Pc trop lourd.........

nassi -  
Bonjour,
voilà..a l' ouverture de wind.un ms apparait avec une croix rouge dsisant :C:/program-1/MYWEBS-1/bar/7.bin/M3PLUGIN.DLL le module specifie est introuvable. aussi apres l'analyse avec AVG j'ais :warning count:6 ... windows se bloque ...aussi l' ouvertute des icons est tres lourde ....tout est lourd ..meme l'internet..que doije faire,????????? aider moi SVP....
Configuration: Windows XP
Firefox 3.0.3

18 réponses

  1.  ^^Marie^^
    Salut

    Supprime toutes ces barres d'outils inutiles et qui prennent de la place

    Windows Live Toolbar
    StumbleUpon Toolbar
    ooVoo Toolbar
    Yahoo! Toolbar
    The Weather Channel Toolbar
    AVG Security Toolbar

    1/ Télécharge et installe CCleaner
    (attention à l'installation penser à DECOCHER l'installation de Yahoo toolbar discrètement proposé en plus de CCleaner).

    http://www.clubic.com/lancer-le-telechargement-20932-0-ccleaner-crap-cleaner-.html

    2/ Télécharge AVG
    https://kerio.probb.fr/t387-tuto-avg-anti-spyware-anti-spyware
    http://www.commentcamarche.net/telecharger/avg anti spyware 218 avis opinions.php3#avis

    Lance AVG Anti-Spyware et clique sur le bouton Mise à jour.
    Tu fermes

    3/ Redémarre en mode sans échec
    (Pour cela : démarrer le PC en tapotant sur la touche F8 du clavier jusqu'à ce que le menu des options avancées de Windows apparaisse puis avec les touches fléchées du clavier, sélectionner Mode sans échec puis appuyer sur la touche Entrée...)
    Attention tu n'as pas accès à Internet dans ce mode donc note ou imprime les consignes qui suivent.
    http://www.coupdepoucepc.com/modules/news/article.php?storyid=253
    https://www.micro-astuce.com/depannage/demarrer-mode-sans-echec.php

    4/ Lance HijackThis
    puis --> Do a system scan only
    coche les lignes indiquées ci-dessous
    puis --> Fix checked
    puis oui à la question de confirmation

    O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll (file missing)
    O2 - BHO: ooVoo Toolbar - {A057A204-BACC-4D26-8087-36EE87E26986} - C:\PROGRA~1\OOVOOT~1\OOVOOT~1.DLL
    O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" –atboottime
    O4 - HKCU\..\Run: [Registry Helper] "C:\Program Files\Registry Helper\LaunchRegistryHelper.Exe" "C:\Program Files\Registry Helper\RegistryHelper.Exe" /boot
    O4 - HKCU\..\Run: [DW6] "C:\Program Files\The Weather Channel FW\Desktop\DesktopWeather.exe"
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
    O9 - Extra button: The Weather Channel - {2E5E800E-6AC0-411E-940A-369530A35E43} - (no file)
    O9 - Extra 'Tools' menuitem: The Weather Channel - {2E5E800E-6AC0-411E-940A-369530A35E43} - (no file)
    O9 - Extra button: PalTalk - {4EAFEF58-EEFA-4116-983D-03B49BCBFFFE} - C:\Program Files\Paltalk Messenger\Paltalk.exe (file missing)
    O9 - Extra button: (no name) - {925DAB62-F9AC-4221-806A-057BFB1014AA} - (no file)
    O16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} (SpinTop DRM Control) - file:///C:/PROGRA~1/SALLY'~1/Images/stg_drm.ocx
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab
    O16 - DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} (ArmHelper Control) - file:///C:/Program%20Files/Sally's%20Spa/Images/armhelper.ocx
    O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe


    7/ Lance CCleaner puis bouton Analyse
    ensuite Bouton Lancer le Nettoyage

    8/ Lance AVG
    Lance AVG Anti-Spyware
    Clique sur le bouton Analyse (de la barre d'outils)
    Puis sur l'onglets Comment réagir, clique sur Actions recommandées.
    Reviens à l'onglet Analyse. Clique sur Analyse complète du système.
    /!\ Si un fichier est infecté en fin d'analyse /!\
    choisis l'option " Appliquer toutes les actions " en bas.
    Clique sur "Enregistrer le rapport" puis sur "Enregistrer le rapport sous"
    Enregistre ce fichier texte sur ton bureau.
    Copie/colle le rapport

    9/ Redémarre normalement et poste un nouveau rapport HijackThis.

    as-tu encore des dysfonctionnements ?

    Fait
    -> Démarrer
    -> Exécuter...
    Tape Services.msc puis valide
    Double clique sur " Boonty Games "
    Clique en bas sur " Arrêter "
    Valide les changements.
    -----
    Ouvre Hijackthis puis:
    -> Open the Misc Tools Section
    -> Delete a NT Service
    Tape " BOONTY " puis valide.

    Utilises tu des jeux de boonty games depuis longtemps ?
    Voici une petite information sur Boonty games

    Leur politique :
    "Il se peut que nous partageons aussi des informations payantes avec des tiers
    qui fournissent ds services payants et partage des données regroupées montrant le type
    et le nombre de jeux videos que vous téléchargez, votre age, votre sexe, vos occupations,
    niveau d'éducation, localité géographique, données sur l'équipement de votre ordinateur,
    internet et intérêts pour les jeux videos, activités et entrainement des jeux édités.
    De plus, nous partageons les adresses email avec des tiers fournisseurs de compte mails

    +++

    1. NASSI37
      merci bien marie..............voilà le rapport:Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 20:42:03, on 16/10/2008
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.6000.16705)
      Boot mode: Normal

      Running processes:
      C:\windows\System32\smss.exe
      C:\windows\system32\csrss.exe
      C:\windows\system32\winlogon.exe
      C:\windows\system32\services.exe
      C:\windows\system32\lsass.exe
      C:\windows\system32\svchost.exe
      C:\windows\system32\svchost.exe
      C:\windows\System32\svchost.exe
      C:\windows\system32\svchost.exe
      C:\windows\system32\svchost.exe
      C:\windows\system32\spoolsv.exe
      C:\windows\System32\svchost.exe
      C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
      C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
      C:\Program Files\Windows Live\Contrôle parental\fsssvc.exe
      C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
      C:\WINDOWS\system32\IoctlSvc.exe
      C:\windows\system32\svchost.exe
      C:\windows\Explorer.EXE
      C:\PROGRA~1\AVG\AVG8\avgrsx.exe
      C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
      C:\PROGRA~1\AVG\AVG8\avgtray.exe
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
      C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
      C:\Program Files\SuperCopier2\SuperCopier2.exe
      C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe
      C:\PROGRA~1\WIDCOMM\LOGICI~1\BTSTAC~1.EXE
      C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
      C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
      C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
      C:\windows\System32\alg.exe
      C:\windows\system32\WgaTray.exe
      C:\PROGRA~1\AVG\AVG8\avgscanx.exe
      D:\HiJackThis.exe
      C:\WINDOWS\system32\wbem\wmiprvse.exe

