Antivirxp08

apyrel60 -  
bonjour
j'ai attrapé antivirxp08 comment s'en debarrasser merci

28 réponses

Résumé de la discussion

Une infection antivirxp08 et des composants indésirables associés, notamment la barre d'outils Dealio, perturbent le fonctionnement du navigateur et nécessitent une procédure de nettoyage pour rétablir le système. Plusieurs réponses préconisent d'utiliser Toolbar-S&D pour détecter et supprimer les éléments malveillants, puis de générer un nouveau rapport et de redémarrer le système afin d'évaluer l'étendue de l'infection. Des rapports HijackThis et des listes de services et démarrage permettent d'identifier les éléments à retirer, certains participants soulignant que les protections antivirus peuvent être insuffisantes face à ce type de menace. En cas de doute, la démarche inclut de renforcer les mesures de sécurité, pare-feu, antispyware et mises à jour Windows, afin de prévenir une réinfection et d'améliorer la stabilité du poste.

Bobot (l’IA à votre service)
  1. Utilisateur anonyme
    bonjour pour control stp fait ceci

    Télécharge Toolbar-S&D (Team IDN) sur ton Bureau.
    https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2

    * Lance l'installation du programme en exécutant le fichier téléchargé.
    * Double-clique maintenant sur le raccourci de Toolbar-S&D.
    * Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.
    * Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.
    * Poste le rapport généré. (C:\TB.txt)

    et pour repondre a ta question , tes protections ne sont pas bonnes , tu as avast qui n'est plus tres bon !! , tu n'aspas de parefeu autres que celui de window qui est tres mauvais ! , et tu n'as pas d'antispyware et cerise sur le gateau ( ;-)) ) ton pc n'est pas a jours de ces windowsz updates ! voici les principales raisons de l'infection de ton pc ! ;-))))))))))))))))))))))))))))
    0
    1. apyrel60 Auteur
      ça y est je l'ai enlevé en esperant qu'il ne revienrdra pas car cé galere ce truc . a ton avis cé bon maintenant je peu etre tranquille ?
      Mais je ne comprends pas pk avast n'a pas detecté ce virus
      0
      1. Utilisateur anonyme
        supprime le , le dossier dois etre vide ! non ?
        0
        1. apyrel60 Auteur
          ben ça a l'air d'aller pour l'instant mais dans les programmes j'ai toujours antivirusxp08 est ce normal dois je le desinstaller
          0
          2. Utilisateur anonyme
            parfait comment se porte le pc ?
            0
            1. apyrel60 Auteur
              Logfile of Trend Micro HijackThis v2.0.2
              Scan saved at 19:31:47, on 26/08/2008
              Platform: Windows XP SP2 (WinNT 5.01.2600)
              MSIE: Internet Explorer v7.00 (7.00.6000.16705)
              Boot mode: Normal

              Running processes:
              C:\WINDOWS\System32\smss.exe
              C:\WINDOWS\system32\winlogon.exe
              C:\WINDOWS\system32\services.exe
              C:\WINDOWS\system32\lsass.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\System32\svchost.exe
              C:\WINDOWS\system32\svchost.exe
              C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
              C:\Program Files\Alwil Software\Avast4\ashServ.exe
              C:\WINDOWS\system32\spoolsv.exe
              C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
              C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
              C:\WINDOWS\system32\cisvc.exe
              C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
              C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
              C:\WINDOWS\system32\nvsvc32.exe
              C:\WINDOWS\System32\snmp.exe
              C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
              C:\WINDOWS\System32\svchost.exe
              C:\WINDOWS\system32\mqsvc.exe
              C:\Program Files\Canon\CAL\CALMAIN.exe
              C:\WINDOWS\system32\mqtgsvc.exe
              C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
              C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
              C:\WINDOWS\system32\wuauclt.exe
              C:\WINDOWS\Explorer.EXE
              C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
              C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
              C:\WINDOWS\system32\ctfmon.exe
              C:\Program Files\Picasa2\PicasaMediaDetector.exe
              C:\Program Files\Skype\Phone\Skype.exe
              C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
              C:\Program Files\Logitech\SetPoint\SetPoint.exe
              C:\WINDOWS\system32\wuauclt.exe
              C:\Program Files\Fichiers communs\Logitech\KhalShared\KHALMNPR.EXE
              C:\Program Files\Skype\Plugin Manager\skypePM.exe
              C:\Program Files\Windows Live\Messenger\usnsvc.exe
              C:\WINDOWS\system32\cidaemon.exe
              C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

