Pc trop lourd.........

nassi -  
Bonjour,
voilà..a l' ouverture de wind.un ms apparait avec une croix rouge dsisant :C:/program-1/MYWEBS-1/bar/7.bin/M3PLUGIN.DLL le module specifie est introuvable. aussi apres l'analyse avec AVG j'ais :warning count:6 ... windows se bloque ...aussi l' ouvertute des icons est tres lourde ....tout est lourd ..meme l'internet..que doije faire,????????? aider moi SVP....
Configuration: Windows XP
Firefox 3.0.3

18 réponses

  1.  ^^Marie^^
    Salut

    Supprime toutes ces barres d'outils inutiles et qui prennent de la place

    Windows Live Toolbar
    StumbleUpon Toolbar
    ooVoo Toolbar
    Yahoo! Toolbar
    The Weather Channel Toolbar
    AVG Security Toolbar

    1/ Télécharge et installe CCleaner
    (attention à l'installation penser à DECOCHER l'installation de Yahoo toolbar discrètement proposé en plus de CCleaner).

    http://www.clubic.com/lancer-le-telechargement-20932-0-ccleaner-crap-cleaner-.html

    2/ Télécharge AVG
    https://kerio.probb.fr/t387-tuto-avg-anti-spyware-anti-spyware
    http://www.commentcamarche.net/telecharger/avg anti spyware 218 avis opinions.php3#avis

    Lance AVG Anti-Spyware et clique sur le bouton Mise à jour.
    Tu fermes

    3/ Redémarre en mode sans échec
    (Pour cela : démarrer le PC en tapotant sur la touche F8 du clavier jusqu'à ce que le menu des options avancées de Windows apparaisse puis avec les touches fléchées du clavier, sélectionner Mode sans échec puis appuyer sur la touche Entrée...)
    Attention tu n'as pas accès à Internet dans ce mode donc note ou imprime les consignes qui suivent.
    http://www.coupdepoucepc.com/modules/news/article.php?storyid=253
    https://www.micro-astuce.com/depannage/demarrer-mode-sans-echec.php

    4/ Lance HijackThis
    puis --> Do a system scan only
    coche les lignes indiquées ci-dessous
    puis --> Fix checked
    puis oui à la question de confirmation

    O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll (file missing)
    O2 - BHO: ooVoo Toolbar - {A057A204-BACC-4D26-8087-36EE87E26986} - C:\PROGRA~1\OOVOOT~1\OOVOOT~1.DLL
    O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" –atboottime
    O4 - HKCU\..\Run: [Registry Helper] "C:\Program Files\Registry Helper\LaunchRegistryHelper.Exe" "C:\Program Files\Registry Helper\RegistryHelper.Exe" /boot
    O4 - HKCU\..\Run: [DW6] "C:\Program Files\The Weather Channel FW\Desktop\DesktopWeather.exe"
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
    O9 - Extra button: The Weather Channel - {2E5E800E-6AC0-411E-940A-369530A35E43} - (no file)
    O9 - Extra 'Tools' menuitem: The Weather Channel - {2E5E800E-6AC0-411E-940A-369530A35E43} - (no file)
    O9 - Extra button: PalTalk - {4EAFEF58-EEFA-4116-983D-03B49BCBFFFE} - C:\Program Files\Paltalk Messenger\Paltalk.exe (file missing)
    O9 - Extra button: (no name) - {925DAB62-F9AC-4221-806A-057BFB1014AA} - (no file)
    O16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} (SpinTop DRM Control) - file:///C:/PROGRA~1/SALLY'~1/Images/stg_drm.ocx
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab
    O16 - DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} (ArmHelper Control) - file:///C:/Program%20Files/Sally's%20Spa/Images/armhelper.ocx
    O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe


    7/ Lance CCleaner puis bouton Analyse
    ensuite Bouton Lancer le Nettoyage

    8/ Lance AVG
    Lance AVG Anti-Spyware
    Clique sur le bouton Analyse (de la barre d'outils)
    Puis sur l'onglets Comment réagir, clique sur Actions recommandées.
    Reviens à l'onglet Analyse. Clique sur Analyse complète du système.
    /!\ Si un fichier est infecté en fin d'analyse /!\
    choisis l'option " Appliquer toutes les actions " en bas.
    Clique sur "Enregistrer le rapport" puis sur "Enregistrer le rapport sous"
    Enregistre ce fichier texte sur ton bureau.
    Copie/colle le rapport

    9/ Redémarre normalement et poste un nouveau rapport HijackThis.

    as-tu encore des dysfonctionnements ?

    Fait
    -> Démarrer
    -> Exécuter...
    Tape Services.msc puis valide
    Double clique sur " Boonty Games "
    Clique en bas sur " Arrêter "
    Valide les changements.
    -----
    Ouvre Hijackthis puis:
    -> Open the Misc Tools Section
    -> Delete a NT Service
    Tape " BOONTY " puis valide.

    Utilises tu des jeux de boonty games depuis longtemps ?
    Voici une petite information sur Boonty games

    Leur politique :
    "Il se peut que nous partageons aussi des informations payantes avec des tiers
    qui fournissent ds services payants et partage des données regroupées montrant le type
    et le nombre de jeux videos que vous téléchargez, votre age, votre sexe, vos occupations,
    niveau d'éducation, localité géographique, données sur l'équipement de votre ordinateur,
    internet et intérêts pour les jeux videos, activités et entrainement des jeux édités.
    De plus, nous partageons les adresses email avec des tiers fournisseurs de compte mails

    +++

    1. Rallymen007
      Salut,

      Fait une coque en fibre de carbonne, tu enlève la C.G (c'est trrrrrrrès lourd) et les ventilos.
      1. nassi
        j' ais rien compri
      2. Rallymen007
        @nassiC'était un blague !!

        Mais sinon je te conseille un reformatage. Radical, ça efface tout le DD, tes donnes et les virus, fait des copies de sauvegardes.

        Tu peut aussi faire ça:
        -Télécharges hijackthis--> http://www.trendsecure.com/portal/en-US/_download/HiJackThis.exe

        -Clique sur le .exe ensuite clique sur "Do a system scan and save a logfile"

        -Poste moi le rapport a la fin du scan.
      3. NASSI37
        Logfile of Trend Micro HijackThis v2.0.2
        Scan saved at 14:54:10, on 12/10/2008
        Platform: Windows XP SP2 (WinNT 5.01.2600)
        MSIE: Internet Explorer v8.00 (8.00.6001.18241)
        Boot mode: Normal

        Running processes:
        C:\WINDOWS\System32\smss.exe
        C:\WINDOWS\system32\csrss.exe
        C:\WINDOWS\system32\winlogon.exe
        C:\WINDOWS\system32\services.exe
        C:\WINDOWS\system32\lsass.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\system32\spoolsv.exe
        C:\WINDOWS\System32\svchost.exe
        C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
        C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
        C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
        C:\Program Files\Windows Live\Contrôle parental\fsssvc.exe
        C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
        C:\WINDOWS\system32\IoctlSvc.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\Explorer.EXE
        C:\PROGRA~1\AVG\AVG8\avgrsx.exe
        C:\WINDOWS\System32\alg.exe
        C:\WINDOWS\system32\WgaTray.exe
        C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
        D:\Program Files\FlashGet.exe
        C:\Program Files\Picasa2\PicasaMediaDetector.exe
        C:\Program Files\Athan\Athan.exe
        C:\PROGRA~1\AVG\AVG8\avgtray.exe
        C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
        C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
        C:\Program Files\SuperCopier2\SuperCopier2.exe
        C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
        C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
        C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe
        C:\PROGRA~1\WIDCOMM\LOGICI~1\BTSTAC~1.EXE
        C:\PROGRA~1\AVG\AVG8\avgscanx.exe
        C:\Program Files\Mozilla Firefox\firefox.exe
        C:\Program Files\Windows Media Player\wmplayer.exe
        C:\Documents and Settings\Administrateur\Bureau\Nouveau dossier\Nouveau dossier (3)\محمولات\HiJackThis.exe
        C:\WINDOWS\system32\wbem\wmiprvse.exe

