Bien le bonjour à tout le monde!
Voila je viens de détecter un cheval de troie avec Avast. J'ai donc suivis votre tuto qu'est excellent sur l'utilisation de HijackThis, voila mon log :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 00:53:23, on 05/07/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\ezSP_Px.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\drag'n drop cd+dvd\BinFiles\DragDrop.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Teleca Shared\CapabilityManager.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\RealVNC\VNC4\WinVNC4.exe
C:\Program Files\Messenger\msmsgs.exe
C:\program files\steam\steam.exe
C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\PROGRA~1\Yahoo!\MESSEN~1\ymsgr_tray.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Fichiers communs\PCSuite\Services\ServiceLayer.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\PROGRA~1\FICHIE~1\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
C:\Program Files\Last.fm\LastFM.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\LimeWire Music\LimeWire Music.exe
C:\Program Files\Java\jre1.6.0_05\bin\javaw.exe
C:\Program Files\Fichiers communs\PCSuite\Services\NclBTHandler.exe
C:\Program Files\Avant Browser\avant.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/disp [...] tbid=66006
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://recherche.neuf.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=66006
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_ [...] TbId=66006
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=66006
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_ [...] TbId=66006
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\ctbr.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\ctbr.dll
O2 - BHO: P2P Energy Toolbar - {2bae58c2-79f9-45d1-a286-81f911301c3a} - C:\Program Files\P2P_Energy\tbP2P1.dll
O2 - BHO: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: VMN Toolbar - {A057A204-BACC-4D26-8287-79A187E26987} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL
O3 - Toolbar: MEDIADICO Familial - {CEDDA62B-5FBE-4AB2-AE2E-5E069F444444} - C:\Program Files\LAventure\MDToolbar\MdToolbar.dll
O3 - Toolbar: P2P Energy Toolbar - {2bae58c2-79f9-45d1-a286-81f911301c3a} - C:\Program Files\P2P_Energy\tbP2P1.dll
O3 - Toolbar: VMN Toolbar - {A057A204-BACC-4D26-8287-79A187E26987} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL
O3 - Toolbar: &Crawler Toolbar - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\ctbr.dll
O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\System32\ezSP_Px.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Drag'n Drop CD+DVD] C:\Program Files\drag'n drop cd+dvd\BinFiles\DragDrop.exe /StartUp
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [Creative WebCam Tray] C:\Program Files\Creative\Shared Files\CAMTRAY.EXE
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [MobiNearCast] "C:\Program Files\MobiNearCast\MobiNearCast.exe" -min
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Assistant d'Acrobat.lnk = C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
O4 - Global Startup: BTTray.lnk = ?
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Envoyer à &Bluetooth - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: *.sony-europe.com
O15 - Trusted Zone: *.sonystyle-europe.com
O15 - Trusted Zone: *.vaio-link.com
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-F [...] E_UNO1.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\ctbr.dll
O20 - Winlogon Notify: winmmt32 - winmmt32.dll (file missing)
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe (file missing)
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Fichiers communs\PCSuite\Services\ServiceLayer.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\Sptisrv.exe
O23 - Service: VNC Server Version 4 (WinVNC4) - RealVNC Ltd. - C:\Program Files\RealVNC\VNC4\WinVNC4.exe

--
End of file - 13374 bytes

Avant d'attraper ce cheval de troie, mon PC redemmarait de temps en temps, est-ce un virus ? Avast ne détecte qu'une infection.
PS: je ne m'y connais que très peu en informatique.. sniff
En espérant une réponse à mon problème, je vous souhaite une bonne nuit =)

Bonjour,

Télécharge MalwareByte's Anti-Malware sur ton Bureau.
Installe-le en double-cliquant sur le fichier Download_mbam-setup.exe.

