Se connecter avec
S'enregistrer | Connectez-vous

Virus 360 ???

Dernière réponse : dans Sécurité

Bonsoir , voila j'ai un gros souci j'ai obtenu un virus qui se nommerait virus 360 d'aprés se qu'on ma dit , le souci est que je ne peux pas vous parlez depuis mon PC portable(où il y a le virus) car celui ci bloque mes démarches sur google.donc j 'ai fait un scan antivir mais comment faire pour vous poster le rapport est-ce qu'il y a un risque pour l'ordi de mon ami si je le fais passé par une clé USB pour vous l 'envoyer depuis son ordi :heink:  :pt1cable:  désolé c'est assez compliqué
Merci d'avance aidez moi SVP

Autres pages sur : virus 360

Lassé par la pub ? Créez un compte

Salut,

Citation :
est-ce qu'il y a un risque pour l'ordi de mon ami si je le fais passé par une clé USB pour vous l 'envoyer depuis son ordi

---> Il se peut que le PC ait une infection qui infecte les clés USB.

A faire sur le PC infecté pour dégrossir :

  • Télécharge Malwarebytes' Anti-Malware (MBAM) sur ton Bureau.
  • Double-clique sur le fichier téléchargé pour lancer le processus d'installation.
  • Dans l'onglet Mise à jour, clique sur le bouton Recherche de mise à jour : si le pare-feu demande l'autorisation à MBAM de se connecter à Internet, accepte.
  • Une fois la mise à jour terminée, rends-toi dans l'onglet Recherche.
  • Sélectionne Exécuter un examen rapide.
  • Clique sur Rechercher.
  • L'analyse démarre.
  • A la fin de l'analyse, un message s'affiche :
    Citation :
    L'examen s'est terminé normalement. Cliquez sur 'Afficher les résultats' pour afficher tous les objets trouvés.

  • Clique sur OK pour poursuivre. Si MBAM n'a rien trouvé, il te le dira aussi.
  • Ferme tes navigateurs.
  • Si des malwares ont été détectés, clique sur Afficher les résultats.
  • Sélectionne tout (ou laisse coché) et clique sur Supprimer la sélection, MBAM va détruire les fichiers et clés de registre infectés et en mettre une copie dans la quarantaine.
  • MBAM va ouvrir le Bloc-notes et y copier le rapport d'analyse. Copie-colle ce rapport dans ta prochaine réponse.

    alors point positif , j'ai réussi à me connecter depuis mon PC portable suite à la manip MBAM
    Malwarebytes' Anti-Malware 1.34
    Version de la base de données: 1797
    Windows 5.1.2600 Service Pack 2

    23/02/2009 23:30:45
    mbam-log-2009-02-23 (23-30-45).txt

    Type de recherche: Examen rapide
    Eléments examinés: 97819
    Temps écoulé: 16 minute(s), 12 second(s)

    Processus mémoire infecté(s): 0
    Module(s) mémoire infecté(s): 0
    Clé(s) du Registre infectée(s): 52
    Valeur(s) du Registre infectée(s): 27
    Elément(s) de données du Registre infecté(s): 13
    Dossier(s) infecté(s): 11
    Fichier(s) infecté(s): 22

    Processus mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Module(s) mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Clé(s) du Registre infectée(s):
    HKEY_CLASSES_ROOT\ascwarning32.warningbho (Trojan.Zlob) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\ascwarning32.warningbho.1 (Trojan.Zlob) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\cablerouting.cablerouting (Trojan.BHO) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\cablerouting.cablerouting.1 (Trojan.BHO) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\e405.e405mgr (Trojan.BHO) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\e405.e405mgr.1 (Trojan.BHO) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\xml.xml (Trojan.FakeAlert) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\xml.xml.1 (Trojan.FakeAlert) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{967a494a-6aec-4555-9caf-fa6eb00acf91} (Rogue.FakeAlert) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{9692be2f-eb8f-49d9-a11c-c24c1ef734d5} (Rogue.FakeAlert) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{f7d09218-46d7-4d3d-9b7f-315204cd0836} (Trojan.BHO) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\{5222008a-dd62-49c7-a735-7bd18ecc7350} (Rogue.VirusRemover) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\{5222008a-dd62-49c7-a735-7bd18ecc7350} (Rogue.VirusRemover) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{18cb1a7b-94cd-4582-8022-ada16851e44b} (Trojan.BHO) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{0bd071a6-c989-49e8-9b8e-80f92a868e26} (Trojan.BHO) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{D2608046-DD09-A225-01BF-70C1EDD8B2E8} (Rogue.AntiSpyCheck) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{c46f137f-2c2a-4714-aa14-323137f882ae} (Trojan.Zlob) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{e2090673-256b-4632-94ee-fec7f551543c} (Trojan.Zlob) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{58472bc6-bea3-42d4-8917-7a8bcb0711b5} (Trojan.Zlob) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{147a976f-eee1-4377-8ea7-4716e4cdd239} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Typelib\{a8954909-1f0f-41a5-a7fa-3b376d69e226} (Rogue.FakeAlert) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Typelib\{e63648f7-3933-440e-b4f6-a8584dd7b7eb} (Trojan.BHO) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Typelib\{8b8df25f-2c47-4473-8e1c-7f54ac7ef481} (Trojan.BHO) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Typelib\{9233c3c0-1472-4091-a505-5580a23bb4ac} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{7d5dd829-6c90-42c5-b54c-2afa82f988ba} (Rogue.Installer) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{18cb1a7b-94cd-4582-8022-ada16851e44b} (Trojan.BHO) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{0bd071a6-c989-49e8-9b8e-80f92a868e26} (Trojan.BHO) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{df780f87-ff2b-4df8-92d0-73db16a1543a} (Adware.PopCap) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{4d1c4e81-a32a-416b-bcdb-33b3ef3617d3} (Adware.Need2Find) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{9034a523-d068-4be8-a284-9df278be776e} (Trojan.Zlob) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{c46f137f-2c2a-4714-aa14-323137f882ae} (Trojan.Zlob) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{e2090673-256b-4632-94ee-fec7f551543c} (Trojan.Zlob) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{58472bc6-bea3-42d4-8917-7a8bcb0711b5} (Trojan.Zlob) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{daed9266-8c28-4c1c-8b58-5c66eff1d302} (Search.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18cb1a7b-94cd-4582-8022-ada16851e44b} (Trojan.BHO) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{e2090673-256b-4632-94ee-fec7f551543c} (Trojan.Zlob) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{9034a523-d068-4be8-a284-9df278be776e} (Trojan.Zlob) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7c4bcd17-bdba-4078-9d8c-8ca8b7eabe77} (Rogue.Multiple) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\virusremover2008 (Rogue.VirusRemove) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\virusremover2008 (Rogue.VirusRemove) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\UAV (Rogue.UltimateAntivirus) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Somefox (Trojan.Agent) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Casino Tropez (Adware.Casino) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Casino Tropez (Adware.Casino) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\asc 2.1 (Rogue.AntiSpyCheck) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Adsl Software Ltd (Trojan.FakeAlert) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Web Technologies (Trojan.Zlob) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\e405.e405mgr (Trojan.Zlob) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IEBrowse Tool (Trojan.Zlob) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IExplorer Bar (Trojan.Zlob) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{f250651a-afb0-8eed-f6f3-d2005eca2e36} (Adware.BHO) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{f250651a-afb0-8eed-f6f3-d2005eca2e36} (Adware.BHO) -> Quarantined and deleted successfully.