        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr8/*http://www.yahoo.com/ext/search/search.html
        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
        R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
        R3 - URLSearchHook: (no name) - {9CB65206-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL (file missing)
        O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
        O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
        O2 - BHO: StumbleUpon Launcher - {145B29F4-A56B-4b90-BBAC-45784EBEBBB7} - C:\Program Files\StumbleUpon\StumbleUponIEBar.dll
        O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
        O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
        O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - D:\Program Files\jccatch_1.dll
        O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
        O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
        O2 - BHO: Windows Live OneCare Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Contrôle parental\fssbho.dll
        O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
        O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll (file missing)
        O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
        O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
        O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
        O2 - BHO: ooVoo Toolbar - {A057A204-BACC-4D26-8087-36EE87E26986} - C:\PROGRA~1\OOVOOT~1\OOVOOT~1.DLL
        O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
        O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
        O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
        O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
        O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - D:\Program Files\getflash.dll
        O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
        O3 - Toolbar: StumbleUpon Toolbar - {5093EB4C-3E93-40AB-9266-B607BA87BDC8} - C:\Program Files\StumbleUpon\StumbleUponIEBar.dll
        O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
        O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
        O3 - Toolbar: Ask Toolbar - {FE063DB9-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL (file missing)
        O3 - Toolbar: ooVoo Toolbar - {A057A204-BACC-4D26-8087-36EE87E26986} - C:\PROGRA~1\OOVOOT~1\OOVOOT~1.DLL
        O3 - Toolbar: The Weather Channel Toolbar - {2E5E800E-6AC0-411E-940A-369530A35E43} - C:\WINDOWS\system32\TwcToolbarIe7.dll
        O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
        O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
        O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
        O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
        O4 - HKLM\..\Run: [MyWebSearch Plugin] rundll32 C:\PROGRA~1\MYWEBS~1\bar\7.bin\M3PLUGIN.DLL,UPF
        O4 - HKLM\..\Run: [Flashget] "D:\Program Files\FlashGet.exe" /min
        O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
        O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
        O4 - HKLM\..\Run: [Athan] C:\Program Files\Athan\Athan.exe
        O4 - HKLM\..\Run: [My Web Search Bar Search Scope Monitor] "C:\PROGRA~1\MYWEBS~1\bar\7.bin\m3SrchMn.exe" /m=2 /w
        O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
        O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
        O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
        O4 - HKCU\..\Run: [Registry Helper] "C:\Program Files\Registry Helper\LaunchRegistryHelper.Exe" "C:\Program Files\Registry Helper\RegistryHelper.Exe" /boot
        O4 - HKCU\..\Run: [SuperCopier2.exe] C:\Program Files\SuperCopier2\SuperCopier2.exe
        O4 - HKCU\..\Run: [Internet Download Accelerator] C:\Program Files\IDA\ida.exe -autorun
        O4 - HKCU\..\Run: [FreeCall] "C:\Program Files\FreeCall.com\FreeCall\FreeCall.exe" -nosplash -minimized
        O4 - HKCU\..\Run: [DW6] "C:\Program Files\The Weather Channel FW\Desktop\DesktopWeather.exe"
        O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
        O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RESEAU')
        O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
        O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
        O4 - Startup: FreeMeter.lnk = C:\Program Files\FreeMeter\FreeMeter.exe
        O4 - Global Startup: BTTray.lnk = ?
        O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
        O4 - Global Startup: PalTalk.lnk = C:\Program Files\Paltalk Messenger\paltalk.exe
        O4 - Global Startup: VersionTrackerPro.lnk = ?
        O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZKman000
        O8 - Extra context menu item: &Tout télécharger avec FlashGet - D:\Program Files\jc_all.htm
        O8 - Extra context menu item: &Télécharger avec FlashGet - D:\Program Files\jc_link.htm
        O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
        O8 - Extra context menu item: &تصدير إلى Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
        O8 - Extra context menu item: Compare Prices with &Dealio - C:\Documents and Settings\Administrateur\Application Data\Dealio\kb124\res\DealioSearch.html
        O8 - Extra context menu item: Download Video on This Page - C:\Program Files\Tomato\YouTube Video Downloader\IEPage.html
        O8 - Extra context menu item: Download Video This Links To - C:\Program Files\Tomato\YouTube Video Downloader\IELink.html
        O8 - Extra context menu item: StumbleUpon PhotoBlog It! - res://StumbleUponIEBar.dll/blogimage
        O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
        O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
        O9 - Extra button: Download Video - {11F19C45-9675-488A-A8E0-8E8234DC245D} - C:\Program Files\Tomato\YouTube Video Downloader\IEPage.html
        O9 - Extra 'Tools' menuitem: Download Video on This Page - {11F19C45-9675-488A-A8E0-8E8234DC245D} - C:\Program Files\Tomato\YouTube Video Downloader\IEPage.html
        O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
        O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
        O9 - Extra button: The Weather Channel - {2E5E800E-6AC0-411E-940A-369530A35E43} - (no file)
        O9 - Extra 'Tools' menuitem: The Weather Channel - {2E5E800E-6AC0-411E-940A-369530A35E43} - (no file)
        O9 - Extra button: PalTalk - {4EAFEF58-EEFA-4116-983D-03B49BCBFFFE} - C:\Program Files\Paltalk Messenger\Paltalk.exe (file missing)
        O9 - Extra button: (no name) - {53F6FCCD-9E22-4d71-86EA-6E43136192AB} - (no file)
        O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
        O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
        O9 - Extra button: (no name) - {925DAB62-F9AC-4221-806A-057BFB1014AA} - (no file)
        O9 - Extra button: E?E - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\MICROS~1\OFFICE11\REFIEBAR.DLL
        O9 - Extra button: (no name) - {9819CC0E-9669-4D01-9CD7-2C66DA43AC6C} - (no file)
        O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
        O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
        O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\Program Files\FlashGet.exe
        O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\Program Files\FlashGet.exe
        O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
        O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
        O9 - Extra button: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb124\Dealio.dll (file missing)
        O9 - Extra 'Tools' menuitem: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb124\Dealio.dll (file missing)
        O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} (SpinTop DRM Control) - file:///C:/PROGRA~1/SALLY'~1/Images/stg_drm.ocx
        O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
        O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab
        O16 - DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} (ArmHelper Control) - file:///C:/Program%20Files/Sally's%20Spa/Images/armhelper.ocx
        O17 - HKLM\System\CCS\Services\Tcpip\..\{52DB4D70-E397-4E53-9532-EDD40304187A}: NameServer = 208.67.222.222 208.67.220.220
        O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
        O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
        O20 - AppInit_DLLs: avgrsstx.dll
        O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
        O23 - Service: ASP.NET State Service (aspnet_state) - Unknown owner - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)
        O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
        O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
        O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
        O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
        O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
        O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
        O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
        O23 - Service: My Web Search Service (MyWebSearchService) - Unknown owner - C:\PROGRA~1\MYWEBS~1\bar\7.bin\mwssvc.exe (file missing)
        O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
        O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
        O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe
        O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe
        O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/ADMINI~1/LOCALS~1/Temp/msohtml1/01/clip_image001.gif
        O24 - Desktop Component 1: (no name) - https://www.3rbseyes.com/clientscript/vbulletin_global.js?v=367
    2. ^^Marie^^
      Bonjour

      Tu roules a tombeau ouvert
      Tu n'as aucune protection

      Donc installe un anti virus

      ANTIVIR
      https://www.avira.com/
      Tuto
      http://speedweb1.free.fr/frames2.php?page=tuto5
      http://mr.dodo.perso.cegetel.net/tuto21.htm
      https://www.malekal.com/tutorial-sur-lantivirus-antivir/

      ENSUITE


      • Télécharge ToolsCleaner       de A.Roshtein sur ton Bureau.(sur un des 2 liens)
      http://pc-system.fr/
      http://www.commentcamarche.net/telecharger/telecharger 34055291 toolscleaner
      • Clique sur Recherche et laisse le scan se terminer.
      • Clique, sur Suppression pour finaliser.
      • Tu peux, si tu le souhaites, te servir des Options facultatives.
      • Clique sur Quitter, pour que le rapport puisse se créer.
      • Poste moi le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur( C:\).