      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr8/*http://www.yahoo.com/ext/search/search.html
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ww17.ads.eorezo.com/cgi-bin/advert/getads.cgi?x_dp_id=18&x_format=redirect
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
      O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
      O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - D:\Program Files\jccatch.dll
      O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
      O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
      O2 - BHO: Windows Live OneCare Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Contrôle parental\fssbho.dll
      O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
      O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - D:\Program Files\getflash.dll
      O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
      O4 - HKLM\..\Run: [Flashget] "D:\Program Files\FlashGet.exe" /min
      O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
      O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
      O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
      O4 - HKCU\..\Run: [SuperCopier2.exe] C:\Program Files\SuperCopier2\SuperCopier2.exe
      O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RESEAU')
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
      O4 - Startup: FreeMeter.lnk = C:\Program Files\FreeMeter\FreeMeter.exe
      O4 - Global Startup: BTTray.lnk = ?
      O4 - Global Startup: PalTalk.lnk = C:\Program Files\Paltalk Messenger\paltalk.exe
      O4 - Global Startup: VersionTrackerPro.lnk = ?
      O8 - Extra context menu item: &Download All with FlashGet - D:\Program Files\jc_all.htm
      O8 - Extra context menu item: &Download with FlashGet - D:\Program Files\jc_link.htm
      O8 - Extra context menu item: &تصدير إلى Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
      O8 - Extra context menu item: Download Video on This Page - C:\Program Files\Tomato\YouTube Video Downloader\IEPage.html
      O8 - Extra context menu item: Download Video This Links To - C:\Program Files\Tomato\YouTube Video Downloader\IELink.html
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O9 - Extra button: Download Video - {11F19C45-9675-488A-A8E0-8E8234DC245D} - C:\Program Files\Tomato\YouTube Video Downloader\IEPage.html
      O9 - Extra 'Tools' menuitem: Download Video on This Page - {11F19C45-9675-488A-A8E0-8E8234DC245D} - C:\Program Files\Tomato\YouTube Video Downloader\IEPage.html
      O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
      O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
      O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
      O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
      O9 - Extra button: E?E - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\MICROS~1\OFFICE11\REFIEBAR.DLL
      O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
      O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
      O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\Program Files\FlashGet.exe
      O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\Program Files\FlashGet.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} (SpinTop DRM Control) - file:///C:/PROGRA~1/SALLY'~1/Images/stg_drm.ocx
      O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
      O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
      O20 - AppInit_DLLs: avgrsstx.dll
      O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      O23 - Service: ASP.NET State Service (aspnet_state) - Unknown owner - C:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)
      O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
      O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
      O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
      O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
      O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
      O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe
      O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/ADMINI~1/LOCALS~1/Temp/msohtml1/01/clip_image001.gif
      O24 - Desktop Component 1: (no name) - https://www.3rbseyes.com/clientscript/vbulletin_global.js?v=367
      2. nassi
        Ccomme vous voyer le probleme n'est pas resolu.......est ce que vous me conseillez de formater mon pc?........aussi je vous demande si je peux saufgarder des elements interressant ?..........je n'y connais rien al'imformatique , mais je peux apprendre........quelle sont les programme et les composants de windows necessaires pour qu'un pc travail bien comme il faut?.......autre question : ma copie de windows n'est pas valide ,comment pourais-je avoir une copie valide (orriginale) gratuite,car je ne peux pas l'acheter......je suis dans un bout tres loing du monde ,on a ni cart credit,ni banc externe , ni de l'argent.............si vous m'aidez pour avoir une copie valide et gratuite ,je la graverais sur un cd et je l'installeraisd apres................aider moi please!!!!!.................
        2. nassi
          Logfile of Trend Micro HijackThis v2.0.2
          Scan saved at 15:11:58, on 15/10/2008
          Platform: Windows XP SP2 (WinNT 5.01.2600)
          MSIE: Internet Explorer v7.00 (7.00.6000.16705)
          Boot mode: Normal

          Running processes:
          C:\windows\System32\smss.exe
          C:\windows\system32\csrss.exe
          C:\windows\system32\winlogon.exe
          C:\windows\system32\services.exe
          C:\windows\system32\lsass.exe
          C:\windows\system32\svchost.exe
          C:\windows\system32\svchost.exe
          C:\windows\System32\svchost.exe
          C:\windows\system32\svchost.exe
          C:\windows\system32\svchost.exe
          C:\windows\system32\spoolsv.exe
          C:\windows\System32\svchost.exe
          C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
          C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
          C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
          C:\Program Files\Windows Live\Contrôle parental\fsssvc.exe
          C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
          C:\WINDOWS\system32\IoctlSvc.exe
          C:\windows\system32\svchost.exe
          C:\windows\Explorer.EXE
          C:\PROGRA~1\AVG\AVG8\avgrsx.exe
          C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
          D:\Program Files\FlashGet.exe
          C:\Program Files\Picasa2\PicasaMediaDetector.exe
          C:\PROGRA~1\AVG\AVG8\avgtray.exe
          C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
          C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
          C:\windows\system32\WgaTray.exe
          C:\Program Files\SuperCopier2\SuperCopier2.exe
          C:\windows\System32\alg.exe
          C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
          C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
          C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe
          C:\PROGRA~1\WIDCOMM\LOGICI~1\BTSTAC~1.EXE
          C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
          C:\windows\system32\wuauclt.exe
          C:\Program Files\Mozilla Firefox\firefox.exe
          C:\Documents and Settings\Administrateur\Bureau\Nouveau dossier\Nouveau dossier (3)\محمولات\HiJackThis.exe
          C:\windows\system32\NOTEPAD.EXE
          C:\windows\system32\wuauclt.exe
          C:\WINDOWS\system32\wbem\wmiprvse.exe