Une fois l'installation et la mise à jour effectuées, redémarre en mode sans échec.
AIDE : Redémarrer en mode sans échec

• Exécute maintenant MalwareByte's Anti-Malware. Si cela n'est pas déjà fait, sélectionne "Exécuter un examen complet".
• Afin de lancer la recherche, clic sur"Rechercher".
• Une fois le scan terminé, une fenêtre s'ouvre, clic sur OK. Deux possibilités s'offrent à toi :

-- si le programme n'a rien trouvé, appuie sur OK. Un rapport va apparaître, ferme-le.
-- si des infections sont présentes, clic sur "Afficher les résultats" puis sur "Supprimer la sélection". Enregistre le rapport sur ton Bureau afin de le poster dans ta prochaine réponse.
REMARQUE : Si MalwareByte's Anti-Malware a besoin de redémarrer pour terminer la suppression, accepte en cliquant sur Ok.

AIDE : Tuto en images sur MBAM

Merci beaucoup pour votre aide mais j'ai supprimer quelques fichiers qui me semblais "louche" et avast ne détecte plus d'infection =) .. en espérant que ce n'est aps une feinte, encore merci.

Et le rapport ?

Rebonjour, le rapport indique qu'il y a 4 infections ...(dommage Avast n'a rien trouvé sniff).
Donc voilà le rapport :

Malwarebytes' Anti-Malware 1.20
Version de la base de données: 931
Windows 5.1.2600 Service Pack 2

18:06:47 08/07/2008
mbam-log-7-8-2008 (18-06-47).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 178000
Temps écoulé: 1 hour(s), 48 minute(s), 35 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 4
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 4

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} (Adware.Agent) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{3c471948-f874-49f5-b338-4f214a2ee0b1} (Adware.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSSMGR (Trojan.Downloader) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PSRV (Trojan.Agent) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\Program Files\Conduit\Community Alerts\Alert.dll (Adware.Agent) -> Quarantined and deleted successfully.
C:\Program Files\Motorola Phone Tools\MPT_TEST_Info.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Program Files\webGobbler\webGobbler.scr (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\webGobbler.scr (Trojan.Agent) -> Quarantined and deleted successfully.

(j'espère que je ne me suis pas trompé en choisissant ma sesion au lieu de Administrateur lors du redemmarage sans échec )
En tout cas encore merci..

Cela ne change rien Reposte un rapport Hijackthis.

Voilà chef, un autre rapport hijackthis :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 01:12:53, on 09/07/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\RealVNC\VNC4\WinVNC4.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\ezSP_Px.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\drag'n drop cd+dvd\BinFiles\DragDrop.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Creative\Shared Files\CAMTRAY.EXE
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Teleca Shared\CapabilityManager.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\Program Files\Fichiers communs\PCSuite\Services\ServiceLayer.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Messenger\msmsgs.exe
C:\program files\steam\steam.exe
C:\PROGRA~1\FICHIE~1\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\PROGRA~1\Yahoo!\MESSEN~1\ymsgr_tray.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Last.fm\LastFM.exe
C:\Program Files\Fichiers communs\PCSuite\Services\NclBTHandler.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Avant Browser\avant.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/disp [...] tbid=66006
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://recherche.neuf.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=66006
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_ [...] TbId=66006
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=66006
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_ [...] TbId=66006
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\ctbr.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\ctbr.dll
O2 - BHO: P2P Energy Toolbar - {2bae58c2-79f9-45d1-a286-81f911301c3a} - C:\Program Files\P2P_Energy\tbP2P0.dll
O2 - BHO: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: VMN Toolbar - {A057A204-BACC-4D26-8287-79A187E26987} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL
O3 - Toolbar: MEDIADICO Familial - {CEDDA62B-5FBE-4AB2-AE2E-5E069F444444} - C:\Program Files\LAventure\MDToolbar\MdToolbar.dll
O3 - Toolbar: P2P Energy Toolbar - {2bae58c2-79f9-45d1-a286-81f911301c3a} - C:\Program Files\P2P_Energy\tbP2P0.dll
O3 - Toolbar: VMN Toolbar - {A057A204-BACC-4D26-8287-79A187E26987} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL
O3 - Toolbar: &Crawler Toolbar - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\ctbr.dll
O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\System32\ezSP_Px.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Drag'n Drop CD+DVD] C:\Program Files\drag'n drop cd+dvd\BinFiles\DragDrop.exe /StartUp
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [Creative WebCam Tray] C:\Program Files\Creative\Shared Files\CAMTRAY.EXE
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [MobiNearCast] "C:\Program Files\MobiNearCast\MobiNearCast.exe" -min
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Assistant d'Acrobat.lnk = C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
O4 - Global Startup: BTTray.lnk = ?
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Envoyer à &Bluetooth - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: *.sony-europe.com
O15 - Trusted Zone: *.sonystyle-europe.com
O15 - Trusted Zone: *.vaio-link.com
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-F [...] E_UNO1.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\ctbr.dll
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe (file missing)
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Fichiers communs\PCSuite\Services\ServiceLayer.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\Sptisrv.exe
O23 - Service: VNC Server Version 4 (WinVNC4) - RealVNC Ltd. - C:\Program Files\RealVNC\VNC4\WinVNC4.exe