      ENFIN

      Télécharge Toolbar-S&D (Team IDN) sur ton Bureau.
      https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2

      * Lance l'installation du programme en exécutant le fichier téléchargé.
      * Double-clique maintenant sur le raccourci de Toolbar-S&D.
      * Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.
      * Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.
      * Poste le rapport généré. (C:\TB.txt)

      +++

      1. NASSI37
        MERCI..............J'ais deja AVG comme antivir............c'a peut marcher avec? je peux poursuivre vos conseils?
        3. NASSI37
          [ Rapport ToolsCleaner version 2.2.3 (par A.Rothstein & dj QUIOU) ]

          -->- Recherche:

          C:\rapport_clean.txt: trouvé !
          C:\Documents and Settings\Administrateur\Bureau\Nouveau dossier\Nouveau dossier (3)\محمولات\Clean.zip: trouvé !
          C:\Documents and Settings\Administrateur\Bureau\Nouveau dossier\Nouveau dossier (3)\محمولات\HijackThis.exe: trouvé !
          C:\Documents and Settings\Administrateur\Bureau\Nouveau dossier\Nouveau dossier (3)\محمولات\hijackthis.log: trouvé !
          C:\Documents and Settings\Administrateur\Bureau\Nouveau dossier\Nouveau dossier (3)\محمولات\clean\clean\hijackthis.log: trouvé !
          C:\Documents and Settings\Administrateur\Recent\HijackThis.lnk: trouvé !
          C:\Nouveau dossier\rapport_clean.txt: trouvé !

          ---------------------------------
          -->- Suppression:

          C:\Documents and Settings\Administrateur\Bureau\Nouveau dossier\Nouveau dossier (3)\محمولات\Clean.zip: supprimé !
          C:\Documents and Settings\Administrateur\Bureau\Nouveau dossier\Nouveau dossier (3)\محمولات\HijackThis.exe: supprimé !
          C:\Documents and Settings\Administrateur\Recent\HijackThis.lnk: supprimé !
          C:\rapport_clean.txt: supprimé !
          C:\Documents and Settings\Administrateur\Bureau\Nouveau dossier\Nouveau dossier (3)\محمولات\hijackthis.log: supprimé !
          C:\Documents and Settings\Administrateur\Bureau\Nouveau dossier\Nouveau dossier (3)\محمولات\clean\clean\hijackthis.log: supprimé !
          C:\Nouveau dossier\rapport_clean.txt: supprimé !
          voici...le rapport de Tcleaner
          1. NASSI37
            -----------\\ ToolBar S&D 1.2.2 XP/Vista

            Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
            X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) D CPU 3.00GHz )
            BIOS : Default System BIOS
            USER : Administrateur ( Administrator )
            BOOT : Normal boot
            Antivirus : Avira AntiVir PersonalEdition Classic 0.0.0.0 (Activated)
            A:\ (USB)
            C:\ (Local Disk) - NTFS - Total : 45 Go Free : 1 Go
            D:\ (Local Disk) - FAT32 - Total : 30 Go Free : 9 Go
            E:\ (CD or DVD)
            F:\ (CD or DVD)

            "C:\ToolBar SD" ( MAJ : 04-10-2008|21:00 )
            Option : [1] ( 12/10/2008|16:56 )

            -----------\\ Recherche de Fichiers / Dossiers ...

            [Service] MyWebSearchService
            C:\DOCUME~1\ADMINI~1\Cookies\administrateur@alot[1].txt
            C:\DOCUME~1\ADMINI~1\Cookies\administrateur@h.alot[2].txt
            C:\DOCUME~1\ADMINI~1\Cookies\administrateur@try.alot[2].txt
            C:\Program Files\AskBarDis
            C:\Program Files\AskBarDis\bar
            C:\Program Files\AskBarDis\PopSwatter
            C:\Program Files\AskBarDis\unins000.dat
            C:\Program Files\AskBarDis\unins000.exe
            C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio
            C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb124
            C:\DOCUME~1\ALLUSE~1.WIN\MENUDM~1\PROGRA~1\Dealio
            C:\DOCUME~1\ADMINI~1\APPLIC~1\FunWebProducts
            C:\DOCUME~1\ADMINI~1\APPLIC~1\FunWebProducts\Data
            C:\Program Files\Fun Web Products
            C:\Program Files\Fun Web Products\iPod
            C:\Program Files\Fun Web Products\MSNMessenger
            C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar
            C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\08-06-20-20-57-40
            C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\08-06-20-20-57-40.xm_
            C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\16x16talismania.gif
            C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\about.gif
            C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\action.gif
            C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\arcade.gif
            C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\bricks_of_egypt16x16.gif
            C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\buy.gif
            C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\cards.gif
            C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\cradle_of_persia16x16.gif
            C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\cradle_rome16x16.gif
            C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\deals.gif
            C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\download.gif
            C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\farm_frenzy16x16.gif
            C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\feedback.gif
            C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\help.gif
            C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\highlight.gif
            C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\jewelquest16x16.gif
            C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\jigsaw.gif
            C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\magic_match16x16.gif
            C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\mahjong.gif
            C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\micro_olympics16x16.gif
            C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\multiplayer.gif
            C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\mygames.gif
            C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\newGames.gif
            C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\oberonconfig.xm_
            C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\obSearchHistory.dat
            C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\Ocean_Express16x16.gif
            C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\partner.gif
            C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\peril_at_end_house16x16.gif
            C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\popup_off.gif
            C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\popup_on.gif
            C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\puzzle.gif
            C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\riseAtlantis16x16.gif
            C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\scurbbles16x16.gif
            C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\search.gif
            C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\search_goog.gif
            C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\seasonmatch16x16.gif
            C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\sendafriend.gif
            C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\sports.gif
            C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\trial.gif
            C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\uninstall.gif
            C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\update.gif
            C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\webgame.gif
            C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\xango16x16.gif
            C:\DOCUME~1\ADMINI~1\Cookies\administrateur@contentcatalog.hotbar[2].txt
            C:\DOCUME~1\ADMINI~1\Cookies\administrateur@hotbar[1].txt
            C:\DOCUME~1\ADMINI~1\Cookies\administrateur@www.hotbar[2].txt
            C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\HotbarSA
            C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\HotbarSA\HotbarSA.dat
            C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\HotbarSA\HotbarSAAbout.mht
            C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\HotbarSA\HotbarSAau.dat
            C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\HotbarSA\HotbarSAEULA.mht
            C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\HotbarSA\HotbarSA_kyf.dat
            C:\DOCUME~1\ADMINI~1\Cookies\administrateur@mysearch[1].txt
            C:\DOCUME~1\ADMINI~1\Cookies\administrateur@myway[2].txt
            C:\DOCUME~1\ADMINI~1\Cookies\administrateur@mywebsearch[1].txt
            C:\DOCUME~1\ADMINI~1\Cookies\administrateur@mywebsearch[2].txt
            C:\DOCUME~1\ADMINI~1\Cookies\administrateur@hosted.zango[1].txt
            C:\DOCUME~1\ADMINI~1\Cookies\administrateur@www.zango[2].txt
            C:\DOCUME~1\ADMINI~1\Cookies\administrateur@zango[2].txt
            C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\2ACA5CC3-0F83-453D-A079-1076FE1A8B65
            C:\WINDOWS\iun6002.exe
            C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\mc101.tmp
            C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\mc105.tmp