          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/?p=us
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://us.rd.yahoo.com/customize/ie/defaults/su/msgr8/*https://fr.yahoo.com/?p=us
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr8/*http://www.yahoo.com/ext/search/search.html
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*https://fr.yahoo.com/?p=us
          R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ww17.ads.eorezo.com/cgi-bin/advert/getads.cgi?x_dp_id=18&x_format=redirect
          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
          R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
          O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
          O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
          O2 - BHO: StumbleUpon Launcher - {145B29F4-A56B-4b90-BBAC-45784EBEBBB7} - C:\Program Files\StumbleUpon\StumbleUponIEBar.dll
          O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
          O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - D:\Program Files\jccatch_1.dll
          O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
          O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
          O2 - BHO: Windows Live OneCare Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Contrôle parental\fssbho.dll
          O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
          O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll (file missing)
          O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
          O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
          O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
          O2 - BHO: ooVoo Toolbar - {A057A204-BACC-4D26-8087-36EE87E26986} - C:\PROGRA~1\OOVOOT~1\OOVOOT~1.DLL
          O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
          O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
          O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
          O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
          O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - D:\Program Files\getflash.dll
          O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
          O3 - Toolbar: StumbleUpon Toolbar - {5093EB4C-3E93-40AB-9266-B607BA87BDC8} - C:\Program Files\StumbleUpon\StumbleUponIEBar.dll
          O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
          O3 - Toolbar: ooVoo Toolbar - {A057A204-BACC-4D26-8087-36EE87E26986} - C:\PROGRA~1\OOVOOT~1\OOVOOT~1.DLL
          O3 - Toolbar: The Weather Channel Toolbar - {2E5E800E-6AC0-411E-940A-369530A35E43} - C:\WINDOWS\system32\TwcToolbarIe7.dll
          O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
          O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
          O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
          O4 - HKLM\..\Run: [Flashget] "D:\Program Files\FlashGet.exe" /min
          O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
          O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
          O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
          O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
          O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
          O4 - HKCU\..\Run: [Registry Helper] "C:\Program Files\Registry Helper\LaunchRegistryHelper.Exe" "C:\Program Files\Registry Helper\RegistryHelper.Exe" /boot
          O4 - HKCU\..\Run: [SuperCopier2.exe] C:\Program Files\SuperCopier2\SuperCopier2.exe
          O4 - HKCU\..\Run: [Internet Download Accelerator] C:\Program Files\IDA\ida.exe -autorun
          O4 - HKCU\..\Run: [FreeCall] "C:\Program Files\FreeCall.com\FreeCall\FreeCall.exe" -nosplash -minimized
          O4 - HKCU\..\Run: [DW6] "C:\Program Files\The Weather Channel FW\Desktop\DesktopWeather.exe"
          O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
          O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
          O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RESEAU')
          O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
          O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
          O4 - Startup: FreeMeter.lnk = C:\Program Files\FreeMeter\FreeMeter.exe
          O4 - Global Startup: BTTray.lnk = ?
          O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
          O4 - Global Startup: PalTalk.lnk = C:\Program Files\Paltalk Messenger\paltalk.exe
          O4 - Global Startup: VersionTrackerPro.lnk = ?
          O8 - Extra context menu item: &Tout télécharger avec FlashGet - D:\Program Files\jc_all.htm
          O8 - Extra context menu item: &Télécharger avec FlashGet - D:\Program Files\jc_link.htm
          O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
          O8 - Extra context menu item: &تصدير إلى Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
          O8 - Extra context menu item: Download Video on This Page - C:\Program Files\Tomato\YouTube Video Downloader\IEPage.html
          O8 - Extra context menu item: Download Video This Links To - C:\Program Files\Tomato\YouTube Video Downloader\IELink.html
          O8 - Extra context menu item: StumbleUpon PhotoBlog It! - res://StumbleUponIEBar.dll/blogimage
          O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
          O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
          O9 - Extra button: Download Video - {11F19C45-9675-488A-A8E0-8E8234DC245D} - C:\Program Files\Tomato\YouTube Video Downloader\IEPage.html
          O9 - Extra 'Tools' menuitem: Download Video on This Page - {11F19C45-9675-488A-A8E0-8E8234DC245D} - C:\Program Files\Tomato\YouTube Video Downloader\IEPage.html
          O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
          O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
          O9 - Extra button: The Weather Channel - {2E5E800E-6AC0-411E-940A-369530A35E43} - (no file)
          O9 - Extra 'Tools' menuitem: The Weather Channel - {2E5E800E-6AC0-411E-940A-369530A35E43} - (no file)
          O9 - Extra button: PalTalk - {4EAFEF58-EEFA-4116-983D-03B49BCBFFFE} - C:\Program Files\Paltalk Messenger\Paltalk.exe (file missing)
          O9 - Extra button: (no name) - {53F6FCCD-9E22-4d71-86EA-6E43136192AB} - (no file)
          O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
          O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
          O9 - Extra button: (no name) - {925DAB62-F9AC-4221-806A-057BFB1014AA} - (no file)
          O9 - Extra button: E?E - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\MICROS~1\OFFICE11\REFIEBAR.DLL
          O9 - Extra button: (no name) - {9819CC0E-9669-4D01-9CD7-2C66DA43AC6C} - (no file)
          O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
          O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
          O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\Program Files\FlashGet.exe
          O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\Program Files\FlashGet.exe
          O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
          O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
          O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} (SpinTop DRM Control) - file:///C:/PROGRA~1/SALLY'~1/Images/stg_drm.ocx
          O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
          O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab
          O16 - DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} (ArmHelper Control) - file:///C:/Program%20Files/Sally's%20Spa/Images/armhelper.ocx
          O17 - HKLM\System\CCS\Services\Tcpip\..\{52DB4D70-E397-4E53-9532-EDD40304187A}: NameServer = 208.67.222.222 208.67.220.220
          O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
          O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
          O20 - AppInit_DLLs: avgrsstx.dll
          O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
          O23 - Service: ASP.NET State Service (aspnet_state) - Unknown owner - C:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)
          O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
          O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
          O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
          O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
          O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
          O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
          O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
          O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
          O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
          O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe
          O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/ADMINI~1/LOCALS~1/Temp/msohtml1/01/clip_image001.gif
          O24 - Desktop Component 1: (no name) - https://www.3rbseyes.com/clientscript/vbulletin_global.js?v=367
          2. NASSI37
            -----------\\ ToolBar S&D 1.2.2 XP/Vista

            Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
            X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) D CPU 3.00GHz )
            BIOS : Default System BIOS
            USER : Administrateur ( Administrator )
            BOOT : Normal boot
            Antivirus : Avira AntiVir PersonalEdition Classic 0.0.0.0 (Activated)
            A:\ (USB)
            C:\ (Local Disk) - NTFS - Total : 45 Go Free : 7 Go
            D:\ (Local Disk) - FAT32 - Total : 30 Go Free : 1 Go
            E:\ (CD or DVD)
            F:\ (CD or DVD)

            "C:\ToolBar SD" ( MAJ : 04-10-2008|21:00 )
            Option : [1] ( 13/10/2008|22:26 )

            -----------\\ Recherche de Fichiers / Dossiers ...

            C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio

            -----------\\ Extensions

            (Administrateur) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar
            (Administrateur) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar
            (Administrateur) - {DDC359D1-844A-42a7-9AA1-88A850A938A8} => chrome
            (Administrateur) - {E9A1DEE0-C623-4439-8932-001E7D17607D} => ajtoolbar

            -----------\\ [..\Internet Explorer\Main]

            [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
            "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
            "Start Page"="https://www.msn.com/fr-fr/"
            "Search Page"="https://www.google.com/?gws_rd=ssl"
            "Search Bar"="http://www.google.com/toolbar/ie8/sidebar.html"
            "SearchMigratedDefaultURL"="https://www.google.com/webhp?gws_rd=ssl{searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"
            "Url"="http://www.microsoft.com/atwork/community/rss.xml"
            "Url"="http://www.microsoft.com/athome/community/rss.xml"

            [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
            "Default_Page_URL"="https://fr.yahoo.com/?p=us"
            "Default_Search_URL"="http://us.rd.yahoo.com/customize/ie/defaults/su/msgr8/*https://fr.yahoo.com/?p=us"
            "Search Page"="http://us.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*https://fr.yahoo.com/?p=us"
            "Start Page"="http://ww17.ads.eorezo.com/cgi-bin/advert/getads.cgi?x_dp_id=18&x_format=redirect"
            "Search Bar"="http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr8/*http://www.yahoo.com/ext/search/search.html"

            --------------------\\ Recherche d'autres infections

            --------------------\\ Cracks & Keygens ..

            C:\DOCUME~1\ADMINI~1\Mes documents\Downloads\Programs\mp3\Keygen.exe

            1 - "C:\ToolBar SD\TB_1.txt" - 13/10/2008|22:30 - Option : [1]

            -----------\\ Fin du rapport a 22:30:33.46
            1. NASSI37
              [ Rapport ToolsCleaner version 2.2.3 (par A.Rothstein & dj QUIOU) ]

              -->- Recherche:

              C:\TB.txt: trouvé !
              C:\Documents and Settings\Administrateur\Bureau\Nouveau dossier\Nouveau dossier (3)\محمولات\HijackThis.exe: trouvé !
              C:\Documents and Settings\Administrateur\Bureau\Nouveau dossier\Nouveau dossier (3)\محمولات\ToolBarSD.exe: trouvé !
              C:\Documents and Settings\Administrateur\Bureau\Nouveau dossier\Nouveau dossier (3)\محمولات\hijackthis.log: trouvé !
              C:\Nouveau dossier (2)\TB.txt: trouvé !

              ---------------------------------
              -->- Suppression:

              C:\Documents and Settings\Administrateur\Bureau\Nouveau dossier\Nouveau dossier (3)\محمولات\HijackThis.exe: supprimé !
              C:\Documents and Settings\Administrateur\Bureau\Nouveau dossier\Nouveau dossier (3)\محمولات\ToolBarSD.exe: supprimé !
              C:\TB.txt: supprimé !
              C:\Documents and Settings\Administrateur\Bureau\Nouveau dossier\Nouveau dossier (3)\محمولات\hijackthis.log: supprimé !
              C:\Nouveau dossier (2)\TB.txt: supprimé !