              R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr
              R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
              R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer optimisé pour MSN
              R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
              R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
              O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
              O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
              O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
              O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
              O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
              O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
              O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
              O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
              O2 - BHO: Zango /fleok=1D8A83A5C5E6117A9BA56C2A1FBB39BFE4976E26CAEDDA7B5879462A3DC0C7 - {E1BACF55-35E1-4E47-9247-2D48660E5545} - (no file)
              O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
              O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
              O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
              O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
              O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
              O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
              O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
              O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
              O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
              O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
              O4 - HKCU\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
              O4 - HKCU\..\Run: [swg] C:\WINDOWS\system32\regsvr32.exe
              O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
              O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
              O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
              O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
              O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
              O4 - Global Startup: Logitech SetPoint.lnk = ?
              O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
              O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
              O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
              O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
              O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~4\GOEC62~1.DLL
              O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
              O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
              O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
              O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
              O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
              O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
              O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
              O23 - Service: Google Desktop Manager 5.7.806.10245 (GoogleDesktopManager-061008-081103) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
              O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
              O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
              O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
              O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
              O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/Robert60/LOCALS~1/Temp/msohtml1/01/clip_image001.jpg
              0
              1. Utilisateur anonyme
                parfait , on va en supprimer un peu moin ;-))

                recommence la manip en fixant ces lignes ( justes celle ci ;-))

                O3 - Toolbar: (no name) - {E1BACF55-35E1-4E47-9247-2D48660E5545} - (no file)
                O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
                O16 - DPF: {2250C29C-C5E9-4F55-BE4E-01E45A40FCF1} (CMediaMix Object) - http://musicmix.messenger.msn.com/Medialogic.CAB
                O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.mail.live.com/mail/w1/resources/MSNPUpld.cab
                O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
                O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
                O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://arrobert.spaces.live.com/PhotoUpload/MsnPUpld.cab
                O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
                O16 - DPF: {BD8667B7-38D8-4C77-B580-18C3E146372C} (Creative Toolbox Plug-in) - http://kiw.imgag.com/imgag/cp/install/crusher-kiwen.cab
                O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
                O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} (Java Plug-in 1.6.0_03) -
                O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
                O16 - DPF: {E1342154-4889-42B5-BEF6-19237577048F} (OberongamesLoader Object) - http://ww25.incredijeux.com/online/online2/zuma/oberongamesloader.cab
                O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
                O16 - DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} (GoPetsWeb Control) - https://secure.gopetslive.com/dev/GoPetsWeb.cab
                O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/Robert60/LOCALS~1/Temp/msohtml1/01/clip_image001.jpg
                0
                1. apyrel60 Auteur
                  Logfile of Trend Micro HijackThis v2.0.2
                  Scan saved at 19:11:50, on 26/08/2008
                  Platform: Windows XP SP2 (WinNT 5.01.2600)
                  MSIE: Internet Explorer v7.00 (7.00.6000.16705)
                  Boot mode: Normal

                  Running processes:
                  C:\WINDOWS\System32\smss.exe
                  C:\WINDOWS\system32\winlogon.exe
                  C:\WINDOWS\system32\services.exe
                  C:\WINDOWS\system32\lsass.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\WINDOWS\System32\svchost.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                  C:\Program Files\Alwil Software\Avast4\ashServ.exe
                  C:\WINDOWS\system32\spoolsv.exe
                  C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                  C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                  C:\WINDOWS\system32\cisvc.exe
                  C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                  C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
                  C:\WINDOWS\system32\nvsvc32.exe
                  C:\WINDOWS\System32\snmp.exe
                  C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
                  C:\WINDOWS\System32\svchost.exe
                  C:\WINDOWS\system32\mqsvc.exe
                  C:\WINDOWS\Explorer.EXE
                  C:\Program Files\Canon\CAL\CALMAIN.exe
                  C:\WINDOWS\system32\mqtgsvc.exe
                  C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                  C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                  C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
                  C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
                  C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
                  C:\WINDOWS\system32\ctfmon.exe
                  C:\Program Files\Picasa2\PicasaMediaDetector.exe
                  C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                  C:\Program Files\Skype\Phone\Skype.exe
                  C:\Program Files\Logitech\SetPoint\SetPoint.exe
                  C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
                  C:\Program Files\Fichiers communs\Logitech\KhalShared\KHALMNPR.EXE
                  C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
                  C:\Program Files\Skype\Plugin Manager\skypePM.exe
                  C:\WINDOWS\system32\wuauclt.exe

