe à ton infection Lop du aussi à t'es pub . :::::

                Télécharge LopSD.exe sur ton Bureau
                https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2

                Clique-droit sur le raccourci LopSD présent sur le Bureau et choisis "Exécuter en tant qu'administrateur" pour lancer LopSD.

                Choisis la langue F pour Français puis valide par Entrée.

                Choisis l'option Recherche en saisissant 1 puis valide par Entrée
                .
                * Patiente jusqu'à la fin du scan
                * Poste le rapport généré qui se trouve ici => (C:\lopR.txt)

                (Si le Bureau ne réapparait pas, presse Ctrl+Alt+Suppr, Onglet Fichier, Nouvelle tâche, tape explorer.exe et valide
                0
                1. lilie510 Auteur
                  -----------\\ ToolBar S&D 1.2.8 XP/Vista

                  Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
                  X86-based PC ( Uniprocessor Free : Intel(R) Celeron(R) CPU 2.80GHz )
                  BIOS : Phoenix - AwardBIOS v6.00PG
                  USER : aurelie huret ( Administrator )
                  BOOT : Normal boot
                  Antivirus : Avira AntiVir PersonalEdition Classic 8.0.1.30 (Activated)
                  C:\ (Local Disk) - FAT32 - Total:91 Go (Free:54 Go)
                  D:\ (Local Disk) - NTFS - Total:91 Go (Free:89 Go)
                  E:\ (CD or DVD)
                  F:\ (USB)
                  G:\ (USB)
                  H:\ (USB)
                  I:\ (USB)
                  J:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
                  K:\ (CD or DVD)

                  "C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
                  Option : [2] ( 10/02/2009|19:31 )