              Fichiers temporaires nettoyés !
              Corbeille vidée!
              1. NASSI37
                Logfile of Trend Micro HijackThis v2.0.2
                Scan saved at 21:57:02, on 13/10/2008
                Platform: Windows XP SP2 (WinNT 5.01.2600)
                MSIE: Internet Explorer v7.00 (7.00.6000.16705)
                Boot mode: Normal

                Running processes:
                C:\windows\System32\smss.exe
                C:\windows\system32\csrss.exe
                C:\windows\system32\winlogon.exe
                C:\windows\system32\services.exe
                C:\windows\system32\lsass.exe
                C:\windows\system32\svchost.exe
                C:\windows\system32\svchost.exe
                C:\windows\System32\svchost.exe
                C:\windows\system32\svchost.exe
                C:\windows\system32\svchost.exe
                C:\windows\system32\spoolsv.exe
                C:\windows\System32\svchost.exe
                C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
                C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
                C:\Program Files\Windows Live\Contrôle parental\fsssvc.exe
                C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
                C:\WINDOWS\system32\IoctlSvc.exe
                C:\windows\system32\svchost.exe
                C:\windows\Explorer.EXE
                C:\PROGRA~1\AVG\AVG8\avgrsx.exe
                C:\windows\System32\alg.exe
                C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
                D:\Program Files\FlashGet.exe
                C:\Program Files\Picasa2\PicasaMediaDetector.exe
                C:\PROGRA~1\AVG\AVG8\avgtray.exe
                C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
                C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                C:\windows\system32\WgaTray.exe
                C:\Program Files\SuperCopier2\SuperCopier2.exe
                C:\Program Files\The Weather Channel FW\Desktop\DesktopWeather.exe
                C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe
                C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
                C:\PROGRA~1\WIDCOMM\LOGICI~1\BTSTAC~1.EXE
                C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
                C:\Program Files\Mozilla Firefox\firefox.exe
                C:\PROGRA~1\AVG\AVG8\avgscanx.exe
                C:\Documents and Settings\Administrateur\Bureau\Nouveau dossier\Nouveau dossier (3)\محمولات\HiJackThis.exe
                C:\WINDOWS\system32\wbem\wmiprvse.exe

                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/?p=us
                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://us.rd.yahoo.com/customize/ie/defaults/su/msgr8/*https://fr.yahoo.com/?p=us
                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr8/*http://www.yahoo.com/ext/search/search.html
                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*https://fr.yahoo.com/?p=us
                R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ww17.ads.eorezo.com/cgi-bin/advert/getads.cgi?x_dp_id=18&x_format=redirect
                R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                O2 - BHO: StumbleUpon Launcher - {145B29F4-A56B-4b90-BBAC-45784EBEBBB7} - C:\Program Files\StumbleUpon\StumbleUponIEBar.dll
                O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
                O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - D:\Program Files\jccatch_1.dll
                O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
                O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
                O2 - BHO: Windows Live OneCare Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Contrôle parental\fssbho.dll
                O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
                O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll (file missing)
                O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                O2 - BHO: ooVoo Toolbar - {A057A204-BACC-4D26-8087-36EE87E26986} - C:\PROGRA~1\OOVOOT~1\OOVOOT~1.DLL
                O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
                O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
                O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
                O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - D:\Program Files\getflash.dll
                O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                O3 - Toolbar: StumbleUpon Toolbar - {5093EB4C-3E93-40AB-9266-B607BA87BDC8} - C:\Program Files\StumbleUpon\StumbleUponIEBar.dll
                O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                O3 - Toolbar: ooVoo Toolbar - {A057A204-BACC-4D26-8087-36EE87E26986} - C:\PROGRA~1\OOVOOT~1\OOVOOT~1.DLL
                O3 - Toolbar: The Weather Channel Toolbar - {2E5E800E-6AC0-411E-940A-369530A35E43} - C:\WINDOWS\system32\TwcToolbarIe7.dll
                O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
                O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
                O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
                O4 - HKLM\..\Run: [Flashget] "D:\Program Files\FlashGet.exe" /min
                O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
                O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
                O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
                O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                O4 - HKCU\..\Run: [Registry Helper] "C:\Program Files\Registry Helper\LaunchRegistryHelper.Exe" "C:\Program Files\Registry Helper\RegistryHelper.Exe" /boot
                O4 - HKCU\..\Run: [SuperCopier2.exe] C:\Program Files\SuperCopier2\SuperCopier2.exe
                O4 - HKCU\..\Run: [Internet Download Accelerator] C:\Program Files\IDA\ida.exe -autorun
                O4 - HKCU\..\Run: [FreeCall] "C:\Program Files\FreeCall.com\FreeCall\FreeCall.exe" -nosplash -minimized
                O4 - HKCU\..\Run: [DW6] "C:\Program Files\The Weather Channel FW\Desktop\DesktopWeather.exe"
                O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
                O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RESEAU')
                O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
                O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
                O4 - Startup: FreeMeter.lnk = C:\Program Files\FreeMeter\FreeMeter.exe
                O4 - Global Startup: BTTray.lnk = ?
                O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
                O4 - Global Startup: PalTalk.lnk = C:\Program Files\Paltalk Messenger\paltalk.exe
                O4 - Global Startup: VersionTrackerPro.lnk = ?
                O8 - Extra context menu item: &Tout télécharger avec FlashGet - D:\Program Files\jc_all.htm
                O8 - Extra context menu item: &Télécharger avec FlashGet - D:\Program Files\jc_link.htm
                O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
                O8 - Extra context menu item: &تصدير إلى Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
                O8 - Extra context menu item: Download Video on This Page - C:\Program Files\Tomato\YouTube Video Downloader\IEPage.html
                O8 - Extra context menu item: Download Video This Links To - C:\Program Files\Tomato\YouTube Video Downloader\IELink.html
                O8 - Extra context menu item: StumbleUpon PhotoBlog It! - res://StumbleUponIEBar.dll/blogimage
                O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                O9 - Extra button: Download Video - {11F19C45-9675-488A-A8E0-8E8234DC245D} - C:\Program Files\Tomato\YouTube Video Downloader\IEPage.html
                O9 - Extra 'Tools' menuitem: Download Video on This Page - {11F19C45-9675-488A-A8E0-8E8234DC245D} - C:\Program Files\Tomato\YouTube Video Downloader\IEPage.html
                O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                O9 - Extra button: The Weather Channel - {2E5E800E-6AC0-411E-940A-369530A35E43} - (no file)
                O9 - Extra 'Tools' menuitem: The Weather Channel - {2E5E800E-6AC0-411E-940A-369530A35E43} - (no file)
                O9 - Extra button: PalTalk - {4EAFEF58-EEFA-4116-983D-03B49BCBFFFE} - C:\Program Files\Paltalk Messenger\Paltalk.exe (file missing)
                O9 - Extra button: (no name) - {53F6FCCD-9E22-4d71-86EA-6E43136192AB} - (no file)
                O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
                O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
                O9 - Extra button: (no name) - {925DAB62-F9AC-4221-806A-057BFB1014AA} - (no file)
                O9 - Extra button: E?E - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\MICROS~1\OFFICE11\REFIEBAR.DLL
                O9 - Extra button: (no name) - {9819CC0E-9669-4D01-9CD7-2C66DA43AC6C} - (no file)
                O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
                O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
                O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\Program Files\FlashGet.exe
                O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\Program Files\FlashGet.exe
                O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
                O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
                O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                O16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} (SpinTop DRM Control) - file:///C:/PROGRA~1/SALLY'~1/Images/stg_drm.ocx
                O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
                O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab
                O16 - DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} (ArmHelper Control) - file:///C:/Program%20Files/Sally's%20Spa/Images/armhelper.ocx
                O17 - HKLM\System\CCS\Services\Tcpip\..\{52DB4D70-E397-4E53-9532-EDD40304187A}: NameServer = 208.67.222.222 208.67.220.220
                O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
                O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
                O20 - AppInit_DLLs: avgrsstx.dll
                O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                O23 - Service: ASP.NET State Service (aspnet_state) - Unknown owner - C:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)
                O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
                O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
                O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
                O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
                O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
                O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
                O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
                O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
                O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe
                O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/ADMINI~1/LOCALS~1/Temp/msohtml1/01/clip_image001.gif
                O24 - Desktop Component 1: (no name) - https://www.3rbseyes.com/clientscript/vbulletin_global.js?v=367
                2. NASSI37
                  -----------\\ ToolBar S&D 1.2.2 XP/Vista