    Valeur(s) du Registre infectée(s):
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{c46f137f-2c2a-4714-aa14-323137f882ae} (Trojan.Zlob) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{c46f137f-2c2a-4714-aa14-323137f882ae} (Trojan.Zlob) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{d1577581-2ed7-469f-99b1-72c1339e0ee0} (Trojan.Zlob) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\antivirus (Rogue.SystemAntivirus) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\antivirus (Rogue.SystemAntivirus) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\usnzeqzymj (Trojan.Agent) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Settings\bf (Trojan.Agent) -> Delete on reboot.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Settings\bk (Trojan.Agent) -> Delete on reboot.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Settings\iu (Trojan.Agent) -> Delete on reboot.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Settings\mu (Trojan.Agent) -> Delete on reboot.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Somefox (Trojan.FakeAlert) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Search\searchassistant (Trojan.Zlob) -> Delete on reboot.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search\searchassistant (Trojan.Zlob) -> Delete on reboot.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main\searchmigrateddefaulturl (Trojan.Zlob) -> Delete on reboot.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main\default_search_url (Trojan.Zlob) -> Delete on reboot.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchUrl\w\ (Trojan.Zlob) -> Delete on reboot.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\searchurl (Trojan.Zlob) -> Delete on reboot.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\default_search_url (Trojan.Zlob) -> Delete on reboot.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\search page (Trojan.Zlob) -> Delete on reboot.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\search bar (Trojan.Zlob) -> Delete on reboot.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\searchmigrateddefaulturl (Trojan.Zlob) -> Delete on reboot.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchUrl\w\ (Trojan.Zlob) -> Delete on reboot.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\searchurl (Trojan.Zlob) -> Delete on reboot.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\New Windows\Allow\*.securewebinfo.com (Trojan.Zlob) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\New Windows\Allow\*.safetyincludes.com (Trojan.Zlob) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\New Windows\Allow\*.securemanaging.com (Trojan.Zlob) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\start (Trojan.Zlob) -> Quarantined and deleted successfully.

    Elément(s) de données du Registre infecté(s):
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchUrl\w\ (Hijack.Search) -> Bad: (http://internetsearchservice.com/search?q=%s) Good: (http://www.google.com/) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchUrl\w\ (Hijack.Search) -> Bad: (http://internetsearchservice.com/search?q=%s) Good: (http://www.google.com/) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchURL (Hijack.Search) -> Bad: (http://internetsearchservice.com) Good: (http://www.google.com/) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchURL (Hijack.Search) -> Bad: (http://internetsearchservice.com) Good: (http://www.google.com/) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Search\SearchAssistant (Hijack.Search) -> Bad: (http://internetsearchservice.com) Good: (http://www.google.com/) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search\SearchAssistant (Hijack.Search) -> Bad: (http://internetsearchservice.com) Good: (http://www.google.com/) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main\SearchMigratedDefaultURL (Hijack.Search) -> Bad: (http://internetsearchservice.com/search?q={searchTerms}) Good: (http://www.google.com/) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main\Default_Search_URL (Hijack.Search) -> Bad: (http://internetsearchservice.com) Good: (http://www.google.com/) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\Search Page (Hijack.Search) -> Bad: (http://internetsearchservice.com) Good: (http://www.google.com/) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\Search Bar (Hijack.Search) -> Bad: (http://internetsearchservice.com/ie6.html) Good: (http://www.google.com/) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\SearchMigratedDefaultURL (Hijack.Search) -> Bad: (http://internetsearchservice.com/search?q={searchTerms}) Good: (http://www.google.com/) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\Default_Search_URL (Hijack.Search) -> Bad: (http://internetsearchservice.com) Good: (http://www.google.com/) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL\CheckedValue (Hijack.System.Hidden) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.