                  -----------\\ SUPPRESSION

                  Supprime! - C:\Program Files\Multi_Media_France\INSTALL.LOG
                  Supprime! - C:\Program Files\Multi_Media_France\tbMul1.dll
                  Supprime! - C:\Program Files\Multi_Media_France\UNWISE.EXE
                  Supprime! - C:\Program Files\Multi_Media_France\UNWISE.INI
                  Supprime! - C:\Program Files\Multi_Media_France\toolbar.cfg
                  Supprime! - C:\Program Files\Multi_Media_France\Multi_Media_FranceToolbarHelper.exe
                  Supprime! - C:\Program Files\Multi_Media_France\tbMult.dll
                  Supprime! - C:\Program Files\Multi_Media_France\tbMul0.dll
                  Supprime! - C:\Program Files\MultiMedia France Toolbar\UNWISE.EXE
                  Supprime! - C:\Program Files\MultiMedia France Toolbar\MultiMedia_SSNew.exe
                  Supprime! - C:\Program Files\MultiMedia France Toolbar\Multi_Media_France.xpi
                  Supprime! - C:\Program Files\MultiMedia France Toolbar\Multi_Media_France.exe
                  Supprime! - C:\Program Files\MultiMedia France Toolbar\INSTALL.LOG
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\1px_dark.gif
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\1px_green.gif
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\1px_white.gif
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\ErrorPageTemplate.css
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\Thumbs.db
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\arrowB.gif
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\arrowT.gif
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\arrow_down.gif
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\arrow_red.gif
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\arrow_red2.gif
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\arrow_up.gif
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\bg_pub.gif
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\bg_ttl.gif
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\bgmeteo_results.gif
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\btn_close.gif
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\btn_minus.gif
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\btn_moreforecast.gif
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\dropdown.css
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\help.gif
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\icotemp_placeholder.gif
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\loading.gif
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\news.html
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\rss.xsl
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\rsslib.js
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\spacer.gif
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\tab_icon.png
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\tablib.js
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\tabwelcome_en.html
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\tabwelcome_fr.html
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\vmlib.js
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\xp_close_small.gif
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\yahoo_search.gif
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\NewCfg
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\utf8.js
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\search_fr.gif
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\search.gif
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\left.png
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\right.png
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\top.png
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\bottom.png
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\top_left.png
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\top_right.png
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\bottom_left.png
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\bottom_right.png
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\downfile
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\tabdataV3.js
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\COMBOSEARCH.acs
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\CAlogo.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\DownloadCOM.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\ErrorPageTemplate_search.css
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\YouTube.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\__slider.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\a.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\amazon.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\an.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\arrow.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\autofill.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\b.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\bn.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\c.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\canalblog.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\cn.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\d.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\dictionary2.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\dn.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\email_b.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\equalizer_loading.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\equalizer_off.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\equalizer_on.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\f.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\fn.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\g.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\gaming.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\gn.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\graphred0.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\graphred0_5.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\graphred1.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\graphred1_5.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\graphred2.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\graphred2_5.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\graphred3.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\graphred3_5.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\graphred4.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\graphred4_5.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\graphred5.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\h.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\h_aquarius.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\h_aries.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\h_cancer.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\h_capricorn.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\h_gemini.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\h_leo.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\h_libra.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\h_pisces.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\h_sagittarius.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\h_scorpio.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\h_taurus.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\h_virgo.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\hideremove.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\highlight.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\hn.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\i.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\images01.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\in.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\j.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\jn.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\k.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\kn.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\l.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\ln.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\logo.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\logo_facebook.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\minus.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\minus_on.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\music2.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\n.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\news.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\newsb.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\nn.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\o.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\on.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\p.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\p_yahoo.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\p_yahoo_fr.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\pixsy.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\play.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\play_on.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\plus.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\plus_on.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\pn.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\popup_off.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\popup_on.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\popup_ona.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\q.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\qn.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\r.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\relatedlinks.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\report.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\rn.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\rss1.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\s.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\search.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\settings.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\siteinfo.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\slider.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\sn.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\stars-red1.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\stars-red2.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\stars-red3.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\stars-red4.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\stars-red5.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\stop.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\stop_on.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\t.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\technorati.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\tn.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\tools.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\translate.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\u.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\un.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\v.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\vn.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\w.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\web_fr.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\wikipedia.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\wn.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\x.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\z.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\zn.bmp
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\zoom.bmp
                  Supprime! - C:\Program Files\VMNToolbar\tbuninstall.exe
                  Supprime! - C:\Program Files\VMNToolbar\toolbar.ini
                  Supprime! - C:\Program Files\VMNToolbar\install.ico
                  Supprime! - C:\Program Files\VMNToolbar\uninstall.exe
                  Supprime! - C:\Program Files\VMNToolbar\vmntoolbar.dll
                  Supprime! - C:\Program Files\Multi_Media_France
                  Supprime! - C:\Program Files\MultiMedia France Toolbar
                  Supprime! - C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar
                  Supprime! - C:\Program Files\VMNToolbar

                  -----------\\ Recherche de Fichiers / Dossiers ...

                  -----------\\ Extensions

                  (aurelie huret) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar

                  -----------\\ [..\Internet Explorer\Main]

                  [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
                  "Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
                  "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
                  "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
                  "Search Bar"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
                  "Default_search_url"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
                  "Default_page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"

                  [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
                  "Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
                  "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
                  "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
                  "Start Page"="https://www.msn.com/fr-fr/"
                  "Search Bar"="http://www.bing.com/spresults.aspx"

                  --------------------\\ Recherche d'autres infections

                  --------------------\\ Cracks & Keygens ..

                  C:\DOCUME~1\AURELI~1\Mes documents\Mes fichiers re‡us\crack adobe family.txt
                  C:\DOCUME~1\AURELI~1\Mes documents\Downloads\Grand Theft Auto Vice City - PC\Crack
                  C:\DOCUME~1\AURELI~1\Mes documents\Downloads\Grand Theft Auto Vice City - PC\Crack\gta-vc.exe

                  1 - "C:\ToolBar SD\TB_1.txt" - 10/02/2009|18:57 - Option : [1]
                  2 - "C:\ToolBar SD\TB_2.txt" - 10/02/2009|19:33 - Option : [2]

                  -----------\\ Fin du rapport a 19:33:54,82

                  Pour le GTA, c'est en même le jeu de mon père donc voilà ^^
                  0
                  1. J_O_J_O
                    Merci Ma lilie ^^ Maintenant relance Toolbar S&D et passe l'option 2 s'il te plaît puis envoie le rapport làà :)