            -----------\\ Extensions

            (Administrateur) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar
            (Administrateur) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar
            (Administrateur) - {DDC359D1-844A-42a7-9AA1-88A850A938A8} => chrome
            (Administrateur) - {E9A1DEE0-C623-4439-8932-001E7D17607D} => ajtoolbar

            -----------\\ [..\Internet Explorer\Main]

            [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
            "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
            "Start Page"="https://www.msn.com/fr-fr/"
            "Search Page"="https://www.google.com/?gws_rd=ssl"
            "Search Bar"="http://www.google.com/toolbar/ie8/sidebar.html"
            "SearchMigratedDefaultURL"="https://www.google.com/webhp?gws_rd=ssl{searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"
            "Url"="http://www.microsoft.com/atwork/community/rss.xml"
            "Url"="http://www.microsoft.com/athome/community/rss.xml"

            [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
            "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
            "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
            "Search Page"="https://www.google.com/?gws_rd=ssl"
            "Start Page"="https://www.msn.com/fr-fr/"
            "Search Bar"="http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr8/*http://www.yahoo.com/ext/search/search.html"

            --------------------\\ Recherche d'autres infections

            --------------------\\ Cracks & Keygens ..

            C:\DOCUME~1\ADMINI~1\Mes documents\Downloads\Programs\mp3\Keygen.exe

            1 - "C:\ToolBar SD\TB_1.txt" - 12/10/2008|17:00 - Option : [1]

            -----------\\ Fin du rapport a 17:00:21.81

            voila le dernier rapport ...........merci d'avance...
            1. ^^Marie^^
              Re

              Faudrait que tu supprimes tes cracks
              Faut pas s'étonner d'avoir des véroles

              Relance Toolbar-S&D en double-cliquant sur le raccourci.
              Tape sur "2" puis valide en appuyant sur "Entrée".
              ! Ne ferme pas la fenêtre lors de la suppression !
              Un rapport sera généré, poste son contenu ici.

              NOTE : Si ton Bureau ne réapparait pas, appuie simultanément sur Ctrl+Alt+Suppr pour ouvrir le Gestionnaire des tâches.
              Rends-toi sur l'onglet "Processus". Clique en haut à gauche sur Fichier et choisis "Exécuter..."
              Tape explorer puis valide.

              ***********************************
              @+
              1. NASSI37
                je m'excuse pour le retard j'avais du travail ailleur......je vient juste de revenir.....j'ais fait ce que vous m'avais demander....est ce que c'est tous?....
              2. Rallymen007
                @NASSI37Salut,

                Marie t'a demandé de lancer un scan et une suppression avec Toolbar S&D, ce que tu as fait dans le post suivant.

                Je te conseille par ailleurs de faire un (énorme ??) ménage dans les dossiers/sous-dossiers "Nouveau Dossier" (exemple de nom) de ton bureau, en faisant ceci chez mon cousin, j'ai viré quelques trucs plutôt gaspilleurs de place ou pourvant être nuisibles.

                Et efface tous les cracks, sérials, keygens inutilisés.

                Surtout évite les téléchargements sur la Mule et/ou LimeWire, car se sont les réseaux les plus pollués.

                Petite règle de sécurité pour les téléchargements, si tu cherches Counter-Strike ou (encore pire) GRiD et que le téléchargement fait 35 ko !!

                Enfin, la meilleure règle est de ne pas télécharger !!
            2. NASSI37
              -----------\\ ToolBar S&D 1.2.2 XP/Vista

              Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
              X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) D CPU 3.00GHz )
              BIOS : Default System BIOS
              USER : Administrateur ( Administrator )
              BOOT : Normal boot
              Antivirus : Avira AntiVir PersonalEdition Classic 0.0.0.0 (Activated)
              A:\ (USB)
              C:\ (Local Disk) - NTFS - Total : 45 Go Free : 1 Go
              D:\ (Local Disk) - FAT32 - Total : 30 Go Free : 8 Go
              E:\ (CD or DVD)
              F:\ (CD or DVD)

              "C:\ToolBar SD" ( MAJ : 04-10-2008|21:00 )
              Option : [2] ( 12/10/2008|20:15 )

              -----------\\ SUPPRESSION

              Supprime! - [Service] MyWebSearchService
              Supprime! - C:\DOCUME~1\ADMINI~1\Cookies\administrateur@alot[1].txt
              Supprime! - C:\DOCUME~1\ADMINI~1\Cookies\administrateur@h.alot[2].txt
              Supprime! - C:\DOCUME~1\ADMINI~1\Cookies\administrateur@try.alot[2].txt
              Supprime! - C:\Program Files\AskBarDis\bar
              Supprime! - C:\Program Files\AskBarDis\PopSwatter
              Supprime! - C:\Program Files\AskBarDis\unins000.dat
              Supprime! - C:\Program Files\AskBarDis\unins000.exe
              Supprime! - C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb124
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\MENUDM~1\PROGRA~1\Dealio
              Supprime! - C:\DOCUME~1\ADMINI~1\APPLIC~1\FunWebProducts\Data
              Supprime! - C:\Program Files\Fun Web Products\iPod
              Supprime! - C:\Program Files\Fun Web Products\MSNMessenger
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\08-06-20-20-57-40
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\08-06-20-20-57-40.xm_
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\16x16talismania.gif
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\about.gif
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\action.gif
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\arcade.gif
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\bricks_of_egypt16x16.gif
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\buy.gif
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\cards.gif
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\cradle_of_persia16x16.gif
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\cradle_rome16x16.gif
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\deals.gif
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\download.gif
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\farm_frenzy16x16.gif
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\feedback.gif
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\help.gif
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\highlight.gif
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\jewelquest16x16.gif
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\jigsaw.gif
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\magic_match16x16.gif
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\mahjong.gif
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\micro_olympics16x16.gif
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\multiplayer.gif
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\mygames.gif
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\newGames.gif
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\oberonconfig.xm_
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\obSearchHistory.dat
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\Ocean_Express16x16.gif
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\partner.gif
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\peril_at_end_house16x16.gif
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\popup_off.gif
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\popup_on.gif
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\puzzle.gif
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\riseAtlantis16x16.gif
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\scurbbles16x16.gif
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\search.gif
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\search_goog.gif
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\seasonmatch16x16.gif
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\sendafriend.gif
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\sports.gif
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\trial.gif
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\uninstall.gif
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\update.gif
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\webgame.gif
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar\xango16x16.gif
              Supprime! - C:\DOCUME~1\ADMINI~1\Cookies\administrateur@contentcatalog.hotbar[2].txt
              Supprime! - C:\DOCUME~1\ADMINI~1\Cookies\administrateur@hotbar[1].txt
              Supprime! - C:\DOCUME~1\ADMINI~1\Cookies\administrateur@www.hotbar[2].txt
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\HotbarSA\HotbarSA.dat
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\HotbarSA\HotbarSAAbout.mht
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\HotbarSA\HotbarSAau.dat
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\HotbarSA\HotbarSAEULA.mht
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\HotbarSA\HotbarSA_kyf.dat
              Supprime! - C:\DOCUME~1\ADMINI~1\Cookies\administrateur@mysearch[1].txt
              Supprime! - C:\DOCUME~1\ADMINI~1\Cookies\administrateur@myway[2].txt
              Supprime! - C:\DOCUME~1\ADMINI~1\Cookies\administrateur@mywebsearch[1].txt
              Supprime! - C:\DOCUME~1\ADMINI~1\Cookies\administrateur@mywebsearch[2].txt
              Supprime! - C:\DOCUME~1\ADMINI~1\Cookies\administrateur@hosted.zango[1].txt
              Supprime! - C:\DOCUME~1\ADMINI~1\Cookies\administrateur@www.zango[2].txt
              Supprime! - C:\DOCUME~1\ADMINI~1\Cookies\administrateur@zango[2].txt
              Supprime! - C:\WINDOWS\iun6002.exe
              Supprime! - C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\mc101.tmp
              Supprime! - C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\mc105.tmp
              Supprime! - C:\Program Files\AskBarDis
              Supprime! - C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio
              Supprime! - C:\DOCUME~1\ADMINI~1\APPLIC~1\FunWebProducts
              Supprime! - C:\Program Files\Fun Web Products
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\GamesBar
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\HotbarSA
              Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\2ACA5CC3-0F83-453D-A079-1076FE1A8B65