--
End of file - 12958 bytes

Re,

Télécharge Toolbar-S&D (Team IDN) sur ton Bureau.

• Lance l'installation du programme en exécutant le fichier téléchargé.
• Double-clique maintenant sur le raccourci de Toolbar-S&D.
• Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.
• Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.
• Poste le rapport généré. (C:\TB.txt)

Voilà le rapport :


-----------\\ ToolBar S&D 1.0.3 XP/Vista

[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : Henri ] [ "C:\Toolbar SD" ] [ Selection : 1 ]
[ 09/07/2008 | 15:03:21,53 ] [ PC : NOM-C90I4T4C9F0 ]
[ MAJ : 08-07-2008 | 22:24 ]

-----------\\ Recherche de Fichiers / Dossiers ...

C:\Program Files\Crawler
C:\Program Files\Crawler\adrkeys.dat
C:\Program Files\Crawler\Cache
C:\Program Files\Crawler\COMMON_FF.dat
C:\Program Files\Crawler\confirm.dat
C:\Program Files\Crawler\ctbcomm.dll
C:\Program Files\Crawler\ctbr.dll
C:\Program Files\Crawler\CTConf.dat
C:\Program Files\Crawler\CTipsDef.dll
C:\Program Files\Crawler\CToolbar.exe
C:\Program Files\Crawler\CUpdate.exe
C:\Program Files\Crawler\Download
C:\Program Files\Crawler\firefox
C:\Program Files\Crawler\Languages
C:\Program Files\Crawler\lookfor.dat
C:\Program Files\Crawler\majorse.dat
C:\Program Files\Crawler\rootmenu.dat
C:\Program Files\Crawler\services.dat
C:\Program Files\Crawler\TBR5LanguageAct
C:\Program Files\Crawler\TempDir
C:\Program Files\Crawler\Update
C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\Crawler Toolbar
C:\Program Files\P2P_Energy
C:\Program Files\P2P_Energy\INSTALL.LOG
C:\Program Files\P2P_Energy\tbP2P0.dll
C:\Program Files\P2P_Energy\tbP2P1.dll
C:\Program Files\P2P_Energy\tbP2P_.dll
C:\Program Files\P2P_Energy\toolbar.cfg
C:\Program Files\P2P_Energy\UNWISE.EXE
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\1
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\1px_dark.gif
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\1px_green.gif
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\1px_white.gif
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\a.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\amazon.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\an.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\arrow.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\arrowB.gif
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\arrowT.gif
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\arrow_down.gif
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\arrow_red.gif
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\arrow_red2.gif
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\arrow_up.gif
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\autofill.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\b.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\bgmeteo_results.gif
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\bg_pub.gif
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\bg_ttl.gif
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\bn.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\bottom.png
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\bottom_left.png
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\bottom_right.png
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\btn_close.gif
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\btn_minus.gif
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\btn_moreforecast.gif
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\c.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\CAlogo.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\canalblog.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\cn.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\COMBOSEARCH.acs
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\d.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\dictionary2.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\dn.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\downfile
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\Download
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\DownloadCOM.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\dropdown.css
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\email_b.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\equalizer_loading.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\equalizer_off.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\equalizer_on.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\ErrorLog.txt
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\ErrorPageTemplate.css
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\ErrorPageTemplate_search.css