    Dossier(s) infecté(s):
    C:\Program Files\ASC 2.1 (Rogue.AntiSpyCheck) -> Quarantined and deleted successfully.
    C:\Documents and Settings\All Users.WINDOWS\Application Data\ADSL Software Ltd (Rogue.Multiple) -> Quarantined and deleted successfully.
    C:\Documents and Settings\All Users.WINDOWS\Application Data\ADSL Software Ltd\WinSpywareProtect (Rogue.Multiple) -> Quarantined and deleted successfully.
    C:\Documents and Settings\All Users.WINDOWS\Application Data\ADSL Software Ltd\WinSpywareProtect\BASE (Rogue.Multiple) -> Quarantined and deleted successfully.
    C:\Documents and Settings\All Users.WINDOWS\Application Data\ADSL Software Ltd\WinSpywareProtect\DELETED (Rogue.Multiple) -> Quarantined and deleted successfully.
    C:\Documents and Settings\All Users.WINDOWS\Application Data\ADSL Software Ltd\WinSpywareProtect\LOG (Rogue.Multiple) -> Quarantined and deleted successfully.
    C:\Documents and Settings\All Users.WINDOWS\Application Data\ADSL Software Ltd\WinSpywareProtect\SAVED (Rogue.Multiple) -> Quarantined and deleted successfully.
    C:\Documents and Settings\All Users.WINDOWS\Application Data\SEC (Rogue.SecureExpertCleaner) -> Quarantined and deleted successfully.
    C:\Program Files\A360 (Rogue.A360Antivirus) -> Quarantined and deleted successfully.
    C:\Documents and Settings\rockmyroot.ORDINATEUR\Menu Démarrer\A360 (Rogue.A360Antivirus) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\734914 (Trojan.BHO) -> Quarantined and deleted successfully.

    Fichier(s) infecté(s):
    C:\Documents and Settings\rockmyroot.ORDINATEUR\Local Settings\Application Data\qccgg_navps.dat (Adware.Navipromo.H) -> Quarantined and deleted successfully.
    C:\Documents and Settings\rockmyroot.ORDINATEUR\Local Settings\Application Data\qccgg_nav.dat (Adware.Navipromo.H) -> Quarantined and deleted successfully.
    C:\Documents and Settings\rockmyroot.ORDINATEUR\Local Settings\Application Data\qccgg.dat (Adware.Navipromo.H) -> Quarantined and deleted successfully.
    C:\Documents and Settings\rockmyroot.ORDINATEUR\Local Settings\Application Data\ysscc_navps.dat (Adware.Navipromo.H) -> Quarantined and deleted successfully.
    C:\Documents and Settings\rockmyroot.ORDINATEUR\Local Settings\Application Data\ysscc_nav.dat (Adware.Navipromo.H) -> Quarantined and deleted successfully.
    C:\Documents and Settings\rockmyroot.ORDINATEUR\Local Settings\Application Data\ysscc.dat (Adware.Navipromo.H) -> Quarantined and deleted successfully.
    C:\Documents and Settings\rockmyroot.ORDINATEUR\Local Settings\Application Data\ysscc.exe (Adware.Navipromo.H) -> Quarantined and deleted successfully.
    C:\Documents and Settings\rockmyroot.ORDINATEUR\Local Settings\Temp\glizsvoo.dat (Rootkit.Agent) -> Delete on reboot.
    C:\Documents and Settings\All Users.WINDOWS\Application Data\ADSL Software Ltd\WinSpywareProtect\LOG\20080706195029798.log (Rogue.Multiple) -> Quarantined and deleted successfully.
    C:\Documents and Settings\All Users.WINDOWS\Application Data\ADSL Software Ltd\WinSpywareProtect\LOG\20080706202929291.log (Rogue.Multiple) -> Quarantined and deleted successfully.
    C:\Documents and Settings\All Users.WINDOWS\Application Data\ADSL Software Ltd\WinSpywareProtect\LOG\20080706213930597.log (Rogue.Multiple) -> Quarantined and deleted successfully.
    C:\Documents and Settings\All Users.WINDOWS\Application Data\ADSL Software Ltd\WinSpywareProtect\LOG\20080706232440768.log (Rogue.Multiple) -> Quarantined and deleted successfully.
    C:\Documents and Settings\All Users.WINDOWS\Application Data\ADSL Software Ltd\WinSpywareProtect\LOG\20080707142146347.log (Rogue.Multiple) -> Quarantined and deleted successfully.
    C:\Documents and Settings\rockmyroot.ORDINATEUR\Menu Démarrer\A360\A360.lnk (Rogue.A360Antivirus) -> Quarantined and deleted successfully.
    C:\Documents and Settings\rockmyroot.ORDINATEUR\Menu Démarrer\A360\Help.lnk (Rogue.A360Antivirus) -> Quarantined and deleted successfully.
    C:\Program Files\SAV\sav.ooo (Rogue.SystemAntivirus) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\hmufuvedmjacp.dll (Trojan.Agent) -> Delete on reboot.
    C:\WINDOWS\system32\winconfig.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.
    C:\Documents and Settings\rockmyroot.ORDINATEUR\Favoris\Antivirus Scan.url (Rogue.Link) -> Quarantined and deleted successfully.
    C:\Documents and Settings\All Users.WINDOWS\Bureau\WebMediaPlayer.lnk (Adware.EGDAccess) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\nvs2.inf (Adware.EGDAccess) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\UACohfqjxaa.dat (Trojan.Agent) -> Quarantined and deleted successfully.

    Citation :
    C:\WINDOWS\system32\UACohfqjxaa.dat (Trojan.Agent) -> Quarantined and deleted successfully.

    ---> Ça sent le rootkit TDSSServ.

    [#ff0000]/!\ Désactive tes protections résidentes (Antivirus, etc...) /!\[/#f]

  • Télécharge ComboFix ([#ff0000]sUBs[/#f]) sur ton Bureau.
  • Double-clique sur ComboFix.exe (le .exe n'est pas forcément visible) afin de le lancer.
  • Il va te demander d'installer la console de récupération : accepte.
  • Lorsque la recherche sera terminée, un rapport apparaîtra. Poste ce rapport (C:\Combofix.txt) dans ta prochaine réponse.

    Pour t'aider : Un guide et un tutoriel sur l'utilisation de ComboFix

    ComboFix 09-02-21.01 - rockmyroot 2009-02-24 0:12:28.1 - NTFSx86
    Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.246.33 [GMT 1:00]
    Running from: C:\Documents and Settings\rockmyroot.ORDINATEUR\Bureau\ComboFix.exe
    AV: avast! antivirus 4.8.1229 [VPS 081003-0] *On-access scanning enabled* (Updated)
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning disabled* (Updated)
    * Created a new restore point

    WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
    .