              -----------\\ Recherche de Fichiers / Dossiers ...

              -----------\\ Extensions

              (Administrateur) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar
              (Administrateur) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar
              (Administrateur) - {DDC359D1-844A-42a7-9AA1-88A850A938A8} => chrome
              (Administrateur) - {E9A1DEE0-C623-4439-8932-001E7D17607D} => ajtoolbar

              -----------\\ [..\Internet Explorer\Main]

              [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
              "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
              "Start Page"="https://www.msn.com/fr-fr/"
              "Search Page"="https://www.google.com/?gws_rd=ssl"
              "Search Bar"="http://www.google.com/toolbar/ie8/sidebar.html"
              "SearchMigratedDefaultURL"="https://www.google.com/webhp?gws_rd=ssl{searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"
              "Url"="http://www.microsoft.com/atwork/community/rss.xml"
              "Url"="http://www.microsoft.com/athome/community/rss.xml"

              [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
              "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
              "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
              "Search Page"="https://www.google.com/?gws_rd=ssl"
              "Start Page"="https://www.msn.com/fr-fr/"
              "Search Bar"="http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr8/*http://www.yahoo.com/ext/search/search.html"

              --------------------\\ Recherche d'autres infections

              --------------------\\ Cracks & Keygens ..

              C:\DOCUME~1\ADMINI~1\Mes documents\Downloads\Programs\mp3\Keygen.exe

              1 - "C:\ToolBar SD\TB_1.txt" - 12/10/2008|17:00 - Option : [1]
              2 - "C:\ToolBar SD\TB_2.txt" - 12/10/2008|20:27 - Option : [2]

              -----------\\ Fin du rapport a 20:27:46.15

              voici le rapport demander
              2. NASSI37
                Logfile of Trend Micro HijackThis v2.0.2
                Scan saved at 21:57:02, on 13/10/2008
                Platform: Windows XP SP2 (WinNT 5.01.2600)
                MSIE: Internet Explorer v7.00 (7.00.6000.16705)
                Boot mode: Normal

                Running processes:
                C:\windows\System32\smss.exe
                C:\windows\system32\csrss.exe
                C:\windows\system32\winlogon.exe
                C:\windows\system32\services.exe
                C:\windows\system32\lsass.exe
                C:\windows\system32\svchost.exe
                C:\windows\system32\svchost.exe
                C:\windows\System32\svchost.exe
                C:\windows\system32\svchost.exe
                C:\windows\system32\svchost.exe
                C:\windows\system32\spoolsv.exe
                C:\windows\System32\svchost.exe
                C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
                C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
                C:\Program Files\Windows Live\Contrôle parental\fsssvc.exe
                C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
                C:\WINDOWS\system32\IoctlSvc.exe
                C:\windows\system32\svchost.exe
                C:\windows\Explorer.EXE
                C:\PROGRA~1\AVG\AVG8\avgrsx.exe
                C:\windows\System32\alg.exe
                C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
                D:\Program Files\FlashGet.exe
                C:\Program Files\Picasa2\PicasaMediaDetector.exe
                C:\PROGRA~1\AVG\AVG8\avgtray.exe
                C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
                C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                C:\windows\system32\WgaTray.exe
                C:\Program Files\SuperCopier2\SuperCopier2.exe
                C:\Program Files\The Weather Channel FW\Desktop\DesktopWeather.exe
                C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe
                C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
                C:\PROGRA~1\WIDCOMM\LOGICI~1\BTSTAC~1.EXE
                C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
                C:\Program Files\Mozilla Firefox\firefox.exe
                C:\PROGRA~1\AVG\AVG8\avgscanx.exe
                C:\Documents and Settings\Administrateur\Bureau\Nouveau dossier\Nouveau dossier (3)\محمولات\HiJackThis.exe
                C:\WINDOWS\system32\wbem\wmiprvse.exe