                    [ sinon joue tu souvent à Gta sur le pc ?! si oui bin laisse t'es crack même si ils son nocif pour le pc . Si Non supprimes les :::

                    C:\DOCUME~1\AURELI~1\Mes documents\Mes fichiers re‡us\crack adobe family.txt
                    C:\DOCUME~1\AURELI~1\Mes documents\Downloads\Grand Theft Auto Vice City - PC\Crack
                    C:\DOCUME~1\AURELI~1\Mes documents\Downloads\Grand Theft Auto Vice City - PC\Crack\gta-vc.exe
                    0
                    1. lilie510 Auteur
                      -----------\\ ToolBar S&D 1.2.8 XP/Vista

                      Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
                      X86-based PC ( Uniprocessor Free : Intel(R) Celeron(R) CPU 2.80GHz )
                      BIOS : Phoenix - AwardBIOS v6.00PG
                      USER : aurelie huret ( Administrator )
                      BOOT : Normal boot
                      Antivirus : Avira AntiVir PersonalEdition Classic 8.0.1.30 (Activated)
                      C:\ (Local Disk) - FAT32 - Total:91 Go (Free:54 Go)
                      D:\ (Local Disk) - NTFS - Total:91 Go (Free:89 Go)
                      E:\ (CD or DVD)
                      F:\ (USB)
                      G:\ (USB)
                      H:\ (USB)
                      I:\ (USB)
                      J:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
                      K:\ (CD or DVD)
                      L:\ (USB) - FAT - Total:124 Mo (Free:0 Go)

                      "C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
                      Option : [1] ( 10/02/2009|18:56 )

                      -----------\\ Recherche de Fichiers / Dossiers ...