    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    C:\Documents and Settings\All Users.WINDOWS\Application Data\Software Licensors
    C:\Documents and Settings\All Users.WINDOWS\Application Data\Software Licensors\Antispyware PRO XP\asproxp.exe
    C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\WebMediaPlayer
    C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\WebMediaPlayer\Conditions générales.url
    C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\WebMediaPlayer\Confidentialité.url
    C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\WebMediaPlayer\Désinstaller.lnk
    C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\WebMediaPlayer\WebMediaPlayer.lnk
    C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\WebMediaPlayer\Website.url
    C:\Documents and Settings\rockmyroot.ORDINATEUR\x.exe
    C:\Program Files\Altnet
    C:\Program Files\Altnet\Download Manager\adm25.dll
    C:\Program Files\Altnet\Download Manager\adm4.dll
    C:\Program Files\Altnet\Download Manager\adm4005.exe
    C:\Program Files\Altnet\Download Manager\admdata.dll
    C:\Program Files\Altnet\Download Manager\admdloader.dll
    C:\Program Files\Altnet\Download Manager\admfdi.dll
    C:\Program Files\Altnet\Download Manager\admprog.dll
    C:\Program Files\Altnet\Download Manager\altnetuninstall.exe
    C:\Program Files\Altnet\Download Manager\asmend.exe
    C:\Program Files\Altnet\Download Manager\dminfo3.cab
    C:\Program Files\Altnet\Download Manager\dmsetup.bmp
    C:\Program Files\Altnet\Download Manager\dmsetupbig.bmp
    C:\Program Files\Altnet\Download Manager\jsinstall.cab
    C:\Program Files\Altnet\Download Manager\jslegals.txt
    C:\Program Files\Altnet\Download Manager\selectdir.txt
    C:\Program Files\Altnet\Download Manager\selectdir1st.txt
    C:\Program Files\Need2Find
    C:\Program Files\Need2Find\bar\History\search
    C:\Program Files\SAV
    C:\windows\backinf.tab
    C:\windows\system32\drivers\Xprotector.sys
    C:\windows\system32\logondll.dll
    C:\windows\ufdata2000.log

    .
    ((((((((((((((((((((((((( Files Created from 2009-01-23 to 2009-02-23 )))))))))))))))))))))))))))))))
    .

    2009-02-24 00:09 . 2009-02-24 00:10 <REP> d-------- C:\32788R22FWJFW
    2009-02-23 23:09 . 2009-02-23 23:09 <REP> d-------- C:\Program Files\Malwarebytes' Anti-Malware
    2009-02-23 23:09 . 2009-02-23 23:09 <REP> d-------- C:\Documents and Settings\rockmyroot.ORDINATEUR\Application Data\Malwarebytes
    2009-02-23 23:09 . 2009-02-23 23:09 <REP> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\Malwarebytes
    2009-02-23 23:09 . 2009-02-11 10:19 38,496 --a------ C:\WINDOWS\system32\drivers\mbamswissarmy.sys
    2009-02-23 23:09 . 2009-02-11 10:19 15,504 --a------ C:\WINDOWS\system32\drivers\mbam.sys
    2009-02-19 21:18 . 2009-02-19 21:18 <REP> d-------- C:\Program Files\Common Files
    2009-02-15 23:00 . 2009-02-15 23:02 <REP> d-------- C:\Documents and Settings\rockmyroot.ORDINATEUR\Application Data\vlc
    2009-02-11 15:53 . 2004-08-19 16:09 159,232 --a------ C:\WINDOWS\system32\ptpusd.dll
    2009-02-11 15:53 . 2001-08-23 17:47 5,632 --a------ C:\WINDOWS\system32\ptpusb.dll
    2009-02-11 14:42 . 2009-02-11 14:42 <REP> d-------- C:\Documents and Settings\rockmyroot.ORDINATEUR\Application Data\agi
    2009-02-11 14:42 . 2009-02-11 14:42 <REP> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\agi
    2009-02-10 15:21 . 2009-02-10 15:21 <REP> d-------- C:\MicroGaming

    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2009-02-23 22:53 --------- d-----w C:\Documents and Settings\rockmyroot.ORDINATEUR\Application Data\vmntoolbar
    2009-02-21 22:27 --------- d-----w C:\Program Files\Windows Live
    2009-02-16 17:26 48,277 ----a-w C:\windows\system32\yyxhvvamhytq.exe
    2009-02-12 16:11 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft Help
    2009-02-11 13:41 348,160 ----a-w C:\windows\system32\msvcr71.dll
    2009-02-11 13:41 339,968 ----a-w C:\windows\system32\pythoncom25.dll
    2009-02-11 13:41 2,117,632 ----a-w C:\windows\system32\python25.dll
    2009-02-11 13:41 114,688 ----a-w C:\windows\system32\pywintypes25.dll
    2009-02-11 13:41 --------- d-----w C:\Program Files\AGI
    2009-02-09 19:20 --------- d-----w C:\Program Files\Abbyy FineReader 6.0 Sprint
    2009-02-09 19:17 --------- d-----w C:\Program Files\DNA
    2009-02-06 01:20 --------- d-----w C:\Program Files\Ahead
    2009-01-22 15:54 --------- d-----w C:\Program Files\AskBarDis
    2009-01-21 22:58 --------- d-----w C:\Documents and Settings\rockmyroot.ORDINATEUR\Application Data\uTorrent
    2009-01-17 13:36 --------- d-----w C:\Documents and Settings\rockmyroot.ORDINATEUR\Application Data\Teleca
    2009-01-17 13:35 --------- d-----w C:\Documents and Settings\rockmyroot.ORDINATEUR\Application Data\Sony Ericsson
    2009-01-16 20:15 3,594,752 ------w C:\windows\system32\DllCache\mshtml.dll
    2009-01-15 16:54 --------- d-----w C:\Program Files\AskTBar
    2009-01-11 19:43 --------- d-----w C:\Program Files\Google
    2009-01-09 00:02 --------- d-----w C:\Documents and Settings\rockmyroot.ORDINATEUR\Application Data\Blender Foundation
    2009-01-07 04:19 --------- d-----w C:\Documents and Settings\rockmyroot.ORDINATEUR\Application Data\dvdcss
    2009-01-04 20:23 --------- d-----w C:\Documents and Settings\rockmyroot.ORDINATEUR\Application Data\U3
    2009-01-04 16:58 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\wmp
    2008-12-30 23:56 --------- d--h--w C:\Program Files\InstallShield Installation Information
    2008-12-20 22:47 826,368 ----a-w C:\windows\system32\wininet.dll
    2008-12-20 22:47 826,368 ------w C:\windows\system32\DllCache\wininet.dll
    2008-12-20 22:47 671,232 ------w C:\windows\system32\DllCache\mstime.dll
    2008-12-20 22:47 477,696 ------w C:\windows\system32\DllCache\mshtmled.dll
    2008-12-20 22:47 44,544 ------w C:\windows\system32\DllCache\pngfilt.dll
    2008-12-20 22:47 233,472 ------w C:\windows\system32\DllCache\webcheck.dll
    2008-12-20 22:47 193,024 ------w C:\windows\system32\DllCache\msrating.dll
    2008-12-20 22:47 105,984 ------w C:\windows\system32\DllCache\url.dll
    2008-12-20 22:47 102,912 ------w C:\windows\system32\DllCache\occache.dll
    2008-12-20 22:47 1,160,192 ------w C:\windows\system32\DllCache\urlmon.dll
    2008-12-19 20:52 99 ----a-w C:\AUTORUN.VIR
    2008-12-19 09:11 70,656 ------w C:\windows\system32\DllCache\ie4uinit.exe
    2008-12-19 09:10 13,824 ------w C:\windows\system32\DllCache\ieudinit.exe
    2008-12-19 05:25 634,024 ------w C:\windows\system32\DllCache\iexplore.exe
    2008-12-19 05:23 161,792 ------w C:\windows\system32\DllCache\ieakui.dll
    2008-12-11 10:24 333,184 ------w C:\windows\system32\DllCache\srv.sys
    2008-12-04 23:11 308,584 ----a-w C:\windows\WLXPGSS.SCR
    2008-12-02 21:37 49,480 ----a-w C:\windows\system32\sirenacm.dll
    2008-10-03 11:41 339,356 ----a-w C:\Documents and Settings\rockmyroot.ORDINATEUR\base.dat
    .