                  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr
                  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr
                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer optimisé pour MSN
                  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                  R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
                  O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                  O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
                  O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
                  O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                  O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                  O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                  O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
                  O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                  O2 - BHO: Zango /fleok=1D8A83A5C5E6117A9BA56C2A1FBB39BFE4976E26CAEDDA7B5879462A3DC0C7 - {E1BACF55-35E1-4E47-9247-2D48660E5545} - (no file)
                  O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                  O3 - Toolbar: (no name) - {E1BACF55-35E1-4E47-9247-2D48660E5545} - (no file)
                  O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
                  O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
                  O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
                  O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
                  O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
                  O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                  O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
                  O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
                  O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
                  O4 - HKCU\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
                  O4 - HKCU\..\Run: [swg] C:\WINDOWS\system32\regsvr32.exe
                  O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
                  O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
                  O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
                  O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
                  O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
                  O4 - Global Startup: Logitech SetPoint.lnk = ?
                  O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
                  O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
                  O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
                  O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
                  O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~4\GOEC62~1.DLL
                  O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                  O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                  O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                  O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                  O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                  O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                  O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
                  O23 - Service: Google Desktop Manager 5.7.806.10245 (GoogleDesktopManager-061008-081103) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
                  O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                  O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
                  O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
                  O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
                  O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/Robert60/LOCALS~1/Temp/msohtml1/01/clip_image001.jpg
                  0
                  1. Utilisateur anonyme
                    bon ouvre hijackthis
                    open misc the tool
                    clic sur backup
                    selectionne toutes ces les case
                    puis clic sur restore

                    redemarre le pc et poste un nouveau rapport hijackthis
                    0
                    1. apyrel60 Auteur
                      non j'ai coché que les lignes qui etait sur la liste
                      0
                      1. Utilisateur anonyme
                        tu as cocher d'autres lignes ????
                        0
                        1. apyrel60 Auteur
                          Logfile of Trend Micro HijackThis v2.0.2
                          Scan saved at 18:50:42, on 26/08/2008
                          Platform: Windows XP SP2 (WinNT 5.01.2600)
                          MSIE: Internet Explorer v7.00 (7.00.6000.16705)
                          Boot mode: Normal

                          Running processes:
                          C:\WINDOWS\System32\smss.exe
                          C:\WINDOWS\system32\winlogon.exe
                          C:\WINDOWS\system32\services.exe
                          C:\WINDOWS\system32\lsass.exe
                          C:\WINDOWS\system32\svchost.exe
                          C:\WINDOWS\System32\svchost.exe
                          C:\WINDOWS\system32\svchost.exe
                          C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                          C:\Program Files\Alwil Software\Avast4\ashServ.exe
                          C:\WINDOWS\system32\spoolsv.exe
                          C:\WINDOWS\system32\cisvc.exe
                          C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                          C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
                          C:\WINDOWS\system32\nvsvc32.exe
                          C:\WINDOWS\System32\snmp.exe
                          C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
                          C:\WINDOWS\System32\svchost.exe
                          C:\WINDOWS\system32\mqsvc.exe
                          C:\Program Files\Canon\CAL\CALMAIN.exe
                          C:\WINDOWS\system32\mqtgsvc.exe
                          C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                          C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                          C:\WINDOWS\Explorer.EXE
                          C:\WINDOWS\system32\wuauclt.exe
                          C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

                          O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
                          O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                          O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                          O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                          O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                          O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
                          O23 - Service: Google Desktop Manager 5.7.806.10245 (GoogleDesktopManager-061008-081103) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
                          O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                          O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
                          O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
                          O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
                          0
                          1. Utilisateur anonyme
                            deconnecte toi et ferme tou tes programmes en cours

                            ouvre hijackthis
                            do a scan systeme only
                            coche les cases qui se trouvent devant ces lignes
                            puis clic sur fix chequed

                            O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
                            O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                            O2 - BHO: Zango /fleok=1D8A83A5C5E6117A9BA56C2A1FBB39BFE4976E26CAEDDA7B58794­62A3DC0C7 - {E1BACF55-35E1-4E47-9247-2D48660E5545} - (no file)
                            O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
                            O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
                            O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                            O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
                            O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
                            O4 - HKCU\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
                            O3 - Toolbar: (no name) - {E1BACF55-35E1-4E47-9247-2D48660E5545} - (no file)
                            O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
                            O16 - DPF: {2250C29C-C5E9-4F55-BE4E-01E45A40FCF1} (CMediaMix Object) - http://musicmix.messenger.msn.com/Medialogic.CAB
                            O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.mail.live.com/mail/w1/resources/MSNPUpld.cab
                            O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
                            O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
                            O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://arrobert.spaces.live.com/PhotoUpload/MsnPUpld.cab
                            O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
                            O16 - DPF: {BD8667B7-38D8-4C77-B580-18C3E146372C} (Creative Toolbox Plug-in) - http://kiw.imgag.com/imgag/cp/install/crusher-kiwen.cab
                            O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
                            O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} (Java Plug-in 1.6.0_03) -
                            O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
                            O16 - DPF: {E1342154-4889-42B5-BEF6-19237577048F} (OberongamesLoader Object) - http://ww25.incredijeux.com/online/online2/zuma/oberongamesloader.cab
                            O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
                            O16 - DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} (GoPetsWeb Control) - https://secure.gopetslive.com/dev/GoPetsWeb.cab
                            O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/Robert60/LOCALS~1/Temp/msohtml1/01/clip_image001.jpg