                  Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
                  X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) D CPU 3.00GHz )
                  BIOS : Default System BIOS
                  USER : Administrateur ( Administrator )
                  BOOT : Normal boot
                  Antivirus : Avira AntiVir PersonalEdition Classic 0.0.0.0 (Activated)
                  A:\ (USB)
                  C:\ (Local Disk) - NTFS - Total : 45 Go Free : 1 Go
                  D:\ (Local Disk) - FAT32 - Total : 30 Go Free : 8 Go
                  E:\ (CD or DVD)
                  F:\ (CD or DVD)

                  "C:\ToolBar SD" ( MAJ : 04-10-2008|21:00 )
                  Option : [2] ( 12/10/2008|20:15 )

                  -----------\\ SUPPRESSION

                  Supprime! - [Service] MyWebSearchService
                  Supprime! - C:\DOCUME~1\ADMINI~1\Cookies\administrateur@alot[1].txt
                  Supprime! - C:\DOCUME~1\ADMINI~1\Cookies\administrateur@h.alot[2].txt
                  Supprime! - C:\DOCUME~1\ADMINI~1\Cookies\administrateur@try.alot[2].txt
                  Supprime! - C:\Program Files\AskBarDis\bar
                  Supprime! - C:\Program Files\AskBarDis\PopSwatter
                  Supprime! - C:\Program Files\AskBarDis\unins000.dat
                  Supprime! - C:\Program Files\AskBarDis\unins000.exe
                  Supprime! - C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb124
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\MENUDM~1\PROGRA~1\Dealio
                  Supprime! - C:\DOCUME~1\ADMINI~1\APPLIC~1\FunWebProducts\Data
                  Supprime! - C:\Program Files\Fun Web Products\iPod
                  Supprime! - C:\Program Files\Fun Web Products\MSNMessenger
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\08-06-20-20-57-40
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\08-06-20-20-57-40.xm_
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\16x16talismania.gif
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\about.gif
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\action.gif
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\arcade.gif
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\bricks_of_egypt16x16.gif
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\buy.gif
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\cards.gif
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\cradle_of_persia16x16.gif
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\cradle_rome16x16.gif
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\deals.gif
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\download.gif
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\farm_frenzy16x16.gif
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\feedback.gif
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\help.gif
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\highlight.gif
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\jewelquest16x16.gif
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\jigsaw.gif
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\magic_match16x16.gif
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\mahjong.gif
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\micro_olympics16x16.gif
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\multiplayer.gif
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\mygames.gif
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\newGames.gif
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\oberonconfig.xm_
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\obSearchHistory.dat
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\Ocean_Express16x16.gif
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\partner.gif
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\peril_at_end_house16x16.gif
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\popup_off.gif
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\popup_on.gif
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\puzzle.gif
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\riseAtlantis16x16.gif
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\scurbbles16x16.gif
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\search.gif
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\search_goog.gif
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\seasonmatch16x16.gif
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\sendafriend.gif
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\sports.gif
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\trial.gif
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\uninstall.gif
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\update.gif
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\webgame.gif
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\xango16x16.gif
                  Supprime! - C:\DOCUME~1\ADMINI~1\Cookies\administrateur@contentcatalog.hotbar[2].txt
                  Supprime! - C:\DOCUME~1\ADMINI~1\Cookies\administrateur@hotbar[1].txt
                  Supprime! - C:\DOCUME~1\ADMINI~1\Cookies\administrateur@www.hotbar[2].txt
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\HotbarSA\HotbarSA.dat
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\HotbarSA\HotbarSAAbout.mht
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\HotbarSA\HotbarSAau.dat
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\HotbarSA\HotbarSAEULA.mht
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\HotbarSA\HotbarSA_kyf.dat
                  Supprime! - C:\DOCUME~1\ADMINI~1\Cookies\administrateur@mysearch[1].txt
                  Supprime! - C:\DOCUME~1\ADMINI~1\Cookies\administrateur@myway[2].txt
                  Supprime! - C:\DOCUME~1\ADMINI~1\Cookies\administrateur@mywebsearch[1].txt
                  Supprime! - C:\DOCUME~1\ADMINI~1\Cookies\administrateur@mywebsearch[2].txt
                  Supprime! - C:\DOCUME~1\ADMINI~1\Cookies\administrateur@hosted.zango[1].txt
                  Supprime! - C:\DOCUME~1\ADMINI~1\Cookies\administrateur@www.zango[2].txt
                  Supprime! - C:\DOCUME~1\ADMINI~1\Cookies\administrateur@zango[2].txt
                  Supprime! - C:\WINDOWS\iun6002.exe
                  Supprime! - C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\mc101.tmp
                  Supprime! - C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\mc105.tmp
                  Supprime! - C:\Program Files\AskBarDis
                  Supprime! - C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio
                  Supprime! - C:\DOCUME~1\ADMINI~1\APPLIC~1\FunWebProducts
                  Supprime! - C:\Program Files\Fun Web Products
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\HotbarSA
                  Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\2ACA5CC3-0F83-453D-A079-1076FE1A8B65

                  -----------\\ Recherche de Fichiers / Dossiers ...

                  -----------\\ Extensions

                  (Administrateur) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar
                  (Administrateur) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar
                  (Administrateur) - {DDC359D1-844A-42a7-9AA1-88A850A938A8} => chrome
                  (Administrateur) - {E9A1DEE0-C623-4439-8932-001E7D17607D} => ajtoolbar

                  -----------\\ [..\Internet Explorer\Main]

                  [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
                  "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
                  "Start Page"="https://www.msn.com/fr-fr/"
                  "Search Page"="https://www.google.com/?gws_rd=ssl"
                  "Search Bar"="http://www.google.com/toolbar/ie8/sidebar.html"
                  "SearchMigratedDefaultURL"="https://www.google.com/webhp?gws_rd=ssl{searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"
                  "Url"="http://www.microsoft.com/atwork/community/rss.xml"
                  "Url"="http://www.microsoft.com/athome/community/rss.xml"

                  [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
                  "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
                  "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
                  "Search Page"="https://www.google.com/?gws_rd=ssl"
                  "Start Page"="https://www.msn.com/fr-fr/"
                  "Search Bar"="http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr8/*http://www.yahoo.com/ext/search/search.html"

                  --------------------\\ Recherche d'autres infections

                  --------------------\\ Cracks & Keygens ..