    ------- Sigcheck -------

    2008-04-14 03:34 512000 dd73d6b9f6b4cb630cf35b438b540174 C:\windows\SoftwareDistribution\Download\44b6174a4a693136d02d4a7ecd7cbd54\winlogon.exe
    2007-07-18 20:14 506368 fa7c7c2b461130a792adf6a28f1d652b C:\windows\system32\winlogon.exe
    .
    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4

    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}]
    2008-09-29 17:24 325000 --a------ C:\Program Files\AskBarDis\bar\bin\askBar.dll

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
    "{3041d03e-fd4b-44e0-b742-2d9b88305f98}"= "C:\Program Files\AskBarDis\bar\bin\askBar.dll" [2008-09-29 17:24 325000]

    [HKEY_CLASSES_ROOT\clsid\{3041d03e-fd4b-44e0-b742-2d9b88305f98}]
    [HKEY_CLASSES_ROOT\TypeLib\{4b1c1e16-6b34-430e-b074-5928eca4c150}]

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
    "{3041D03E-FD4B-44E0-B742-2D9B88305F98}"= "C:\Program Files\AskBarDis\bar\bin\askBar.dll" [2008-09-29 17:24 325000]

    [HKEY_CLASSES_ROOT\clsid\{3041d03e-fd4b-44e0-b742-2d9b88305f98}]
    [HKEY_CLASSES_ROOT\TypeLib\{4b1c1e16-6b34-430e-b074-5928eca4c150}]

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "ctfmon.exe"="C:\windows\system32\ctfmon.exe" [2004-08-19 21:09 15360]
    "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-01-10 18:47 39408]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "SoundMAXPnP"="C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe" [2004-10-14 09:11 1388544]
    "IgfxTray"="C:\WINDOWS\system32\igfxtray.exe" [2004-02-10 10:55 155648]
    "HotKeysCmds"="C:\WINDOWS\system32\hkcmd.exe" [2004-02-10 10:51 118784]
    "avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-06-12 13:28 266497]
    "TrackPointSrv"="tp4mon.exe" [2004-08-19 17:10 82432 C:\WINDOWS\system32\tp4mon.exe]
    "PV92TRAY"="PV92Tray.exe" [2003-10-30 12:09 323584 C:\WINDOWS\system32\PV92Tray.exe]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
    "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-19 21:09 15360]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
    "LSD_III"="C:\windows\LSD\end.cmd" [2007-08-07 15:46 2336]
    "tscuninstall"="C:\windows\system32\tscupgrd.exe" [2004-08-19 20:52 44544]
    "nltide_3"="advpack.dll" [2008-12-20 23:46 124928 C:\WINDOWS\system32\advpack.dll]

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
    "ForceClassicControlPanel"= 1 (0x1)
    "NoSMBalloonTip"= 0 (0x0)

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
    BootExecute REG_MULTI_SZ autocheck autochk /k:C /k:F *

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
    Authentication Packages REG_MULTI_SZ msv1_0 nwprovau

    [HKEY_LOCAL_MACHINE\software\microsoft\security center]
    "AntiVirusDisableNotify"=dword:00000001
    "UpdatesDisableNotify"=dword:00000001
    "AntiVirusOverride"=dword:00000001
    "FirewallOverride"=dword:00000001

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
    "EnableFirewall"= 0 (0x0)
    "DisableUnicastResponsesToMulticastBroadcast"= 0 (0x0)

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
    "%windir%\\system32\\sessmgr.exe"=
    "C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
    "C:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
    "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
    "3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009

    R1 aswSP;avast! Self Protection; [x]
    R2 aswFsBlk;aswFsBlk; [x]
    S0 DeepFrz;DeepFrz; [x]
    S0 pbmxsgsl;pbmxsgsl;C:\windows\system32\drivers\pbmxsgsl.sys [2001-08-28 19:00 23424]
    S1 bbcap;bbcap;C:\windows\system32\DRIVERS\bbcap.sys [2008-01-26 20:36 2944]
    S2 SeaPort;SeaPort;C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2008-12-04 16:03 226640]