                            redemarre ton pc et poste un nouveau rapport hijackthis

                            fait le point et dit moi comment se porte le pc ?
                            0
                            1. apyrel60 Auteur
                              on en est ou il reste beaucoup a enlever ? j'en reviens pas de toutes ces manip qu'il faut faire cé galere ces virus
                              0
                              1. apyrel60 Auteur
                                Logfile of Trend Micro HijackThis v2.0.2
                                Scan saved at 18:23:27, on 26/08/2008
                                Platform: Windows XP SP2 (WinNT 5.01.2600)
                                MSIE: Internet Explorer v7.00 (7.00.6000.16705)
                                Boot mode: Normal

                                Running processes:
                                C:\WINDOWS\System32\smss.exe
                                C:\WINDOWS\system32\winlogon.exe
                                C:\WINDOWS\system32\services.exe
                                C:\WINDOWS\system32\lsass.exe
                                C:\WINDOWS\system32\svchost.exe
                                C:\WINDOWS\System32\svchost.exe
                                C:\WINDOWS\system32\svchost.exe
                                C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                                C:\Program Files\Alwil Software\Avast4\ashServ.exe
                                C:\WINDOWS\system32\spoolsv.exe
                                C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                                C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                                C:\WINDOWS\system32\cisvc.exe
                                C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                                C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
                                C:\WINDOWS\system32\nvsvc32.exe
                                C:\WINDOWS\System32\snmp.exe
                                C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
                                C:\WINDOWS\System32\svchost.exe
                                C:\WINDOWS\system32\mqsvc.exe
                                C:\Program Files\Canon\CAL\CALMAIN.exe
                                C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
                                C:\WINDOWS\system32\ctfmon.exe
                                C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
                                C:\WINDOWS\system32\mqtgsvc.exe
                                C:\Program Files\Picasa2\PicasaMediaDetector.exe
                                C:\Program Files\Skype\Phone\Skype.exe
                                C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
                                C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                                C:\Program Files\Logitech\SetPoint\SetPoint.exe
                                C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                                C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                                C:\Program Files\Fichiers communs\Logitech\KhalShared\KHALMNPR.EXE
                                C:\Program Files\Skype\Plugin Manager\skypePM.exe
                                C:\WINDOWS\system32\wuauclt.exe
                                C:\Program Files\Windows Live\Messenger\usnsvc.exe
                                C:\WINDOWS\system32\cidaemon.exe
                                C:\WINDOWS\explorer.exe
                                C:\Program Files\Internet Explorer\IEXPLORE.EXE
                                C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
                                C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

                                R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr
                                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr
                                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                                R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer optimisé pour MSN
                                R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                                R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
                                O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                                O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
                                O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
                                O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                                O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                                O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                                O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
                                O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
                                O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                                O2 - BHO: Zango /fleok=1D8A83A5C5E6117A9BA56C2A1FBB39BFE4976E26CAEDDA7B5879462A3DC0C7 - {E1BACF55-35E1-4E47-9247-2D48660E5545} - (no file)
                                O3 - Toolbar: (no name) - {E1BACF55-35E1-4E47-9247-2D48660E5545} - (no file)
                                O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                                O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
                                O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
                                O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
                                O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
                                O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                                O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
                                O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
                                O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
                                O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
                                O4 - HKCU\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
                                O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
                                O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                                O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
                                O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
                                O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
                                O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
                                O4 - Global Startup: Logitech SetPoint.lnk = ?
                                O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
                                O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
                                O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
                                O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                                O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                                O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
                                O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                                O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                                O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                                O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                                O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
                                O16 - DPF: {2250C29C-C5E9-4F55-BE4E-01E45A40FCF1} (CMediaMix Object) - http://musicmix.messenger.msn.com/Medialogic.CAB
                                O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.mail.live.com/mail/w1/resources/MSNPUpld.cab
                                O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
                                O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
                                O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://arrobert.spaces.live.com/PhotoUpload/MsnPUpld.cab
                                O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
                                O16 - DPF: {BD8667B7-38D8-4C77-B580-18C3E146372C} (Creative Toolbox Plug-in) - http://kiw.imgag.com/imgag/cp/install/crusher-kiwen.cab
                                O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
                                O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} (Java Plug-in 1.6.0_03) -
                                O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
                                O16 - DPF: {E1342154-4889-42B5-BEF6-19237577048F} (OberongamesLoader Object) - http://ww25.incredijeux.com/online/online2/zuma/oberongamesloader.cab
                                O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
                                O16 - DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} (GoPetsWeb Control) - https://secure.gopetslive.com/dev/GoPetsWeb.cab
                                O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
                                O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~4\GOEC62~1.DLL
                                O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                                O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                                O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                                O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                                O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                                O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                                O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
                                O23 - Service: Google Desktop Manager 5.7.806.10245 (GoogleDesktopManager-061008-081103) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
                                O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                                O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
                                O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
                                O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
                                O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/Robert60/LOCALS~1/Temp/msohtml1/01/clip_image001.jpg
                                0
                                1. Utilisateur anonyme
                                  prfait poste un nouveau rapport hijackthis stp histoire ou nous en sommes ;-))
                                  0
                                  1. apyrel60 Auteur
                                    -----------\\ ToolBar S&D 1.1.4 XP/Vista