                      C:\Program Files\Multi_Media_France
                      C:\Program Files\Multi_Media_France\INSTALL.LOG
                      C:\Program Files\Multi_Media_France\tbMul1.dll
                      C:\Program Files\Multi_Media_France\UNWISE.EXE
                      C:\Program Files\Multi_Media_France\UNWISE.INI
                      C:\Program Files\Multi_Media_France\toolbar.cfg
                      C:\Program Files\Multi_Media_France\Multi_Media_FranceToolbarHelper.exe
                      C:\Program Files\Multi_Media_France\tbMult.dll
                      C:\Program Files\Multi_Media_France\tbMul0.dll
                      C:\Program Files\MultiMedia France Toolbar
                      C:\Program Files\MultiMedia France Toolbar\UNWISE.EXE
                      C:\Program Files\MultiMedia France Toolbar\MultiMedia_SSNew.exe
                      C:\Program Files\MultiMedia France Toolbar\Multi_Media_France.xpi
                      C:\Program Files\MultiMedia France Toolbar\Multi_Media_France.exe
                      C:\Program Files\MultiMedia France Toolbar\INSTALL.LOG
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\1px_dark.gif
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\1px_green.gif
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\1px_white.gif
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\ErrorPageTemplate.css
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\Thumbs.db
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\arrowB.gif
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\arrowT.gif
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\arrow_down.gif
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\arrow_red.gif
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\arrow_red2.gif
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\arrow_up.gif
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\bg_pub.gif
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\bg_ttl.gif
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\bgmeteo_results.gif
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\btn_close.gif
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\btn_minus.gif
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\btn_moreforecast.gif
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\dropdown.css
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\help.gif
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\icotemp_placeholder.gif
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\loading.gif
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\news.html
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\rss.xsl
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\rsslib.js
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\spacer.gif
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\tab_icon.png
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\tablib.js
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\tabwelcome_en.html
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\tabwelcome_fr.html
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\vmlib.js
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\xp_close_small.gif
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\yahoo_search.gif
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\NewCfg
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\utf8.js
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\search_fr.gif
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\search.gif
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\left.png
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\right.png
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\top.png
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\bottom.png
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\top_left.png
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\top_right.png
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\bottom_left.png
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\bottom_right.png
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\downfile
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\tabdataV3.js
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\COMBOSEARCH.acs
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\CAlogo.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\DownloadCOM.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\ErrorPageTemplate_search.css
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\YouTube.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\__slider.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\a.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\amazon.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\an.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\arrow.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\autofill.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\b.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\bn.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\c.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\canalblog.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\cn.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\d.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\dictionary2.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\dn.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\email_b.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\equalizer_loading.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\equalizer_off.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\equalizer_on.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\f.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\fn.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\g.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\gaming.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\gn.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\graphred0.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\graphred0_5.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\graphred1.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\graphred1_5.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\graphred2.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\graphred2_5.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\graphred3.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\graphred3_5.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\graphred4.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\graphred4_5.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\graphred5.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\h.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\h_aquarius.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\h_aries.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\h_cancer.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\h_capricorn.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\h_gemini.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\h_leo.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\h_libra.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\h_pisces.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\h_sagittarius.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\h_scorpio.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\h_taurus.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\h_virgo.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\hideremove.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\highlight.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\hn.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\i.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\images01.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\in.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\j.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\jn.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\k.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\kn.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\l.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\ln.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\logo.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\logo_facebook.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\minus.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\minus_on.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\music2.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\n.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\news.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\newsb.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\nn.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\o.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\on.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\p.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\p_yahoo.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\p_yahoo_fr.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\pixsy.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\play.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\play_on.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\plus.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\plus_on.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\pn.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\popup_off.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\popup_on.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\popup_ona.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\q.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\qn.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\r.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\relatedlinks.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\report.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\rn.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\rss1.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\s.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\search.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\settings.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\siteinfo.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\slider.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\sn.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\stars-red1.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\stars-red2.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\stars-red3.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\stars-red4.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\stars-red5.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\stop.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\stop_on.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\t.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\technorati.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\tn.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\tools.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\translate.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\u.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\un.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\v.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\vn.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\w.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\web_fr.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\wikipedia.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\wn.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\x.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\z.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\zn.bmp
                      C:\DOCUME~1\AURELI~1\APPLIC~1\VMNToolbar\zoom.bmp
                      C:\Program Files\VMNToolbar
                      C:\Program Files\VMNToolbar\tbuninstall.exe
                      C:\Program Files\VMNToolbar\toolbar.ini
                      C:\Program Files\VMNToolbar\install.ico
                      C:\Program Files\VMNToolbar\uninstall.exe
                      C:\Program Files\VMNToolbar\vmntoolbar.dll

                      -----------\\ Extensions

                      (aurelie huret) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar

                      -----------\\ [..\Internet Explorer\Main]

                      [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
                      "Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
                      "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
                      "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
                      "Search Bar"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
                      "Default_search_url"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
                      "Default_page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"

                      [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
                      "Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
                      "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
                      "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
                      "Start Page"="https://www.msn.com/fr-fr"
                      "Search Bar"="http://www.bing.com/spresults.aspx"

                      --------------------\\ Recherche d'autres infections

                      --------------------\\ Cracks & Keygens ..

                      C:\DOCUME~1\AURELI~1\Mes documents\Mes fichiers re‡us\crack adobe family.txt
                      C:\DOCUME~1\AURELI~1\Mes documents\Downloads\Grand Theft Auto Vice City - PC\Crack
                      C:\DOCUME~1\AURELI~1\Mes documents\Downloads\Grand Theft Auto Vice City - PC\Crack\gta-vc.exe

                      1 - "C:\ToolBar SD\TB_1.txt" - 10/02/2009|18:57 - Option : [1]

                      -----------\\ Fin du rapport a 18:57:58,65
                      0
                      1. J_O_J_O
                        Non quoi que possible . Mais cherche bien [ ta bien fait le scan pourtant . ]
                        0
                        1. lilie510 Auteur
                          je ne les pas, il peut se trouver sous un autre nom?
                          0
                          2. lilie510 Auteur
                            c'est quel txt qui faut ouvrir?
                            0
                            1. J_O_J_O
                              Oui . Sinon va dans poste de travail ----> Disc C ---> Ta le .txt ouvre le [ rapport] et copie le ici .
                              0
                              1. lilie510 Auteur
                                c'est fait, je doit avoir un bloc note qui doit s'ouvrir??
                                0
                                1. J_O_J_O
                                  Merci maintenant on passe à une toolbar Mauvaise :::