    --- Other Services/Drivers In Memory ---

    *Deregistered* - ALG
    *Deregistered* - AntiVirScheduler
    *Deregistered* - AntiVirService
    *Deregistered* - AudioSrv
    *Deregistered* - BITS
    *Deregistered* - Browser
    *Deregistered* - CryptSvc
    *Deregistered* - DcomLaunch
    *Deregistered* - Dhcp
    *Deregistered* - dmserver
    *Deregistered* - Dnscache
    *Deregistered* - ERSvc
    *Deregistered* - EventSystem
    *Deregistered* - FastUserSwitchingCompatibility
    *Deregistered* - gusvc
    *Deregistered* - helpsvc
    *Deregistered* - HidServ
    *Deregistered* - HTTPFilter
    *Deregistered* - IBMPMSVC
    *Deregistered* - IpNat
    *Deregistered* - IPSec
    *Deregistered* - KSecDD
    *Deregistered* - lanmanserver
    *Deregistered* - lanmanworkstation
    *Deregistered* - mnmdd
    *Deregistered* - MountMgr
    *Deregistered* - MRxSmb
    *Deregistered* - Msfs
    *Deregistered* - mssmbios
    *Deregistered* - Mup
    *Deregistered* - NDIS
    *Deregistered* - NdisTapi
    *Deregistered* - NdisWan
    *Deregistered* - NDProxy
    *Deregistered* - NetBIOS
    *Deregistered* - NetBT
    *Deregistered* - Netman
    *Deregistered* - Nla
    *Deregistered* - Npfs
    *Deregistered* - Ntfs
    *Deregistered* - Null
    *Deregistered* - NWCWorkstation
    *Deregistered* - NwlnkFlt
    *Deregistered* - NwlnkFwd
    *Deregistered* - NwlnkIpx
    *Deregistered* - NwlnkNb
    *Deregistered* - NwlnkSpx
    *Deregistered* - NWRDR
    *Deregistered* - PartMgr
    *Deregistered* - ParVdm
    *Deregistered* - pbmxsgsl
    *Deregistered* - PptpMiniport
    *Deregistered* - PSched
    *Deregistered* - RasAcd
    *Deregistered* - Rasl2tp
    *Deregistered* - RasMan
    *Deregistered* - RasPppoe
    *Deregistered* - Raspti
    *Deregistered* - Rdbss
    *Deregistered* - RDPCDD
    *Deregistered* - rdpdr
    *Deregistered* - RDPWD
    *Deregistered* - RemoteAccess
    *Deregistered* - RpcSs
    *Deregistered* - SeaPort
    *Deregistered* - Secdrv
    *Deregistered* - SENS
    *Deregistered* - SharedAccess
    *Deregistered* - ShellHWDetection
    *Deregistered* - SoundMAX Agent Service (default)
    *Deregistered* - Spooler
    *Deregistered* - sptd
    *Deregistered* - sr
    *Deregistered* - srservice
    *Deregistered* - Srv
    *Deregistered* - SSDPSRV
    *Deregistered* - ssmdrv
    *Deregistered* - stisvc
    *Deregistered* - swenum
    *Deregistered* - SysmonLog
    *Deregistered* - TapiSrv
    *Deregistered* - Tcpip
    *Deregistered* - TDTCP
    *Deregistered* - TermDD
    *Deregistered* - TermService
    *Deregistered* - Themes
    *Deregistered* - Update
    *Deregistered* - upnphost
    *Deregistered* - VgaSave
    *Deregistered* - VolSnap
    *Deregistered* - Wanarp
    *Deregistered* - winmgmt
    *Deregistered* - wscsvc
    *Deregistered* - wuauserv
    *Deregistered* - WudfPf
    *Deregistered* - WudfSvc

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{243ff9a0-f0f2-11dc-a59d-000ae4394baf}]
    \Shell\AutoRun\command - C:\windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL antihost.exe
    .
    - - - - ORPHANS REMOVED - - - -

    BHO-{5D9B1F28-1AF0-4C6A-BD10-D985166DD03D} - C:\windows\system32\atmpvcn.dll
    HKCU-Run-ares - C:\Program Files\Ares\Ares.exe
    HKCU-Run-wsusk - c:\documents and settings\rockmyroot.ordinateur\local settings\application data\wsusk.exe
    HKCU-Run-Nero DriveSpeed - C:\PROGRA~1\NERO9~1\NERODR~1\DRIVES~1.EXE
    HKCU-Run-wsqeiqs - c:\documents and settings\rockmyroot.ordinateur\local settings\application data\wsqeiqs.exe
    HKCU-Run-BitTorrent DNA - C:\Program Files\DNA\btdna.exe
    HKLM-Run-NBKeyScan - C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe
    HKLM-Run-avast! - C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    Notify-DfLogon - LogonDll.dll


    .
    ------- Supplementary Scan -------
    .
    uStart Page = hxxp://www.google.com/
    uSearchMigratedDefaultURL = 687474703a2f2f7777772e676f6f676c652e636f6d2f
    uDefault_Search_URL = 687474703a2f2f7777772e676f6f676c652e636f6d2f
    mSearch Bar = 687474703a2f2f7777772e676f6f676c652e636f6d2f
    mSearchMigratedDefaultURL = 687474703a2f2f7777772e676f6f676c652e636f6d2f
    uSearchURL,(Default) = hxxp://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
    mSearchURL = 687474703a2f2f7777772e676f6f676c652e636f6d2f
    IE: &Download with &DAP - C:\Program Files\DAP\dapextie.htm
    IE: &Search - http://ko.bar.need2find.com/KO/menusearch.html?p=KO
    IE: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
    IE: E&xporter vers Microsoft Excel - C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
    Name-Space Handler: ftp\ZDA - {5BFA1DAF-5EDC-11D2-959E-00C00C02DA5E} -
    Name-Space Handler: http\ZDA - {5BFA1DAF-5EDC-11D2-959E-00C00C02DA5E} -
    DPF: CabBuilder - hxxp://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
    DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - hxxp://fichiers.touslesdrivers.com/fichiers/hardwaredetection/hardwaredetection_2_0_4_13.cab
    FF - ProfilePath - C:\Documents and Settings\rockmyroot.ORDINATEUR\Application Data\Mozilla\Firefox\Profiles\tt1eynfz.default\
    FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
    FF - prefs.js: browser.search.selectedEngine - Ask
    FF - prefs.js: browser.startup.homepage - hxxp://www.google.fr
    FF - prefs.js: keyword.URL - hxxp://toolbar.ask.com/toolbarv/askRedirect?o=101761&gct=&gc=1&q=
    FF - plugin: C:\Program Files\Microsoft\Office Live\npOLW.dll
    FF - plugin: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
    .