                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/?p=us
                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://us.rd.yahoo.com/customize/ie/defaults/su/msgr8/*https://fr.yahoo.com/?p=us
                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr8/*http://www.yahoo.com/ext/search/search.html
                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*https://fr.yahoo.com/?p=us
                R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ww17.ads.eorezo.com/cgi-bin/advert/getads.cgi?x_dp_id=18&x_format=redirect
                R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                O2 - BHO: StumbleUpon Launcher - {145B29F4-A56B-4b90-BBAC-45784EBEBBB7} - C:\Program Files\StumbleUpon\StumbleUponIEBar.dll
                O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
                O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - D:\Program Files\jccatch_1.dll
                O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
                O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
                O2 - BHO: Windows Live OneCare Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Contrôle parental\fssbho.dll
                O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
                O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll (file missing)
                O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                O2 - BHO: ooVoo Toolbar - {A057A204-BACC-4D26-8087-36EE87E26986} - C:\PROGRA~1\OOVOOT~1\OOVOOT~1.DLL
                O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
                O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
                O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
                O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - D:\Program Files\getflash.dll
                O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                O3 - Toolbar: StumbleUpon Toolbar - {5093EB4C-3E93-40AB-9266-B607BA87BDC8} - C:\Program Files\StumbleUpon\StumbleUponIEBar.dll
                O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                O3 - Toolbar: ooVoo Toolbar - {A057A204-BACC-4D26-8087-36EE87E26986} - C:\PROGRA~1\OOVOOT~1\OOVOOT~1.DLL
                O3 - Toolbar: The Weather Channel Toolbar - {2E5E800E-6AC0-411E-940A-369530A35E43} - C:\WINDOWS\system32\TwcToolbarIe7.dll
                O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
                O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
                O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
                O4 - HKLM\..\Run: [Flashget] "D:\Program Files\FlashGet.exe" /min
                O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
                O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
                O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
                O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                O4 - HKCU\..\Run: [Registry Helper] "C:\Program Files\Registry Helper\LaunchRegistryHelper.Exe" "C:\Program Files\Registry Helper\RegistryHelper.Exe" /boot
                O4 - HKCU\..\Run: [SuperCopier2.exe] C:\Program Files\SuperCopier2\SuperCopier2.exe
                O4 - HKCU\..\Run: [Internet Download Accelerator] C:\Program Files\IDA\ida.exe -autorun
                O4 - HKCU\..\Run: [FreeCall] "C:\Program Files\FreeCall.com\FreeCall\FreeCall.exe" -nosplash -minimized
                O4 - HKCU\..\Run: [DW6] "C:\Program Files\The Weather Channel FW\Desktop\DesktopWeather.exe"
                O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
                O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RESEAU')
                O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
                O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
                O4 - Startup: FreeMeter.lnk = C:\Program Files\FreeMeter\FreeMeter.exe
                O4 - Global Startup: BTTray.lnk = ?
                O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
                O4 - Global Startup: PalTalk.lnk = C:\Program Files\Paltalk Messenger\paltalk.exe
                O4 - Global Startup: VersionTrackerPro.lnk = ?
                O8 - Extra context menu item: &Tout télécharger avec FlashGet - D:\Program Files\jc_all.htm
                O8 - Extra context menu item: &Télécharger avec FlashGet - D:\Program Files\jc_link.htm
                O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
                O8 - Extra context menu item: &تصدير إلى Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
                O8 - Extra context menu item: Download Video on This Page - C:\Program Files\Tomato\YouTube Video Downloader\IEPage.html
                O8 - Extra context menu item: Download Video This Links To - C:\Program Files\Tomato\YouTube Video Downloader\IELink.html
                O8 - Extra context menu item: StumbleUpon PhotoBlog It! - res://StumbleUponIEBar.dll/blogimage
                O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                O9 - Extra button: Download Video - {11F19C45-9675-488A-A8E0-8E8234DC245D} - C:\Program Files\Tomato\YouTube Video Downloader\IEPage.html
                O9 - Extra 'Tools' menuitem: Download Video on This Page - {11F19C45-9675-488A-A8E0-8E8234DC245D} - C:\Program Files\Tomato\YouTube Video Downloader\IEPage.html
                O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                O9 - Extra button: The Weather Channel - {2E5E800E-6AC0-411E-940A-369530A35E43} - (no file)
                O9 - Extra 'Tools' menuitem: The Weather Channel - {2E5E800E-6AC0-411E-940A-369530A35E43} - (no file)
                O9 - Extra button: PalTalk - {4EAFEF58-EEFA-4116-983D-03B49BCBFFFE} - C:\Program Files\Paltalk Messenger\Paltalk.exe (file missing)
                O9 - Extra button: (no name) - {53F6FCCD-9E22-4d71-86EA-6E43136192AB} - (no file)
                O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
                O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
                O9 - Extra button: (no name) - {925DAB62-F9AC-4221-806A-057BFB1014AA} - (no file)
                O9 - Extra button: E?E - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\MICROS~1\OFFICE11\REFIEBAR.DLL
                O9 - Extra button: (no name) - {9819CC0E-9669-4D01-9CD7-2C66DA43AC6C} - (no file)
                O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
                O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
                O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\Program Files\FlashGet.exe
                O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\Program Files\FlashGet.exe
                O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
                O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
                O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                O16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} (SpinTop DRM Control) - file:///C:/PROGRA~1/SALLY'~1/Images/stg_drm.ocx
                O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
                O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab
                O16 - DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} (ArmHelper Control) - file:///C:/Program%20Files/Sally's%20Spa/Images/armhelper.ocx
                O17 - HKLM\System\CCS\Services\Tcpip\..\{52DB4D70-E397-4E53-9532-EDD40304187A}: NameServer = 208.67.222.222 208.67.220.220
                O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
                O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
                O20 - AppInit_DLLs: avgrsstx.dll
                O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                O23 - Service: ASP.NET State Service (aspnet_state) - Unknown owner - C:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)
                O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
                O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
                O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
                O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
                O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
                O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
                O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
                O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
                O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe
                O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/ADMINI~1/LOCALS~1/Temp/msohtml1/01/clip_image001.gif
                O24 - Desktop Component 1: (no name) - https://www.3rbseyes.com/clientscript/vbulletin_global.js?v=367
                1. NASSI37
                  [ Rapport ToolsCleaner version 2.2.3 (par A.Rothstein & dj QUIOU) ]

                  -->- Recherche:

                  C:\TB.txt: trouvé !
                  C:\Documents and Settings\Administrateur\Bureau\Nouveau dossier\Nouveau dossier (3)\محمولات\HijackThis.exe: trouvé !
                  C:\Documents and Settings\Administrateur\Bureau\Nouveau dossier\Nouveau dossier (3)\محمولات\ToolBarSD.exe: trouvé !
                  C:\Documents and Settings\Administrateur\Bureau\Nouveau dossier\Nouveau dossier (3)\محمولات\hijackthis.log: trouvé !
                  C:\Nouveau dossier (2)\TB.txt: trouvé !

                  ---------------------------------
                  -->- Suppression:

                  C:\Documents and Settings\Administrateur\Bureau\Nouveau dossier\Nouveau dossier (3)\محمولات\HijackThis.exe: supprimé !
                  C:\Documents and Settings\Administrateur\Bureau\Nouveau dossier\Nouveau dossier (3)\محمولات\ToolBarSD.exe: supprimé !
                  C:\TB.txt: supprimé !
                  C:\Documents and Settings\Administrateur\Bureau\Nouveau dossier\Nouveau dossier (3)\محمولات\hijackthis.log: supprimé !
                  C:\Nouveau dossier (2)\TB.txt: supprimé !

                  Fichiers temporaires nettoyés !
                  Corbeille vidée!
                  1. NASSI37
                    -----------\\ ToolBar S&D 1.2.2 XP/Vista

                    Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
                    X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) D CPU 3.00GHz )
                    BIOS : Default System BIOS
                    USER : Administrateur ( Administrator )
                    BOOT : Normal boot
                    Antivirus : Avira AntiVir PersonalEdition Classic 0.0.0.0 (Activated)
                    A:\ (USB)
                    C:\ (Local Disk) - NTFS - Total : 45 Go Free : 7 Go
                    D:\ (Local Disk) - FAT32 - Total : 30 Go Free : 1 Go
                    E:\ (CD or DVD)
                    F:\ (CD or DVD)

                    "C:\ToolBar SD" ( MAJ : 04-10-2008|21:00 )
                    Option : [1] ( 13/10/2008|22:26 )

                    -----------\\ Recherche de Fichiers / Dossiers ...

                    C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio

                    -----------\\ Extensions

                    (Administrateur) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar
                    (Administrateur) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar
                    (Administrateur) - {DDC359D1-844A-42a7-9AA1-88A850A938A8} => chrome
                    (Administrateur) - {E9A1DEE0-C623-4439-8932-001E7D17607D} => ajtoolbar

                    -----------\\ [..\Internet Explorer\Main]

                    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
                    "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
                    "Start Page"="https://www.msn.com/fr-fr/"
                    "Search Page"="https://www.google.com/?gws_rd=ssl"
                    "Search Bar"="http://www.google.com/toolbar/ie8/sidebar.html"
                    "SearchMigratedDefaultURL"="https://www.google.com/webhp?gws_rd=ssl{searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"
                    "Url"="http://www.microsoft.com/atwork/community/rss.xml"
                    "Url"="http://www.microsoft.com/athome/community/rss.xml"

                    [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
                    "Default_Page_URL"="https://fr.yahoo.com/?p=us"
                    "Default_Search_URL"="http://us.rd.yahoo.com/customize/ie/defaults/su/msgr8/*https://fr.yahoo.com/?p=us"
                    "Search Page"="http://us.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*https://fr.yahoo.com/?p=us"
                    "Start Page"="http://ww17.ads.eorezo.com/cgi-bin/advert/getads.cgi?x_dp_id=18&x_format=redirect"
                    "Search Bar"="http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr8/*http://www.yahoo.com/ext/search/search.html"

                    --------------------\\ Recherche d'autres infections

                    --------------------\\ Cracks & Keygens ..