                  C:\DOCUME~1\ADMINI~1\Mes documents\Downloads\Programs\mp3\Keygen.exe

                  1 - "C:\ToolBar SD\TB_1.txt" - 12/10/2008|17:00 - Option : [1]
                  2 - "C:\ToolBar SD\TB_2.txt" - 12/10/2008|20:27 - Option : [2]

                  -----------\\ Fin du rapport a 20:27:46.15

                  voici le rapport demander
                  1. ^^Marie^^
                    Re

                    Faudrait que tu supprimes tes cracks
                    Faut pas s'étonner d'avoir des véroles

                    Relance Toolbar-S&D en double-cliquant sur le raccourci.
                    Tape sur "2" puis valide en appuyant sur "Entrée".
                    ! Ne ferme pas la fenêtre lors de la suppression !
                    Un rapport sera généré, poste son contenu ici.

                    NOTE : Si ton Bureau ne réapparait pas, appuie simultanément sur Ctrl+Alt+Suppr pour ouvrir le Gestionnaire des tâches.
                    Rends-toi sur l'onglet "Processus". Clique en haut à gauche sur Fichier et choisis "Exécuter..."
                    Tape explorer puis valide.

                    ***********************************
                    @+
                    1. NASSI37
                      je m'excuse pour le retard j'avais du travail ailleur......je vient juste de revenir.....j'ais fait ce que vous m'avais demander....est ce que c'est tous?....
                    2. Rallymen007
                      @NASSI37Salut,

                      Marie t'a demandé de lancer un scan et une suppression avec Toolbar S&D, ce que tu as fait dans le post suivant.

                      Je te conseille par ailleurs de faire un (énorme ??) ménage dans les dossiers/sous-dossiers "Nouveau Dossier" (exemple de nom) de ton bureau, en faisant ceci chez mon cousin, j'ai viré quelques trucs plutôt gaspilleurs de place ou pourvant être nuisibles.

                      Et efface tous les cracks, sérials, keygens inutilisés.

                      Surtout évite les téléchargements sur la Mule et/ou LimeWire, car se sont les réseaux les plus pollués.

                      Petite règle de sécurité pour les téléchargements, si tu cherches Counter-Strike ou (encore pire) GRiD et que le téléchargement fait 35 ko !!

                      Enfin, la meilleure règle est de ne pas télécharger !!
                  2. NASSI37
                    -----------\\ ToolBar S&D 1.2.2 XP/Vista

                    Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
                    X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) D CPU 3.00GHz )
                    BIOS : Default System BIOS
                    USER : Administrateur ( Administrator )
                    BOOT : Normal boot
                    Antivirus : Avira AntiVir PersonalEdition Classic 0.0.0.0 (Activated)
                    A:\ (USB)
                    C:\ (Local Disk) - NTFS - Total : 45 Go Free : 1 Go
                    D:\ (Local Disk) - FAT32 - Total : 30 Go Free : 9 Go
                    E:\ (CD or DVD)
                    F:\ (CD or DVD)

                    "C:\ToolBar SD" ( MAJ : 04-10-2008|21:00 )
                    Option : [1] ( 12/10/2008|16:56 )

                    -----------\\ Recherche de Fichiers / Dossiers ...

                    [Service] MyWebSearchService
                    C:\DOCUME~1\ADMINI~1\Cookies\administrateur@alot[1].txt
                    C:\DOCUME~1\ADMINI~1\Cookies\administrateur@h.alot[2].txt
                    C:\DOCUME~1\ADMINI~1\Cookies\administrateur@try.alot[2].txt
                    C:\Program Files\AskBarDis
                    C:\Program Files\AskBarDis\bar
                    C:\Program Files\AskBarDis\PopSwatter
                    C:\Program Files\AskBarDis\unins000.dat
                    C:\Program Files\AskBarDis\unins000.exe
                    C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio
                    C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb124
                    C:\DOCUME~1\ALLUSE~1.WIN\MENUDM~1\PROGRA~1\Dealio
                    C:\DOCUME~1\ADMINI~1\APPLIC~1\FunWebProducts
                    C:\DOCUME~1\ADMINI~1\APPLIC~1\FunWebProducts\Data
                    C:\Program Files\Fun Web Products
                    C:\Program Files\Fun Web Products\iPod
                    C:\Program Files\Fun Web Products\MSNMessenger
                    C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar
                    C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\08-06-20-20-57-40
                    C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\08-06-20-20-57-40.xm_
                    C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\16x16talismania.gif
                    C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\about.gif
                    C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\action.gif
                    C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\arcade.gif
                    C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\bricks_of_egypt16x16.gif
                    C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\buy.gif
                    C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\cards.gif
                    C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\cradle_of_persia16x16.gif
                    C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\cradle_rome16x16.gif
                    C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\deals.gif
                    C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\download.gif
                    C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\farm_frenzy16x16.gif
                    C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\feedback.gif
                    C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\help.gif
                    C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\highlight.gif
                    C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\jewelquest16x16.gif
                    C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\jigsaw.gif
                    C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\magic_match16x16.gif
                    C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\mahjong.gif
                    C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\micro_olympics16x16.gif
                    C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\multiplayer.gif
                    C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\mygames.gif
                    C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\newGames.gif
                    C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\oberonconfig.xm_
                    C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\obSearchHistory.dat
                    C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\Ocean_Express16x16.gif
                    C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\partner.gif
                    C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\peril_at_end_house16x16.gif
                    C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\popup_off.gif
                    C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\popup_on.gif
                    C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\puzzle.gif
                    C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\riseAtlantis16x16.gif
                    C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\scurbbles16x16.gif
                    C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\search.gif
                    C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\search_goog.gif
                    C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\seasonmatch16x16.gif
                    C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\sendafriend.gif
                    C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\sports.gif
                    C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\trial.gif
                    C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\uninstall.gif
                    C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\update.gif
                    C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\webgame.gif
                    C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\xango16x16.gif
                    C:\DOCUME~1\ADMINI~1\Cookies\administrateur@contentcatalog.hotbar[2].txt
                    C:\DOCUME~1\ADMINI~1\Cookies\administrateur@hotbar[1].txt
                    C:\DOCUME~1\ADMINI~1\Cookies\administrateur@www.hotbar[2].txt
                    C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\HotbarSA
                    C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\HotbarSA\HotbarSA.dat
                    C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\HotbarSA\HotbarSAAbout.mht
                    C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\HotbarSA\HotbarSAau.dat
                    C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\HotbarSA\HotbarSAEULA.mht
                    C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\HotbarSA\HotbarSA_kyf.dat
                    C:\DOCUME~1\ADMINI~1\Cookies\administrateur@mysearch[1].txt
                    C:\DOCUME~1\ADMINI~1\Cookies\administrateur@myway[2].txt
                    C:\DOCUME~1\ADMINI~1\Cookies\administrateur@mywebsearch[1].txt
                    C:\DOCUME~1\ADMINI~1\Cookies\administrateur@mywebsearch[2].txt
                    C:\DOCUME~1\ADMINI~1\Cookies\administrateur@hosted.zango[1].txt
                    C:\DOCUME~1\ADMINI~1\Cookies\administrateur@www.zango[2].txt
                    C:\DOCUME~1\ADMINI~1\Cookies\administrateur@zango[2].txt
                    C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\2ACA5CC3-0F83-453D-A079-1076FE1A8B65
                    C:\WINDOWS\iun6002.exe
                    C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\mc101.tmp
                    C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\mc105.tmp

                    -----------\\ Extensions

                    (Administrateur) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar
                    (Administrateur) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar
                    (Administrateur) - {DDC359D1-844A-42a7-9AA1-88A850A938A8} => chrome
                    (Administrateur) - {E9A1DEE0-C623-4439-8932-001E7D17607D} => ajtoolbar

                    -----------\\ [..\Internet Explorer\Main]

                    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
                    "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
                    "Start Page"="https://www.msn.com/fr-fr/"
                    "Search Page"="https://www.google.com/?gws_rd=ssl"
                    "Search Bar"="http://www.google.com/toolbar/ie8/sidebar.html"
                    "SearchMigratedDefaultURL"="https://www.google.com/webhp?gws_rd=ssl{searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"
                    "Url"="http://www.microsoft.com/atwork/community/rss.xml"
                    "Url"="http://www.microsoft.com/athome/community/rss.xml"

                    [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
                    "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
                    "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
                    "Search Page"="https://www.google.com/?gws_rd=ssl"
                    "Start Page"="https://www.msn.com/fr-fr/"
                    "Search Bar"="http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr8/*http://www.yahoo.com/ext/search/search.html"

                    --------------------\\ Recherche d'autres infections

                    --------------------\\ Cracks & Keygens ..