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\f.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\fn.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\g.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\gaming.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\gn.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\graphred0.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\graphred0_5.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\graphred1.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\graphred1_5.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\graphred2.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\graphred2_5.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\graphred3.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\graphred3_5.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\graphred4.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\graphred4_5.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\graphred5.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\h.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\help.gif
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\hideremove.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\highlight.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\hn.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\h_aquarius.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\h_aries.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\h_cancer.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\h_capricorn.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\h_gemini.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\h_leo.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\h_libra.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\h_pisces.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\h_sagittarius.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\h_scorpio.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\h_taurus.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\h_virgo.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\i.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\icotemp_placeholder.gif
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\IEtab1_8.zip
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\images01.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\in.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\j.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\jn.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\k.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\kn.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\l.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\left.png
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\ln.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\loading.gif
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\logo.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\logo_facebook.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\minus.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\minus_on.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\music2.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\n.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\New York_NY_weather.txt
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\New York_NY_weather.txt262867046
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\NewCfg
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\news.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\news.html
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\newsb.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\nn.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\o.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\on.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\p.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\pixsy.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\play.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\play_on.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\plus.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\plus_on.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\pn.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\popup_off.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\popup_on.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\popup_ona.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\p_yahoo.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\p_yahoo_fr.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\q.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\qn.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\r.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\relatedlinks.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\report.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\right.png
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\rn.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\rss.xsl
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\rss1.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\rsslib.js
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\rssmenu1_7a.zip
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\s.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\search.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\search.gif
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\search_fr.gif
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\settings.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\shop2.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\sinfo.txt
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\sinfo.txt255655468