                    C:\DOCUME~1\ADMINI~1\Mes documents\Downloads\Programs\mp3\Keygen.exe

                    1 - "C:\ToolBar SD\TB_1.txt" - 13/10/2008|22:30 - Option : [1]

                    -----------\\ Fin du rapport a 22:30:33.46
                    2. nassi
                      Logfile of Trend Micro HijackThis v2.0.2
                      Scan saved at 15:11:58, on 15/10/2008
                      Platform: Windows XP SP2 (WinNT 5.01.2600)
                      MSIE: Internet Explorer v7.00 (7.00.6000.16705)
                      Boot mode: Normal

                      Running processes:
                      C:\windows\System32\smss.exe
                      C:\windows\system32\csrss.exe
                      C:\windows\system32\winlogon.exe
                      C:\windows\system32\services.exe
                      C:\windows\system32\lsass.exe
                      C:\windows\system32\svchost.exe
                      C:\windows\system32\svchost.exe
                      C:\windows\System32\svchost.exe
                      C:\windows\system32\svchost.exe
                      C:\windows\system32\svchost.exe
                      C:\windows\system32\spoolsv.exe
                      C:\windows\System32\svchost.exe
                      C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                      C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
                      C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
                      C:\Program Files\Windows Live\Contrôle parental\fsssvc.exe
                      C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
                      C:\WINDOWS\system32\IoctlSvc.exe
                      C:\windows\system32\svchost.exe
                      C:\windows\Explorer.EXE
                      C:\PROGRA~1\AVG\AVG8\avgrsx.exe
                      C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
                      D:\Program Files\FlashGet.exe
                      C:\Program Files\Picasa2\PicasaMediaDetector.exe
                      C:\PROGRA~1\AVG\AVG8\avgtray.exe
                      C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
                      C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                      C:\windows\system32\WgaTray.exe
                      C:\Program Files\SuperCopier2\SuperCopier2.exe
                      C:\windows\System32\alg.exe
                      C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
                      C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
                      C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe
                      C:\PROGRA~1\WIDCOMM\LOGICI~1\BTSTAC~1.EXE
                      C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
                      C:\windows\system32\wuauclt.exe
                      C:\Program Files\Mozilla Firefox\firefox.exe
                      C:\Documents and Settings\Administrateur\Bureau\Nouveau dossier\Nouveau dossier (3)\محمولات\HiJackThis.exe
                      C:\windows\system32\NOTEPAD.EXE
                      C:\windows\system32\wuauclt.exe
                      C:\WINDOWS\system32\wbem\wmiprvse.exe

                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/?p=us
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://us.rd.yahoo.com/customize/ie/defaults/su/msgr8/*https://fr.yahoo.com/?p=us
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr8/*http://www.yahoo.com/ext/search/search.html
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*https://fr.yahoo.com/?p=us
                      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ww17.ads.eorezo.com/cgi-bin/advert/getads.cgi?x_dp_id=18&x_format=redirect
                      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                      R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                      O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                      O2 - BHO: StumbleUpon Launcher - {145B29F4-A56B-4b90-BBAC-45784EBEBBB7} - C:\Program Files\StumbleUpon\StumbleUponIEBar.dll
                      O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
                      O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - D:\Program Files\jccatch_1.dll
                      O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
                      O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
                      O2 - BHO: Windows Live OneCare Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Contrôle parental\fssbho.dll
                      O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
                      O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll (file missing)
                      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                      O2 - BHO: ooVoo Toolbar - {A057A204-BACC-4D26-8087-36EE87E26986} - C:\PROGRA~1\OOVOOT~1\OOVOOT~1.DLL
                      O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
                      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
                      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
                      O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                      O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - D:\Program Files\getflash.dll
                      O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                      O3 - Toolbar: StumbleUpon Toolbar - {5093EB4C-3E93-40AB-9266-B607BA87BDC8} - C:\Program Files\StumbleUpon\StumbleUponIEBar.dll
                      O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                      O3 - Toolbar: ooVoo Toolbar - {A057A204-BACC-4D26-8087-36EE87E26986} - C:\PROGRA~1\OOVOOT~1\OOVOOT~1.DLL
                      O3 - Toolbar: The Weather Channel Toolbar - {2E5E800E-6AC0-411E-940A-369530A35E43} - C:\WINDOWS\system32\TwcToolbarIe7.dll
                      O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
                      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
                      O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
                      O4 - HKLM\..\Run: [Flashget] "D:\Program Files\FlashGet.exe" /min
                      O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
                      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                      O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
                      O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
                      O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                      O4 - HKCU\..\Run: [Registry Helper] "C:\Program Files\Registry Helper\LaunchRegistryHelper.Exe" "C:\Program Files\Registry Helper\RegistryHelper.Exe" /boot
                      O4 - HKCU\..\Run: [SuperCopier2.exe] C:\Program Files\SuperCopier2\SuperCopier2.exe
                      O4 - HKCU\..\Run: [Internet Download Accelerator] C:\Program Files\IDA\ida.exe -autorun
                      O4 - HKCU\..\Run: [FreeCall] "C:\Program Files\FreeCall.com\FreeCall\FreeCall.exe" -nosplash -minimized
                      O4 - HKCU\..\Run: [DW6] "C:\Program Files\The Weather Channel FW\Desktop\DesktopWeather.exe"
                      O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
                      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
                      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RESEAU')
                      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
                      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
                      O4 - Startup: FreeMeter.lnk = C:\Program Files\FreeMeter\FreeMeter.exe
                      O4 - Global Startup: BTTray.lnk = ?
                      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
                      O4 - Global Startup: PalTalk.lnk = C:\Program Files\Paltalk Messenger\paltalk.exe
                      O4 - Global Startup: VersionTrackerPro.lnk = ?
                      O8 - Extra context menu item: &Tout télécharger avec FlashGet - D:\Program Files\jc_all.htm
                      O8 - Extra context menu item: &Télécharger avec FlashGet - D:\Program Files\jc_link.htm
                      O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
                      O8 - Extra context menu item: &تصدير إلى Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
                      O8 - Extra context menu item: Download Video on This Page - C:\Program Files\Tomato\YouTube Video Downloader\IEPage.html
                      O8 - Extra context menu item: Download Video This Links To - C:\Program Files\Tomato\YouTube Video Downloader\IELink.html
                      O8 - Extra context menu item: StumbleUpon PhotoBlog It! - res://StumbleUponIEBar.dll/blogimage
                      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                      O9 - Extra button: Download Video - {11F19C45-9675-488A-A8E0-8E8234DC245D} - C:\Program Files\Tomato\YouTube Video Downloader\IEPage.html
                      O9 - Extra 'Tools' menuitem: Download Video on This Page - {11F19C45-9675-488A-A8E0-8E8234DC245D} - C:\Program Files\Tomato\YouTube Video Downloader\IEPage.html
                      O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                      O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                      O9 - Extra button: The Weather Channel - {2E5E800E-6AC0-411E-940A-369530A35E43} - (no file)
                      O9 - Extra 'Tools' menuitem: The Weather Channel - {2E5E800E-6AC0-411E-940A-369530A35E43} - (no file)
                      O9 - Extra button: PalTalk - {4EAFEF58-EEFA-4116-983D-03B49BCBFFFE} - C:\Program Files\Paltalk Messenger\Paltalk.exe (file missing)
                      O9 - Extra button: (no name) - {53F6FCCD-9E22-4d71-86EA-6E43136192AB} - (no file)
                      O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
                      O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
                      O9 - Extra button: (no name) - {925DAB62-F9AC-4221-806A-057BFB1014AA} - (no file)
                      O9 - Extra button: E?E - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\MICROS~1\OFFICE11\REFIEBAR.DLL
                      O9 - Extra button: (no name) - {9819CC0E-9669-4D01-9CD7-2C66DA43AC6C} - (no file)
                      O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
                      O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
                      O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\Program Files\FlashGet.exe
                      O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\Program Files\FlashGet.exe
                      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
                      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
                      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                      O16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} (SpinTop DRM Control) - file:///C:/PROGRA~1/SALLY'~1/Images/stg_drm.ocx
                      O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
                      O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab
                      O16 - DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} (ArmHelper Control) - file:///C:/Program%20Files/Sally's%20Spa/Images/armhelper.ocx
                      O17 - HKLM\System\CCS\Services\Tcpip\..\{52DB4D70-E397-4E53-9532-EDD40304187A}: NameServer = 208.67.222.222 208.67.220.220
                      O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
                      O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
                      O20 - AppInit_DLLs: avgrsstx.dll
                      O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                      O23 - Service: ASP.NET State Service (aspnet_state) - Unknown owner - C:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)
                      O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
                      O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
                      O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
                      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
                      O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
                      O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
                      O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
                      O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
                      O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe
                      O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/ADMINI~1/LOCALS~1/Temp/msohtml1/01/clip_image001.gif
                      O24 - Desktop Component 1: (no name) - https://www.3rbseyes.com/clientscript/vbulletin_global.js?v=367
                      1. nassi
                        Ccomme vous voyer le probleme n'est pas resolu.......est ce que vous me conseillez de formater mon pc?........aussi je vous demande si je peux saufgarder des elements interressant ?..........je n'y connais rien al'imformatique , mais je peux apprendre........quelle sont les programme et les composants de windows necessaires pour qu'un pc travail bien comme il faut?.......autre question : ma copie de windows n'est pas valide ,comment pourais-je avoir une copie valide (orriginale) gratuite,car je ne peux pas l'acheter......je suis dans un bout tres loing du monde ,on a ni cart credit,ni banc externe , ni de l'argent.............si vous m'aidez pour avoir une copie valide et gratuite ,je la graverais sur un cd et je l'installeraisd apres................aider moi please!!!!!.................
                        2. NASSI37
                          merci bien marie..............voilà le rapport:Logfile of Trend Micro HijackThis v2.0.2
                          Scan saved at 20:42:03, on 16/10/2008
                          Platform: Windows XP SP2 (WinNT 5.01.2600)
                          MSIE: Internet Explorer v7.00 (7.00.6000.16705)
                          Boot mode: Normal