    d&sol& il en manquait un bout voila en entier :

    ComboFix 09-02-21.01 - rockmyroot 2009-02-24 0:12:28.1 - NTFSx86
    Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.246.33 [GMT 1:00]
    Running from: c:\documents and settings\rockmyroot.ORDINATEUR\Bureau\ComboFix.exe
    AV: avast! antivirus 4.8.1229 [VPS 081003-0] *On-access scanning enabled* (Updated)
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning disabled* (Updated)
    * Created a new restore point

    WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
    .

    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    c:\documents and settings\All Users.WINDOWS\Application Data\Software Licensors
    c:\documents and settings\All Users.WINDOWS\Application Data\Software Licensors\Antispyware PRO XP\asproxp.exe
    c:\documents and settings\All Users.WINDOWS\Menu Démarrer\Programmes\WebMediaPlayer
    c:\documents and settings\All Users.WINDOWS\Menu Démarrer\Programmes\WebMediaPlayer\Conditions générales.url
    c:\documents and settings\All Users.WINDOWS\Menu Démarrer\Programmes\WebMediaPlayer\Confidentialité.url
    c:\documents and settings\All Users.WINDOWS\Menu Démarrer\Programmes\WebMediaPlayer\Désinstaller.lnk
    c:\documents and settings\All Users.WINDOWS\Menu Démarrer\Programmes\WebMediaPlayer\WebMediaPlayer.lnk
    c:\documents and settings\All Users.WINDOWS\Menu Démarrer\Programmes\WebMediaPlayer\Website.url
    c:\documents and settings\rockmyroot.ORDINATEUR\x.exe
    c:\program files\Altnet
    c:\program files\Altnet\Download Manager\adm25.dll
    c:\program files\Altnet\Download Manager\adm4.dll
    c:\program files\Altnet\Download Manager\adm4005.exe
    c:\program files\Altnet\Download Manager\admdata.dll
    c:\program files\Altnet\Download Manager\admdloader.dll
    c:\program files\Altnet\Download Manager\admfdi.dll
    c:\program files\Altnet\Download Manager\admprog.dll
    c:\program files\Altnet\Download Manager\altnetuninstall.exe
    c:\program files\Altnet\Download Manager\asmend.exe
    c:\program files\Altnet\Download Manager\dminfo3.cab
    c:\program files\Altnet\Download Manager\dmsetup.bmp
    c:\program files\Altnet\Download Manager\dmsetupbig.bmp
    c:\program files\Altnet\Download Manager\jsinstall.cab
    c:\program files\Altnet\Download Manager\jslegals.txt
    c:\program files\Altnet\Download Manager\selectdir.txt
    c:\program files\Altnet\Download Manager\selectdir1st.txt
    c:\program files\Need2Find
    c:\program files\Need2Find\bar\History\search
    c:\program files\SAV
    c:\windows\backinf.tab
    c:\windows\system32\drivers\Xprotector.sys
    c:\windows\system32\logondll.dll
    c:\windows\ufdata2000.log

    .
    ((((((((((((((((((((((((( Files Created from 2009-01-23 to 2009-02-23 )))))))))))))))))))))))))))))))
    .

    2009-02-24 00:09 . 2009-02-24 00:10 <REP> d-------- C:\32788R22FWJFW
    2009-02-23 23:09 . 2009-02-23 23:09 <REP> d-------- c:\program files\Malwarebytes' Anti-Malware
    2009-02-23 23:09 . 2009-02-23 23:09 <REP> d-------- c:\documents and settings\rockmyroot.ORDINATEUR\Application Data\Malwarebytes
    2009-02-23 23:09 . 2009-02-23 23:09 <REP> d-------- c:\documents and settings\All Users.WINDOWS\Application Data\Malwarebytes
    2009-02-23 23:09 . 2009-02-11 10:19 38,496 --a------ c:\windows\system32\drivers\mbamswissarmy.sys
    2009-02-23 23:09 . 2009-02-11 10:19 15,504 --a------ c:\windows\system32\drivers\mbam.sys
    2009-02-19 21:18 . 2009-02-19 21:18 <REP> d-------- c:\program files\Common Files
    2009-02-15 23:00 . 2009-02-15 23:02 <REP> d-------- c:\documents and settings\rockmyroot.ORDINATEUR\Application Data\vlc
    2009-02-11 15:53 . 2004-08-19 16:09 159,232 --a------ c:\windows\system32\ptpusd.dll
    2009-02-11 15:53 . 2001-08-23 17:47 5,632 --a------ c:\windows\system32\ptpusb.dll
    2009-02-11 14:42 . 2009-02-11 14:42 <REP> d-------- c:\documents and settings\rockmyroot.ORDINATEUR\Application Data\agi
    2009-02-11 14:42 . 2009-02-11 14:42 <REP> d-------- c:\documents and settings\All Users.WINDOWS\Application Data\agi
    2009-02-10 15:21 . 2009-02-10 15:21 <REP> d-------- C:\MicroGaming