                                    Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
                                    X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) 4 CPU 3.00GHz )
                                    BIOS : BIOS Date: 02/27/04 17:05:00 Ver: 08.00.09
                                    USER : Robert60 ( Administrator )
                                    BOOT : Normal boot

                                    "C:\ToolBar SD" ( MAJ : 24-08-2008|14:20 )
                                    Option : [2] ( 26/08/2008|18:09 )

                                    -----------\\ SUPPRESSION

                                    Supprime! - C:\DOCUME~1\Robert60\APPLIC~1\Dealio\dinstallhelper.51A444A872AC48939521246BF9EF5FE2.dll
                                    Supprime! - C:\DOCUME~1\Robert60\APPLIC~1\Dealio\dinstallhelper.827F442104A84CA5BC1B5696C46EB7CE.dll
                                    Supprime! - C:\DOCUME~1\Robert60\APPLIC~1\Dealio\kb125
                                    Supprime! - C:\Program Files\Dealio\DealioAU.exe
                                    Supprime! - C:\Program Files\Dealio\kb125
                                    Supprime! - C:\Program Files\Dealio\SearchSettingsKit.exe
                                    Supprime! - C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\Dealio
                                    Supprime! - C:\Program Files\Mozilla Firefox\extensions\toolbar@dealio.com
                                    Supprime! - C:\Program Files\Piolet\BOB.m3u
                                    Supprime! - C:\Program Files\Piolet\Cache.dat
                                    Supprime! - C:\Program Files\Piolet\CDBurner.exe
                                    Supprime! - C:\Program Files\Piolet\CDBurner.sw2
                                    Supprime! - C:\Program Files\Piolet\contacts.dat
                                    Supprime! - C:\Program Files\Piolet\contactsR.dat
                                    Supprime! - C:\Program Files\Piolet\DealioKit1-stub-0.exe
                                    Supprime! - C:\Program Files\Piolet\default.m3u
                                    Supprime! - C:\Program Files\Piolet\diCrHash.dll
                                    Supprime! - C:\Program Files\Piolet\DOWNLD2.DAT
                                    Supprime! - C:\Program Files\Piolet\downloads.dat
                                    Supprime! - C:\Program Files\Piolet\EBCRYPT.DLL
                                    Supprime! - C:\Program Files\Piolet\fmod.dll
                                    Supprime! - C:\Program Files\Piolet\fmod_dsp_lowpass.dll
                                    Supprime! - C:\Program Files\Piolet\INSTALL.LOG
                                    Supprime! - C:\Program Files\Piolet\loading.gif
                                    Supprime! - C:\Program Files\Piolet\loading.htm
                                    Supprime! - C:\Program Files\Piolet\My Shared Folder
                                    Supprime! - C:\Program Files\Piolet\MyFiles.dat
                                    Supprime! - C:\Program Files\Piolet\MyFiles.dat.lst
                                    Supprime! - C:\Program Files\Piolet\NCTAudioBurner.dll
                                    Supprime! - C:\Program Files\Piolet\NCTAudioFile.dll
                                    Supprime! - C:\Program Files\Piolet\NCTAudioInformation.dll
                                    Supprime! - C:\Program Files\Piolet\NCTAudioPlayer.dll
                                    Supprime! - C:\Program Files\Piolet\NCTAudioVisualization.dll
                                    Supprime! - C:\Program Files\Piolet\NCTWMAFile.dll
                                    Supprime! - C:\Program Files\Piolet\Piolet.exe
                                    Supprime! - C:\Program Files\Piolet\Piolet.exe.Manifest
                                    Supprime! - C:\Program Files\Piolet\Piolet.sw2
                                    Supprime! - C:\Program Files\Piolet\quelque part.m3u
                                    Supprime! - C:\Program Files\Piolet\Settings.ini
                                    Supprime! - C:\Program Files\Piolet\SmartUI2.ocx
                                    Supprime! - C:\Program Files\Piolet\Softwrap.dll
                                    Supprime! - C:\Program Files\Piolet\TaskKiller.exe
                                    Supprime! - C:\Program Files\Piolet\uninstall.exe
                                    Supprime! - C:\Program Files\Piolet\UNWISE.EXE
                                    Supprime! - C:\WINDOWS\Prefetch\PIOLET.EXE-09372A35.pf
                                    Supprime! - C:\DOCUME~1\Robert60\MENUDM~1\PROGRA~1\Piolet
                                    Supprime! - C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\Piolet
                                    Supprime! - C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\Piolet Toolbar
                                    Supprime! - C:\Program Files\Piolet Toolbar\settings.dat
                                    Supprime! - C:\Program Files\Piolet Toolbar\uninstall.txt
                                    Supprime! - C:\Program Files\Piolet Toolbar\v3.2.0.0
                                    Supprime! - C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com
                                    Supprime! - C:\DOCUME~1\Robert60\APPLIC~1\Search Settings\kb125
                                    Supprime! - C:\Program Files\Search Settings\kb125
                                    Supprime! - C:\Program Files\Search Settings\SearchSettings.exe
                                    Supprime! - C:\DOCUME~1\Robert60\APPLIC~1\Dealio
                                    Supprime! - C:\Program Files\Dealio
                                    Supprime! - C:\Program Files\Piolet
                                    Supprime! - C:\Program Files\Piolet Toolbar
                                    Supprime! - C:\DOCUME~1\Robert60\APPLIC~1\Search Settings
                                    Supprime! - C:\Program Files\Search Settings