                          Running processes:
                          C:\windows\System32\smss.exe
                          C:\windows\system32\csrss.exe
                          C:\windows\system32\winlogon.exe
                          C:\windows\system32\services.exe
                          C:\windows\system32\lsass.exe
                          C:\windows\system32\svchost.exe
                          C:\windows\system32\svchost.exe
                          C:\windows\System32\svchost.exe
                          C:\windows\system32\svchost.exe
                          C:\windows\system32\svchost.exe
                          C:\windows\system32\spoolsv.exe
                          C:\windows\System32\svchost.exe
                          C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                          C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                          C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
                          C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
                          C:\Program Files\Windows Live\Contrôle parental\fsssvc.exe
                          C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
                          C:\WINDOWS\system32\IoctlSvc.exe
                          C:\windows\system32\svchost.exe
                          C:\windows\Explorer.EXE
                          C:\PROGRA~1\AVG\AVG8\avgrsx.exe
                          C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
                          C:\PROGRA~1\AVG\AVG8\avgtray.exe
                          C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
                          C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
                          C:\Program Files\SuperCopier2\SuperCopier2.exe
                          C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe
                          C:\PROGRA~1\WIDCOMM\LOGICI~1\BTSTAC~1.EXE
                          C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
                          C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
                          C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
                          C:\windows\System32\alg.exe
                          C:\windows\system32\WgaTray.exe
                          C:\PROGRA~1\AVG\AVG8\avgscanx.exe
                          D:\HiJackThis.exe
                          C:\WINDOWS\system32\wbem\wmiprvse.exe

                          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr8/*http://www.yahoo.com/ext/search/search.html
                          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                          R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ww17.ads.eorezo.com/cgi-bin/advert/getads.cgi?x_dp_id=18&x_format=redirect
                          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                          O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
                          O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                          O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
                          O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - D:\Program Files\jccatch.dll
                          O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
                          O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
                          O2 - BHO: Windows Live OneCare Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Contrôle parental\fssbho.dll
                          O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
                          O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                          O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                          O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
                          O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - D:\Program Files\getflash.dll
                          O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
                          O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
                          O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
                          O4 - HKLM\..\Run: [Flashget] "D:\Program Files\FlashGet.exe" /min
                          O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
                          O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
                          O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
                          O4 - HKCU\..\Run: [SuperCopier2.exe] C:\Program Files\SuperCopier2\SuperCopier2.exe
                          O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
                          O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
                          O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RESEAU')
                          O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
                          O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
                          O4 - Startup: FreeMeter.lnk = C:\Program Files\FreeMeter\FreeMeter.exe
                          O4 - Global Startup: BTTray.lnk = ?
                          O4 - Global Startup: PalTalk.lnk = C:\Program Files\Paltalk Messenger\paltalk.exe
                          O4 - Global Startup: VersionTrackerPro.lnk = ?
                          O8 - Extra context menu item: &Download All with FlashGet - D:\Program Files\jc_all.htm
                          O8 - Extra context menu item: &Download with FlashGet - D:\Program Files\jc_link.htm
                          O8 - Extra context menu item: &تصدير إلى Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
                          O8 - Extra context menu item: Download Video on This Page - C:\Program Files\Tomato\YouTube Video Downloader\IEPage.html
                          O8 - Extra context menu item: Download Video This Links To - C:\Program Files\Tomato\YouTube Video Downloader\IELink.html
                          O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                          O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                          O9 - Extra button: Download Video - {11F19C45-9675-488A-A8E0-8E8234DC245D} - C:\Program Files\Tomato\YouTube Video Downloader\IEPage.html
                          O9 - Extra 'Tools' menuitem: Download Video on This Page - {11F19C45-9675-488A-A8E0-8E8234DC245D} - C:\Program Files\Tomato\YouTube Video Downloader\IEPage.html
                          O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                          O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                          O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
                          O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
                          O9 - Extra button: E?E - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\MICROS~1\OFFICE11\REFIEBAR.DLL
                          O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
                          O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
                          O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\Program Files\FlashGet.exe
                          O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\Program Files\FlashGet.exe
                          O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                          O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                          O16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} (SpinTop DRM Control) - file:///C:/PROGRA~1/SALLY'~1/Images/stg_drm.ocx
                          O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
                          O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
                          O20 - AppInit_DLLs: avgrsstx.dll
                          O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                          O23 - Service: ASP.NET State Service (aspnet_state) - Unknown owner - C:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)
                          O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                          O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
                          O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
                          O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
                          O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
                          O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
                          O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
                          O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
                          O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe
                          O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/ADMINI~1/LOCALS~1/Temp/msohtml1/01/clip_image001.gif
                          O24 - Desktop Component 1: (no name) - https://www.3rbseyes.com/clientscript/vbulletin_global.js?v=367