                    C:\DOCUME~1\ADMINI~1\Mes documents\Downloads\Programs\mp3\Keygen.exe

                    1 - "C:\ToolBar SD\TB_1.txt" - 12/10/2008|17:00 - Option : [1]

                    -----------\\ Fin du rapport a 17:00:21.81

                    voila le dernier rapport ...........merci d'avance...
                    1. NASSI37
                      [ Rapport ToolsCleaner version 2.2.3 (par A.Rothstein & dj QUIOU) ]

                      -->- Recherche:

                      C:\rapport_clean.txt: trouvé !
                      C:\Documents and Settings\Administrateur\Bureau\Nouveau dossier\Nouveau dossier (3)\محمولات\Clean.zip: trouvé !
                      C:\Documents and Settings\Administrateur\Bureau\Nouveau dossier\Nouveau dossier (3)\محمولات\HijackThis.exe: trouvé !
                      C:\Documents and Settings\Administrateur\Bureau\Nouveau dossier\Nouveau dossier (3)\محمولات\hijackthis.log: trouvé !
                      C:\Documents and Settings\Administrateur\Bureau\Nouveau dossier\Nouveau dossier (3)\محمولات\clean\clean\hijackthis.log: trouvé !
                      C:\Documents and Settings\Administrateur\Recent\HijackThis.lnk: trouvé !
                      C:\Nouveau dossier\rapport_clean.txt: trouvé !

                      ---------------------------------
                      -->- Suppression:

                      C:\Documents and Settings\Administrateur\Bureau\Nouveau dossier\Nouveau dossier (3)\محمولات\Clean.zip: supprimé !
                      C:\Documents and Settings\Administrateur\Bureau\Nouveau dossier\Nouveau dossier (3)\محمولات\HijackThis.exe: supprimé !
                      C:\Documents and Settings\Administrateur\Recent\HijackThis.lnk: supprimé !
                      C:\rapport_clean.txt: supprimé !
                      C:\Documents and Settings\Administrateur\Bureau\Nouveau dossier\Nouveau dossier (3)\محمولات\hijackthis.log: supprimé !
                      C:\Documents and Settings\Administrateur\Bureau\Nouveau dossier\Nouveau dossier (3)\محمولات\clean\clean\hijackthis.log: supprimé !
                      C:\Nouveau dossier\rapport_clean.txt: supprimé !
                      voici...le rapport de Tcleaner
                      2. NASSI37
                        MERCI..............J'ais deja AVG comme antivir............c'a peut marcher avec? je peux poursuivre vos conseils?
                        1. ^^Marie^^
                          Bonjour

                          Tu roules a tombeau ouvert
                          Tu n'as aucune protection

                          Donc installe un anti virus

                          ANTIVIR
                          https://www.avira.com/
                          Tuto
                          http://speedweb1.free.fr/frames2.php?page=tuto5
                          http://mr.dodo.perso.cegetel.net/tuto21.htm
                          https://www.malekal.com/tutorial-sur-lantivirus-antivir/

                          ENSUITE


                          • Télécharge ToolsCleaner                           de A.Roshtein sur ton Bureau.(sur un des 2 liens)
                          http://pc-system.fr/
                          http://www.commentcamarche.net/telecharger/telecharger 34055291 toolscleaner
                          • Clique sur Recherche et laisse le scan se terminer.
                          • Clique, sur Suppression pour finaliser.
                          • Tu peux, si tu le souhaites, te servir des Options facultatives.
                          • Clique sur Quitter, pour que le rapport puisse se créer.
                          • Poste moi le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur( C:\).

                          ENFIN

                          Télécharge Toolbar-S&D (Team IDN) sur ton Bureau.
                          https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2

                          * Lance l'installation du programme en exécutant le fichier téléchargé.
                          * Double-clique maintenant sur le raccourci de Toolbar-S&D.
                          * Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.
                          * Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.
                          * Poste le rapport généré. (C:\TB.txt)

                          +++

                          1. Rallymen007
                            Salut,

                            Fait une coque en fibre de carbonne, tu enlève la C.G (c'est trrrrrrrès lourd) et les ventilos.
                            1. nassi
                              j' ais rien compri
                            2. Rallymen007
                              @nassiC'était un blague !!

                              Mais sinon je te conseille un reformatage. Radical, ça efface tout le DD, tes donnes et les virus, fait des copies de sauvegardes.

                              Tu peut aussi faire ça:
                              -Télécharges hijackthis--> http://www.trendsecure.com/portal/en-US/_download/HiJackThis.exe

                              -Clique sur le .exe ensuite clique sur "Do a system scan and save a logfile"

                              -Poste moi le rapport a la fin du scan.
                            3. NASSI37
                              Logfile of Trend Micro HijackThis v2.0.2
                              Scan saved at 14:54:10, on 12/10/2008
                              Platform: Windows XP SP2 (WinNT 5.01.2600)
                              MSIE: Internet Explorer v8.00 (8.00.6001.18241)
                              Boot mode: Normal

                              Running processes:
                              C:\WINDOWS\System32\smss.exe
                              C:\WINDOWS\system32\csrss.exe
                              C:\WINDOWS\system32\winlogon.exe
                              C:\WINDOWS\system32\services.exe
                              C:\WINDOWS\system32\lsass.exe
                              C:\WINDOWS\system32\svchost.exe
                              C:\WINDOWS\system32\svchost.exe
                              C:\WINDOWS\System32\svchost.exe
                              C:\WINDOWS\system32\svchost.exe
                              C:\WINDOWS\system32\svchost.exe
                              C:\WINDOWS\system32\spoolsv.exe
                              C:\WINDOWS\System32\svchost.exe
                              C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                              C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
                              C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
                              C:\Program Files\Windows Live\Contrôle parental\fsssvc.exe
                              C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
                              C:\WINDOWS\system32\IoctlSvc.exe
                              C:\WINDOWS\system32\svchost.exe
                              C:\WINDOWS\Explorer.EXE
                              C:\PROGRA~1\AVG\AVG8\avgrsx.exe
                              C:\WINDOWS\System32\alg.exe
                              C:\WINDOWS\system32\WgaTray.exe
                              C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
                              D:\Program Files\FlashGet.exe
                              C:\Program Files\Picasa2\PicasaMediaDetector.exe
                              C:\Program Files\Athan\Athan.exe
                              C:\PROGRA~1\AVG\AVG8\avgtray.exe
                              C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
                              C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                              C:\Program Files\SuperCopier2\SuperCopier2.exe
                              C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
                              C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
                              C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe
                              C:\PROGRA~1\WIDCOMM\LOGICI~1\BTSTAC~1.EXE
                              C:\PROGRA~1\AVG\AVG8\avgscanx.exe
                              C:\Program Files\Mozilla Firefox\firefox.exe
                              C:\Program Files\Windows Media Player\wmplayer.exe
                              C:\Documents and Settings\Administrateur\Bureau\Nouveau dossier\Nouveau dossier (3)\محمولات\HiJackThis.exe
                              C:\WINDOWS\system32\wbem\wmiprvse.exe