                                    -----------\\ Recherche de Fichiers / Dossiers ...

                                    -----------\\ Extensions

                                    (Robert60) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar
                                    (Robert60) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar

                                    -----------\\ [..\Internet Explorer\Main]

                                    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
                                    "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
                                    "Start Page"="https://www.msn.com/fr-fr/"
                                    "Search Page"="https://www.google.com/?gws_rd=ssl"
                                    "SearchMigratedDefaultURL"="https://www.bing.com/?scope=web&mkt=fr-FR{searchTerms}&src={referrer:source?}"
                                    "Default_Page_URL"="https://www.msn.com/fr-fr"
                                    "Search Bar"="http://www.google.com/toolbar/ie8/sidebar.html"
                                    "Default_Search_URL"="http://www.google.com/toolbar/ie8/sidebar.html"

                                    [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
                                    "Default_Page_URL"="https://www.msn.com/fr-fr"
                                    "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
                                    "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
                                    "Start Page"="https://www.msn.com/fr-fr/"

                                    --------------------\\ Recherche d'autres infections

                                    Aucune autre infection trouvée !

                                    -----------\\ Fin du rapport a 18:12:42.50
                                    0
                                    1. Utilisateur anonyme
                                      wahoo jolie prise , on va supprimer tout celas

                                      * Double-clique maintenant sur le raccourci de Toolbar-S&D.
                                      * Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.
                                      * Choisis maintenant l'option 2 (suppression). Patiente jusqu'à la fin de la recherche.
                                      * Poste le rapport généré. (C:\TB.txt)
                                      0
                                      1. apyrel60 Auteur
                                        -----------\\ ToolBar S&D 1.1.4 XP/Vista

                                        Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
                                        X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) 4 CPU 3.00GHz )
                                        BIOS : BIOS Date: 02/27/04 17:05:00 Ver: 08.00.09
                                        USER : Robert60 ( Administrator )
                                        BOOT : Normal boot

                                        "C:\ToolBar SD" ( MAJ : 24-08-2008|14:20 )
                                        Option : [1] ( 26/08/2008|18:03 )

                                        -----------\\ Recherche de Fichiers / Dossiers ...