                                  ---> Télécharge Toolbar S&D (Team IDN) sur ton Bureau.
                                  * Lance l'installation du programme en exécutant le fichier téléchargé.
                                  * Double-clique maintenant sur le raccourci de Toolbar S&D.
                                  * Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.
                                  * Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.
                                  * Poste le rapport généré. (C:\TB.txt)
                                  0
                                  1. lilie510 Auteur
                                    Logfile of Trend Micro HijackThis v2.0.2
                                    Scan saved at 18:11:09, on 10/02/2009
                                    Platform: Windows XP SP3 (WinNT 5.01.2600)
                                    MSIE: Internet Explorer v7.00 (7.00.6000.16762)
                                    Boot mode: Normal

                                    Running processes:
                                    C:\WINDOWS\System32\smss.exe
                                    C:\WINDOWS\system32\winlogon.exe
                                    C:\WINDOWS\system32\services.exe
                                    C:\WINDOWS\system32\lsass.exe
                                    C:\WINDOWS\system32\svchost.exe
                                    C:\WINDOWS\System32\svchost.exe
                                    C:\WINDOWS\system32\svchost.exe
                                    C:\WINDOWS\system32\spoolsv.exe
                                    C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
                                    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                                    C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
                                    C:\WINDOWS\system32\nvsvc32.exe
                                    C:\WINDOWS\system32\HPZipm12.exe
                                    C:\WINDOWS\system32\svchost.exe
                                    C:\WINDOWS\system32\wscntfy.exe
                                    C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
                                    C:\Program Files\DNA\btdna.exe
                                    C:\WINDOWS\system32\ctfmon.exe
                                    C:\Program Files\eMule\emule.exe
                                    C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkcalrem.exe
                                    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
                                    C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe
                                    C:\WINDOWS\System32\svchost.exe
                                    C:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe
                                    C:\Documents and Settings\aurelie huret\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe
                                    C:\Documents and Settings\aurelie huret\Application Data\Microsoft\Live Search\Mise-a-jour-LiveSearch.exe
                                    C:\PROGRA~1\WIDCOMM\LOGICI~1\BTSTAC~1.EXE
                                    C:\Program Files\Messenger\msmsgs.exe
                                    C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
                                    C:\Program Files\Windows Live\Contacts\wlcomm.exe
                                    C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
                                    C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
                                    C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
                                    C:\WINDOWS\explorer.exe
                                    C:\Program Files\Mozilla Firefox\firefox.exe
                                    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