                              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr8/*http://www.yahoo.com/ext/search/search.html
                              R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                              R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                              R3 - URLSearchHook: (no name) - {9CB65206-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL (file missing)
                              O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                              O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                              O2 - BHO: StumbleUpon Launcher - {145B29F4-A56B-4b90-BBAC-45784EBEBBB7} - C:\Program Files\StumbleUpon\StumbleUponIEBar.dll
                              O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
                              O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
                              O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - D:\Program Files\jccatch_1.dll
                              O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
                              O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
                              O2 - BHO: Windows Live OneCare Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Contrôle parental\fssbho.dll
                              O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
                              O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll (file missing)
                              O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                              O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                              O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                              O2 - BHO: ooVoo Toolbar - {A057A204-BACC-4D26-8087-36EE87E26986} - C:\PROGRA~1\OOVOOT~1\OOVOOT~1.DLL
                              O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
                              O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
                              O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
                              O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                              O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - D:\Program Files\getflash.dll
                              O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                              O3 - Toolbar: StumbleUpon Toolbar - {5093EB4C-3E93-40AB-9266-B607BA87BDC8} - C:\Program Files\StumbleUpon\StumbleUponIEBar.dll
                              O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
                              O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                              O3 - Toolbar: Ask Toolbar - {FE063DB9-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL (file missing)
                              O3 - Toolbar: ooVoo Toolbar - {A057A204-BACC-4D26-8087-36EE87E26986} - C:\PROGRA~1\OOVOOT~1\OOVOOT~1.DLL
                              O3 - Toolbar: The Weather Channel Toolbar - {2E5E800E-6AC0-411E-940A-369530A35E43} - C:\WINDOWS\system32\TwcToolbarIe7.dll
                              O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
                              O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
                              O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
                              O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
                              O4 - HKLM\..\Run: [MyWebSearch Plugin] rundll32 C:\PROGRA~1\MYWEBS~1\bar\7.bin\M3PLUGIN.DLL,UPF
                              O4 - HKLM\..\Run: [Flashget] "D:\Program Files\FlashGet.exe" /min
                              O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
                              O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                              O4 - HKLM\..\Run: [Athan] C:\Program Files\Athan\Athan.exe
                              O4 - HKLM\..\Run: [My Web Search Bar Search Scope Monitor] "C:\PROGRA~1\MYWEBS~1\bar\7.bin\m3SrchMn.exe" /m=2 /w
                              O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
                              O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
                              O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                              O4 - HKCU\..\Run: [Registry Helper] "C:\Program Files\Registry Helper\LaunchRegistryHelper.Exe" "C:\Program Files\Registry Helper\RegistryHelper.Exe" /boot
                              O4 - HKCU\..\Run: [SuperCopier2.exe] C:\Program Files\SuperCopier2\SuperCopier2.exe
                              O4 - HKCU\..\Run: [Internet Download Accelerator] C:\Program Files\IDA\ida.exe -autorun
                              O4 - HKCU\..\Run: [FreeCall] "C:\Program Files\FreeCall.com\FreeCall\FreeCall.exe" -nosplash -minimized
                              O4 - HKCU\..\Run: [DW6] "C:\Program Files\The Weather Channel FW\Desktop\DesktopWeather.exe"
                              O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
                              O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RESEAU')
                              O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
                              O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
                              O4 - Startup: FreeMeter.lnk = C:\Program Files\FreeMeter\FreeMeter.exe
                              O4 - Global Startup: BTTray.lnk = ?
                              O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
                              O4 - Global Startup: PalTalk.lnk = C:\Program Files\Paltalk Messenger\paltalk.exe
                              O4 - Global Startup: VersionTrackerPro.lnk = ?
                              O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZKman000
                              O8 - Extra context menu item: &Tout télécharger avec FlashGet - D:\Program Files\jc_all.htm
                              O8 - Extra context menu item: &Télécharger avec FlashGet - D:\Program Files\jc_link.htm
                              O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
                              O8 - Extra context menu item: &تصدير إلى Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
                              O8 - Extra context menu item: Compare Prices with &Dealio - C:\Documents and Settings\Administrateur\Application Data\Dealio\kb124\res\DealioSearch.html
                              O8 - Extra context menu item: Download Video on This Page - C:\Program Files\Tomato\YouTube Video Downloader\IEPage.html
                              O8 - Extra context menu item: Download Video This Links To - C:\Program Files\Tomato\YouTube Video Downloader\IELink.html
                              O8 - Extra context menu item: StumbleUpon PhotoBlog It! - res://StumbleUponIEBar.dll/blogimage
                              O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                              O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                              O9 - Extra button: Download Video - {11F19C45-9675-488A-A8E0-8E8234DC245D} - C:\Program Files\Tomato\YouTube Video Downloader\IEPage.html
                              O9 - Extra 'Tools' menuitem: Download Video on This Page - {11F19C45-9675-488A-A8E0-8E8234DC245D} - C:\Program Files\Tomato\YouTube Video Downloader\IEPage.html
                              O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                              O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                              O9 - Extra button: The Weather Channel - {2E5E800E-6AC0-411E-940A-369530A35E43} - (no file)
                              O9 - Extra 'Tools' menuitem: The Weather Channel - {2E5E800E-6AC0-411E-940A-369530A35E43} - (no file)
                              O9 - Extra button: PalTalk - {4EAFEF58-EEFA-4116-983D-03B49BCBFFFE} - C:\Program Files\Paltalk Messenger\Paltalk.exe (file missing)
                              O9 - Extra button: (no name) - {53F6FCCD-9E22-4d71-86EA-6E43136192AB} - (no file)
                              O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
                              O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
                              O9 - Extra button: (no name) - {925DAB62-F9AC-4221-806A-057BFB1014AA} - (no file)
                              O9 - Extra button: E?E - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\MICROS~1\OFFICE11\REFIEBAR.DLL
                              O9 - Extra button: (no name) - {9819CC0E-9669-4D01-9CD7-2C66DA43AC6C} - (no file)
                              O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
                              O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
                              O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\Program Files\FlashGet.exe
                              O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\Program Files\FlashGet.exe
                              O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                              O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                              O9 - Extra button: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb124\Dealio.dll (file missing)
                              O9 - Extra 'Tools' menuitem: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb124\Dealio.dll (file missing)
                              O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                              O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                              O16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} (SpinTop DRM Control) - file:///C:/PROGRA~1/SALLY'~1/Images/stg_drm.ocx
                              O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
                              O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab
                              O16 - DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} (ArmHelper Control) - file:///C:/Program%20Files/Sally's%20Spa/Images/armhelper.ocx
                              O17 - HKLM\System\CCS\Services\Tcpip\..\{52DB4D70-E397-4E53-9532-EDD40304187A}: NameServer = 208.67.222.222 208.67.220.220
                              O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
                              O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
                              O20 - AppInit_DLLs: avgrsstx.dll
                              O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                              O23 - Service: ASP.NET State Service (aspnet_state) - Unknown owner - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)
                              O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
                              O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
                              O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
                              O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                              O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
                              O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
                              O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
                              O23 - Service: My Web Search Service (MyWebSearchService) - Unknown owner - C:\PROGRA~1\MYWEBS~1\bar\7.bin\mwssvc.exe (file missing)
                              O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
                              O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
                              O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe
                              O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe
                              O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/ADMINI~1/LOCALS~1/Temp/msohtml1/01/clip_image001.gif
                              O24 - Desktop Component 1: (no name) - https://www.3rbseyes.com/clientscript/vbulletin_global.js?v=367