                                        C:\DOCUME~1\Robert60\APPLIC~1\Dealio
                                        C:\DOCUME~1\Robert60\APPLIC~1\Dealio\dinstallhelper.51A444A872AC48939521246BF9EF5FE2.dll
                                        C:\DOCUME~1\Robert60\APPLIC~1\Dealio\dinstallhelper.827F442104A84CA5BC1B5696C46EB7CE.dll
                                        C:\DOCUME~1\Robert60\APPLIC~1\Dealio\kb125
                                        C:\Program Files\Dealio
                                        C:\Program Files\Dealio\DealioAU.exe
                                        C:\Program Files\Dealio\kb125
                                        C:\Program Files\Dealio\SearchSettingsKit.exe
                                        C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\Dealio
                                        C:\Program Files\Mozilla Firefox\extensions\toolbar@dealio.com
                                        C:\Program Files\Mozilla Firefox\extensions\toolbar@dealio.com\CHROME\CONTENT\dealiotoolbarplugin.js
                                        C:\Program Files\Mozilla Firefox\extensions\toolbar@dealio.com\CHROME\CONTENT\dealiotoolbarplugin.xul
                                        C:\Program Files\Mozilla Firefox\extensions\toolbar@dealio.com\CHROME\LOCALE\EN-US\dealio.dtd
                                        C:\Program Files\Mozilla Firefox\extensions\toolbar@dealio.com\CHROME\LOCALE\EN-US\dealio.properties
                                        C:\Program Files\Mozilla Firefox\extensions\toolbar@dealio.com\CHROME\SKIN\dealio.ico
                                        C:\Program Files\Mozilla Firefox\extensions\toolbar@dealio.com\CHROME\SKIN\dealiotoolbarplugin.css
                                        C:\Program Files\Mozilla Firefox\extensions\toolbar@dealio.com\CHROME\SKIN\dealio_large.png
                                        C:\Program Files\Mozilla Firefox\extensions\toolbar@dealio.com\CHROME\SKIN\dealio_small.png
                                        C:\Program Files\Mozilla Firefox\extensions\toolbar@dealio.com\CHROME\SKIN\dealio_winxp_act.ico
                                        C:\Program Files\Mozilla Firefox\extensions\toolbar@dealio.com\CHROME\SKIN\dealio_winxp_hot.ico
                                        C:\Program Files\Mozilla Firefox\extensions\toolbar@dealio.com\CHROME\SKIN\dealio_win_act.bmp
                                        C:\Program Files\Mozilla Firefox\extensions\toolbar@dealio.com\CHROME\SKIN\dealio_win_act.ico
                                        C:\Program Files\Mozilla Firefox\extensions\toolbar@dealio.com\CHROME\SKIN\dealio_win_hot.bmp
                                        C:\Program Files\Mozilla Firefox\extensions\toolbar@dealio.com\CHROME\SKIN\dealio_win_hot.ico
                                        C:\Program Files\Mozilla Firefox\extensions\toolbar@dealio.com\CHROME\SKIN\search_dealio.bmp
                                        C:\Program Files\Mozilla Firefox\extensions\toolbar@dealio.com\COMPONENTS\DealioFF.dll
                                        C:\Program Files\Mozilla Firefox\extensions\toolbar@dealio.com\COMPONENTS\DealioProtocol.js
                                        C:\Program Files\Mozilla Firefox\extensions\toolbar@dealio.com\COMPONENTS\IFBHODealio.idl
                                        C:\Program Files\Mozilla Firefox\extensions\toolbar@dealio.com\COMPONENTS\IFBHODealio.xpt
                                        C:\Program Files\Mozilla Firefox\extensions\toolbar@dealio.com\COMPONENTS\IFBHODealioHelperEngine.idl
                                        C:\Program Files\Mozilla Firefox\extensions\toolbar@dealio.com\COMPONENTS\IFBHODealioHelperEngine.xpt
                                        C:\Program Files\Mozilla Firefox\extensions\toolbar@dealio.com\COMPONENTS\IFDealioHelperPreferences.idl
                                        C:\Program Files\Mozilla Firefox\extensions\toolbar@dealio.com\COMPONENTS\IFDealioHelperPreferences.xpt
                                        C:\Program Files\Piolet
                                        C:\Program Files\Piolet\BOB.m3u
                                        C:\Program Files\Piolet\Cache.dat
                                        C:\Program Files\Piolet\CDBurner.exe
                                        C:\Program Files\Piolet\CDBurner.sw2
                                        C:\Program Files\Piolet\contacts.dat
                                        C:\Program Files\Piolet\contactsR.dat
                                        C:\Program Files\Piolet\DealioKit1-stub-0.exe
                                        C:\Program Files\Piolet\default.m3u
                                        C:\Program Files\Piolet\diCrHash.dll
                                        C:\Program Files\Piolet\DOWNLD2.DAT
                                        C:\Program Files\Piolet\downloads.dat
                                        C:\Program Files\Piolet\EBCRYPT.DLL
                                        C:\Program Files\Piolet\fmod.dll
                                        C:\Program Files\Piolet\fmod_dsp_lowpass.dll
                                        C:\Program Files\Piolet\INSTALL.LOG
                                        C:\Program Files\Piolet\loading.gif
                                        C:\Program Files\Piolet\loading.htm
                                        C:\Program Files\Piolet\My Shared Folder
                                        C:\Program Files\Piolet\MyFiles.dat
                                        C:\Program Files\Piolet\MyFiles.dat.lst
                                        C:\Program Files\Piolet\NCTAudioBurner.dll
                                        C:\Program Files\Piolet\NCTAudioFile.dll
                                        C:\Program Files\Piolet\NCTAudioInformation.dll
                                        C:\Program Files\Piolet\NCTAudioPlayer.dll
                                        C:\Program Files\Piolet\NCTAudioVisualization.dll
                                        C:\Program Files\Piolet\NCTWMAFile.dll
                                        C:\Program Files\Piolet\Piolet.exe
                                        C:\Program Files\Piolet\Piolet.exe.Manifest
                                        C:\Program Files\Piolet\Piolet.sw2
                                        C:\Program Files\Piolet\quelque part.m3u
                                        C:\Program Files\Piolet\Settings.ini
                                        C:\Program Files\Piolet\SmartUI2.ocx
                                        C:\Program Files\Piolet\Softwrap.dll
                                        C:\Program Files\Piolet\TaskKiller.exe
                                        C:\Program Files\Piolet\uninstall.exe
                                        C:\Program Files\Piolet\UNWISE.EXE
                                        C:\WINDOWS\Prefetch\PIOLET.EXE-09372A35.pf
                                        C:\DOCUME~1\Robert60\MENUDM~1\PROGRA~1\Piolet
                                        C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\Piolet
                                        C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\Piolet Toolbar
                                        C:\Program Files\Piolet Toolbar
                                        C:\Program Files\Piolet Toolbar\settings.dat
                                        C:\Program Files\Piolet Toolbar\uninstall.txt
                                        C:\Program Files\Piolet Toolbar\v3.2.0.0
                                        C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\Piolet Toolbar
                                        C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com
                                        C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\CHROME\CONTENT\searchsettingsplugin.js
                                        C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\CHROME\CONTENT\searchsettingsplugin.xul
                                        C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\CHROME\LOCALE\EN-US\searchsettingsplugin.dtd
                                        C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\COMPONENTS\SearchSettingsFF.dll
                                        C:\DOCUME~1\Robert60\APPLIC~1\Search Settings
                                        C:\DOCUME~1\Robert60\APPLIC~1\Search Settings\kb125
                                        C:\Program Files\Search Settings
                                        C:\Program Files\Search Settings\kb125
                                        C:\Program Files\Search Settings\SearchSettings.exe