                                    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                                    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
                                    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/ie/defaults/su/yme/*https://fr.yahoo.com/?p=us
                                    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                                    R3 - URLSearchHook: Multi Media France Toolbar - {7009fcd4-05be-44f4-9583-93fe419ab7b0} - C:\Program Files\Multi_Media_France\tbMul0.dll
                                    O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                                    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
                                    O2 - BHO: Multi Media France Toolbar - {7009fcd4-05be-44f4-9583-93fe419ab7b0} - C:\Program Files\Multi_Media_France\tbMul0.dll
                                    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                                    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                                    O2 - BHO: (no name) - {A057A204-BACC-4D26-8287-79A187E26987} - (no file)
                                    O3 - Toolbar: Multi Media France Toolbar - {7009fcd4-05be-44f4-9583-93fe419ab7b0} - C:\Program Files\Multi_Media_France\tbMul0.dll
                                    O3 - Toolbar: (no name) - {A057A204-BACC-4D26-8287-79A187E26987} - (no file)
                                    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
                                    O4 - HKLM\..\Run: [two city internet heck] C:\Documents and Settings\All Users\Application Data\does dog two city\Wave wma.exe
                                    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
                                    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
                                    O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
                                    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
                                    O4 - HKCU\..\Run: [book ante] C:\DOCUME~1\AURELI~1\APPLIC~1\ELSEPL~1\AXISNEW.exe
                                    O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eMule\emule.exe -AutoStart
                                    O4 - HKLM\..\Policies\Explorer\Run: []
                                    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
                                    O4 - HKUS\S-1-5-19\..\RunOnce: [] (User 'SERVICE LOCAL')
                                    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
                                    O4 - HKUS\S-1-5-20\..\RunOnce: [] (User 'SERVICE RÉSEAU')
                                    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
                                    O4 - HKUS\S-1-5-18\..\RunOnce: [] (User 'SYSTEM')
                                    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
                                    O4 - HKUS\.DEFAULT\..\RunOnce: [] (User 'Default user')
                                    O4 - Startup: Registration .LNK = C:\Program Files\Ubisoft\Telltale Games\CSI-3 Dimensions of Murder Demo\Registration\RegistrationReminder.exe
                                    O4 - Startup: MSN Pictures Displayer.lnk = C:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe
                                    O4 - Startup: Outil de notification Live Search.lnk = C:\Documents and Settings\aurelie huret\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe
                                    O4 - Global Startup: Rappels du Calendrier Microsoft Works.lnk = ?
                                    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
                                    O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
                                    O4 - Global Startup: BTTray.lnk = ?
                                    O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
                                    O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
                                    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000
                                    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                                    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                                    O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                                    O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                                    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
                                    O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
                                    O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
                                    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                                    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                                    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                                    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                                    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
                                    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
                                    O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
                                    O18 - Protocol: symres - {AA1061FE-6C41-421F-9344-69640C9732AB} - C:\Program Files\Norton Internet Security\Norton Internet Security\Engine\16.2.0.7\coIEPlg.dll (file missing)
                                    O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Alpha Networks Inc. - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
                                    O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
                                    O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
                                    O23 - Service: Planificateur LiveUpdate automatique (Automatic LiveUpdate Scheduler) - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
                                    O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                                    O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
                                    O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
                                    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
                                    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
                                    0
                                    1. J_O_J_O
                                      Ouaip nikel peut-tu refaire un nouveau hijackthis s'il te plaît :)
                                      0
                                      1. lilie510 Auteur
                                        ------- LOGFILE OF AD-REMOVER 1.1.0.9 | ONLY XP/VISTA -------

                                        Updated by C_XX on 07/02/2009 at 14:30

                                        *** LIMITED TO ***

                                        Boonty/BoontyGames
                                        Eorezo
                                        Infected Poker Softwares
                                        FunWebProduct/MyWay/MyWebSearch
                                        It's TV
                                        Sweetim

                                        ******************

                                        Start at: 17:41:04 | Mar 10/02/2009 | Microsoft® Windows XP™ SP3 (V5.1.2600)
                                        Boot mode: Normal
                                        Option: CLEAN | Executed from: C:\Program Files\Ad-remover\Ad-remover.bat
                                        Pc: ACER-A7D3E14A69 | User: aurelie huret ( Current user is an administrator)
                                        Drive(s):
                                        - C:\ (File System: FAT32)
                                        - D:\ (File System: NTFS)
                                        - J:\ (File System: CDFS)
                                        System Drive: C:\
                                        Windows Directory: C:\WINDOWS\
                                        System Directory: C:\WINDOWS\System32\

                                        --- Running Processes: 48

                                        (!) ---- IE start pages/Tabs reset

                                        +--------------------| Boonty/Boonty Games Elements Deleted :

                                        Service: "Boonty Games"
                                        .
                                        HKCU\SOFTWARE\Boonty
                                        HKLM\Software\Boonty
                                        HKLM\SYSTEM\ControlSet002\Enum\Root\LEGACY_BOONTY_GAMES
                                        HKLM\SYSTEM\ControlSet002\Services\Boonty Games
                                        .
                                        C:\Program Files\Boonty
                                        C:\Program Files\BoontyGames
                                        C:\Program Files\Fichiers communs\BOONTY Shared
                                        C:\Documents and Settings\All Users\Application Data\BOONTY

                                        +--------------------| Eorezo Elements Deleted :