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\siteinfo.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\slider.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\sn.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\spacer.gif
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\stars-red1.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\stars-red2.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\stars-red3.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\stars-red4.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\stars-red5.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\stop.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\stop_on.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\t.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\tabdata.js
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\tabdataV3.js
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\tablib.js
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\tabwelcome_en.html
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\tabwelcome_fr.html
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\tab_icon.png
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\technorati.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\Thumbs.db
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\tn.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\tools.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\top.png
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\top_left.png
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\top_right.png
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\translate.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\u.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\un.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\utf8.js
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\v.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\vmlib.js
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\vmntoolbartb1501.cfg
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\vn.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\w.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\web_fr.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\wikipedia.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\wn.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\x.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\xp_close_small.gif
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\yahoo_search.gif
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\YouTube.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\z.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\zn.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\zoom.bmp
C:\DOCUME~1\Henri\APPLIC~1\VMNToolbar\__slider.bmp
C:\DOCUME~1\HOANGL~1\APPLIC~1\VMNToolbar
C:\DOCUME~1\HOANGL~1\APPLIC~1\VMNToolbar\---Yahoo.bmp
C:\DOCUME~1\HOANGL~1\APPLIC~1\VMNToolbar\0
C:\DOCUME~1\HOANGL~1\APPLIC~1\VMNToolbar\01net.bmp
C:\DOCUME~1\HOANGL~1\APPLIC~1\VMNToolbar\a.bmp
C:\DOCUME~1\HOANGL~1\APPLIC~1\VMNToolbar\amazon.bmp
C:\DOCUME~1\HOANGL~1\APPLIC~1\VMNToolbar\an.bmp
C:\DOCUME~1\HOANGL~1\APPLIC~1\VMNToolbar\arrow.bmp
C:\DOCUME~1\HOANGL~1\APPLIC~1\VMNToolbar\arrowB.gif
C:\DOCUME~1\HOANGL~1\APPLIC~1\VMNToolbar\arrowT.gif
C:\DOCUME~1\HOANGL~1\APPLIC~1\VMNToolbar\arrow_down.gif
C:\DOCUME~1\HOANGL~1\APPLIC~1\VMNToolbar\arrow_up.gif
C:\DOCUME~1\HOANGL~1\APPLIC~1\VMNToolbar\autofill.bmp
C:\DOCUME~1\HOANGL~1\APPLIC~1\VMNToolbar\avstate.bmp
C:\DOCUME~1\HOANGL~1\APPLIC~1\VMNToolbar\b.bmp
C:\DOCUME~1\HOANGL~1\APPLIC~1\VMNToolbar\bg_pub.gif
C:\DOCUME~1\HOANGL~1\APPLIC~1\VMNToolbar\bg_ttl.gif
C:\DOCUME~1\HOANGL~1\APPLIC~1\VMNToolbar\bn.bmp
C:\DOCUME~1\HOANGL~1\APPLIC~1\VMNToolbar\bottom.png
C:\DOCUME~1\HOANGL~1\APPLIC~1\VMNToolbar\bottom_left.png
C:\DOCUME~1\HOANGL~1\APPLIC~1\VMNToolbar\bottom_right.png
C:\DOCUME~1\HOANGL~1\APPLIC~1\VMNToolbar\c.bmp
C:\DOCUME~1\HOANGL~1\APPLIC~1\VMNToolbar\CAlogo.bmp
C:\DOCUME~1\HOANGL~1\APPLIC~1\VMNToolbar\canalblog.bmp
C:\DOCUME~1\HOANGL~1\APPLIC~1\VMNToolbar\cn.bmp
C:\DOCUME~1\HOANGL~1\APPLIC~1\VMNToolbar\COMBOSEARCH.acs
C:\DOCUME~1\HOANGL~1\APPLIC~1\VMNToolbar\d.bmp
C:\DOCUME~1\HOANGL~1\APPLIC~1\VMNToolbar\dictionary2.bmp
C:\DOCUME~1\HOANGL~1\APPLIC~1\VMNToolbar\dn.bmp
C:\DOCUME~1\HOANGL~1\APPLIC~1\VMNToolbar\downfile
C:\DOCUME~1\HOANGL~1\APPLIC~1\VMNToolbar\DownloadCOM.bmp
C:\DOCUME~1\HOANGL~1\APPLIC~1\VMNToolbar\dropdown.css
C:\DOCUME~1\HOANGL~1\APPLIC~1\VMNToolbar\email_b.bmp
C:\DOCUME~1\HOANGL~1\APPLIC~1\VMNToolbar\equalizer_loading.bmp
C:\DOCUME~1\HOANGL~1\APPLIC~1\VMNToolbar\equalizer_off.bmp
C:\DOCUME~1\HOANGL~1\APPLIC~1\VMNToolbar\equalizer_on.bmp
C:\DOCUME~1\HOANGL~1\APPLIC~1\VMNToolbar\ErrorLog.txt
C:\DOCUME~1\HOANGL~1\APPLIC~1\VMNToolbar\ErrorPageTemplate.css
C:\DOCUME~1\HOANGL~1\APPLIC~1\VMNToolbar\ErrorPageTemplate_search.css
C:\DOCUME~1\HOANGL~1\APPLIC~1\VMNToolbar\f.bmp
C:\DOCUME~1\HOANGL~1\APPLIC~1\VMNToolbar\flag_argentine.bmp
C:\DOCUME~1\HOANGL~1\APPLIC~1\VMNToolbar\flag_australia.bmp
C:\DOCUME~1\HOANGL~1\APPLIC~1\VMNToolbar\flag_brazil.bmp
C:\DOCUME~1\HOANGL~1\APPLIC~1\VMNToolbar\flag_canada.bmp
C:\DOCUME~1\HOANGL~1\APP