                                        -----------\\ Extensions

                                        (Robert60) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar
                                        (Robert60) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar

                                        -----------\\ [..\Internet Explorer\Main]

                                        [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
                                        "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
                                        "Start Page"="https://www.msn.com/fr-fr/"
                                        "Search Page"="https://www.google.com/?gws_rd=ssl"
                                        "SearchMigratedDefaultURL"="https://www.bing.com/?scope=web&mkt=fr-FR{searchTerms}&src={referrer:source?}"
                                        "Default_Page_URL"="https://www.msn.com/fr-fr"
                                        "Search Bar"="http://www.google.com/toolbar/ie8/sidebar.html"
                                        "Default_Search_URL"="http://www.google.com/toolbar/ie8/sidebar.html"

                                        [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
                                        "Default_Page_URL"="https://www.msn.com/fr-fr"
                                        "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
                                        "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
                                        "Start Page"="http://ww17.ads.eorezo.com/cgi-bin/advert/getads.cgi?x_format=redirect&x_dp_id=9"

                                        --------------------\\ Recherche d'autres infections

                                        Aucune autre infection trouvée !

                                        -----------\\ Fin du rapport a 18:04:11.43
                                        0
                                        1. Utilisateur anonyme
                                          Télécharge Toolbar-S&D (Team IDN) sur ton Bureau.
                                          https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2

                                          * Lance l'installation du programme en exécutant le fichier téléchargé.
                                          * Double-clique maintenant sur le raccourci de Toolbar-S&D.
                                          * Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.
                                          * Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.
                                          * Poste le rapport généré. (C:\TB.txt)
                                          0
                                          • 1
                                          • 2