                                        HKCR\EoRezoBHO.EoBho
                                        HKCR\EoRezoBHO.EoBho.1
                                        HKCR\Interface\{B0D071A1-36B3-4757-A126-14C89C56013A}
                                        HKCR\Typelib\{B4C656C9-F2E9-4E77-B3F4-443DF2BD778F}
                                        HKCU\SOFTWARE\EoRezo
                                        HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{64F56FC1-1272-44CD-BA6E-39723696E350}
                                        HKLM\SOFTWARE\EoRezo
                                        HKLM\SOFTWARE\Classes\CLSID\{64F56FC1-1272-44CD-BA6E-39723696E350}
                                        HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64F56FC1-1272-44CD-BA6E-39723696E350}
                                        .
                                        C:\Program Files\EoRezo
                                        C:\Documents and Settings\aurelie huret\Application Data\EoRezo

                                        +--------------------| Infected Poker Softwares Elements Deleted :

                                        HKCU\Software\Grand Virtual
                                        .
                                        C:\Documents and Settings\aurelie huret\Cookies\aurelie_huret@partypoker[1].txt

                                        +--------------------| FunWebProducts/MyWay/MyWebSearch/MyGlobalSearch Elements Deleted :

                                        .
                                        .

                                        +--------------------| It's TV Elements Deleted :

                                        HKCU\SOFTWARE\ItsLabel
                                        HKLM\SOFTWARE\ItsLabel
                                        .
                                        C:\Documents and Settings\aurelie huret\Application Data\ItsLabel

                                        +--------------------| Sweetim Elements Deleted :

                                        .

                                        (!) ---- Temp files deleted.
                                        (!) ---- Recycle bin emptied in all drives.

                                        +--------------------| Added Scan :

                                        ---- Mozilla FireFox Version 3.0.6 ----

                                        ProfilePath: lvja5iwp.default
                                        .
                                        Prefs.js: Browser.Search.DefaultEngineName: "Yahoo"
                                        Prefs.js: Browser.Search.SelectedEngine: "Google"
                                        Prefs.js: Browser.Search.DefaultUrl: "hxxp://fr.search.yahoo.com/search?ei=UTF-8&fr=ytff-divx&p="
                                        .
                                        .
                                        .
                                        .
                                        .

                                        ---- Internet Explorer Version 7.0.5730.13 ----

                                        +-[HKEY_CURRENT_USER\..\Internet Explorer\Main]

                                        Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
                                        Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                                        Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
                                        Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                                        Start page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

                                        +-[HKEY_USERS\S-1-5-21-763977465-1272301786-478973442-1006\..\Internet Explorer\Main]

                                        Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
                                        Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                                        Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
                                        Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                                        Start page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

                                        +-[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]

                                        Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
                                        Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                                        Search bar: hxxp://search.msn.com/spbasic.htm
                                        Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                                        Start page: hxxp://fr.msn.com/

                                        +-[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]

                                        Tabs: hxxp://ieframe.dll/tabswelcome.htm

                                        +---------------------------------------------------------------------------+

                                        [~4577 Bytes] - "C:\Ad-Report-Scan-10.02.2009.log"
                                        [~4302 Bytes] - "C:\Ad-Report-Clean-10.02.2009.log"
                                        -
                                        C:\Program Files\Ad-remover\TOOLS\BACKUP\10.02.2009 - Prefs.js

                                        End at: 17:44:51 | 10/02/2009
                                        .
                                        +--------------------| E.O.F - 98 Lines
                                        .

                                        je crois que c'est ça ?
                                        0
                                        • 1
                                        • 2

                                        Discussions similaires

                                        Ouvrir un fichier .pub sans Publisher
                                        baissaoui

                                        0 réponse
                                        Ouvrir document Publisher sans Publisher
                                        Curtis Hayes

                                        7 réponses
                                        Lire, afficher, exécuter un fichier *.pub sans Publisher
                                        jeannoellaurenti

                                        1 réponse
                                        Publicité "Bidru n'en peut plus"
                                        _Ritchi_

                                        5 réponses
                                        musique de pub
                                        zabou

                                        7 réponses