    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2009-02-23 22:53 --------- d-----w c:\documents and settings\rockmyroot.ORDINATEUR\Application Data\vmntoolbar
    2009-02-21 22:27 --------- d-----w c:\program files\Windows Live
    2009-02-16 17:26 48,277 ----a-w c:\windows\system32\yyxhvvamhytq.exe
    2009-02-12 16:11 --------- d-----w c:\documents and settings\All Users.WINDOWS\Application Data\Microsoft Help
    2009-02-11 13:41 348,160 ----a-w c:\windows\system32\msvcr71.dll
    2009-02-11 13:41 339,968 ----a-w c:\windows\system32\pythoncom25.dll
    2009-02-11 13:41 2,117,632 ----a-w c:\windows\system32\python25.dll
    2009-02-11 13:41 114,688 ----a-w c:\windows\system32\pywintypes25.dll
    2009-02-11 13:41 --------- d-----w c:\program files\AGI
    2009-02-09 19:20 --------- d-----w c:\program files\Abbyy FineReader 6.0 Sprint
    2009-02-09 19:17 --------- d-----w c:\program files\DNA
    2009-02-06 01:20 --------- d-----w c:\program files\Ahead
    2009-01-22 15:54 --------- d-----w c:\program files\AskBarDis
    2009-01-21 22:58 --------- d-----w c:\documents and settings\rockmyroot.ORDINATEUR\Application Data\uTorrent
    2009-01-17 13:36 --------- d-----w c:\documents and settings\rockmyroot.ORDINATEUR\Application Data\Teleca
    2009-01-17 13:35 --------- d-----w c:\documents and settings\rockmyroot.ORDINATEUR\Application Data\Sony Ericsson
    2009-01-16 20:15 3,594,752 ------w c:\windows\system32\DllCache\mshtml.dll
    2009-01-15 16:54 --------- d-----w c:\program files\AskTBar
    2009-01-11 19:43 --------- d-----w c:\program files\Google
    2009-01-09 00:02 --------- d-----w c:\documents and settings\rockmyroot.ORDINATEUR\Application Data\Blender Foundation
    2009-01-07 04:19 --------- d-----w c:\documents and settings\rockmyroot.ORDINATEUR\Application Data\dvdcss
    2009-01-04 20:23 --------- d-----w c:\documents and settings\rockmyroot.ORDINATEUR\Application Data\U3
    2009-01-04 16:58 --------- d-----w c:\documents and settings\All Users.WINDOWS\Application Data\wmp
    2008-12-30 23:56 --------- d--h--w c:\program files\InstallShield Installation Information
    2008-12-20 22:47 826,368 ----a-w c:\windows\system32\wininet.dll
    2008-12-20 22:47 826,368 ------w c:\windows\system32\DllCache\wininet.dll
    2008-12-20 22:47 671,232 ------w c:\windows\system32\DllCache\mstime.dll
    2008-12-20 22:47 477,696 ------w c:\windows\system32\DllCache\mshtmled.dll
    2008-12-20 22:47 44,544 ------w c:\windows\system32\DllCache\pngfilt.dll
    2008-12-20 22:47 233,472 ------w c:\windows\system32\DllCache\webcheck.dll
    2008-12-20 22:47 193,024 ------w c:\windows\system32\DllCache\msrating.dll
    2008-12-20 22:47 105,984 ------w c:\windows\system32\DllCache\url.dll
    2008-12-20 22:47 102,912 ------w c:\windows\system32\DllCache\occache.dll
    2008-12-20 22:47 1,160,192 ------w c:\windows\system32\DllCache\urlmon.dll
    2008-12-19 20:52 99 ----a-w C:\AUTORUN.VIR
    2008-12-19 09:11 70,656 ------w c:\windows\system32\DllCache\ie4uinit.exe
    2008-12-19 09:10 13,824 ------w c:\windows\system32\DllCache\ieudinit.exe
    2008-12-19 05:25 634,024 ------w c:\windows\system32\DllCache\iexplore.exe
    2008-12-19 05:23 161,792 ------w c:\windows\system32\DllCache\ieakui.dll
    2008-12-11 10:24 333,184 ------w c:\windows\system32\DllCache\srv.sys
    2008-12-04 23:11 308,584 ----a-w c:\windows\WLXPGSS.SCR
    2008-12-02 21:37 49,480 ----a-w c:\windows\system32\sirenacm.dll
    2008-10-03 11:41 339,356 ----a-w c:\documents and settings\rockmyroot.ORDINATEUR\base.dat
    .

    ------- Sigcheck -------

    2008-04-14 03:34 512000 dd73d6b9f6b4cb630cf35b438b540174 c:\windows\SoftwareDistribution\Download\44b6174a4a693136d02d4a7ecd7cbd54\winlogon.exe
    2007-07-18 20:14 506368 fa7c7c2b461130a792adf6a28f1d652b c:\windows\system32\winlogon.exe
    .
    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4

    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}]
    2008-09-29 17:24 325000 --a------ c:\program files\AskBarDis\bar\bin\askBar.dll

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
    "{3041d03e-fd4b-44e0-b742-2d9b88305f98}"= "c:\program files\AskBarDis\bar\bin\askBar.dll" [2008-09-29 325000]

    [HKEY_CLASSES_ROOT\clsid\{3041d03e-fd4b-44e0-b742-2d9b88305f98}]
    [HKEY_CLASSES_ROOT\TypeLib\{4b1c1e16-6b34-430e-b074-5928eca4c150}]

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
    "{3041D03E-FD4B-44E0-B742-2D9B88305F98}"= "c:\program files\AskBarDis\bar\bin\askBar.dll" [2008-09-29 325000]

    [HKEY_CLASSES_ROOT\clsid\{3041d03e-fd4b-44e0-b742-2d9b88305f98}]
    [HKEY_CLASSES_ROOT\TypeLib\{4b1c1e16-6b34-430e-b074-5928eca4c150}]

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2004-08-19 15360]
    "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-01-10 39408]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "SoundMAXPnP"="c:\program files\Analog Devices\SoundMAX\SMax4PNP.exe" [2004-10-14 1388544]
    "IgfxTray"="c:\windows\system32\igfxtray.exe" [2004-02-10 155648]
    "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2004-02-10 118784]
    "avgnt"="c:\program files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-06-12 266497]
    "TrackPointSrv"="tp4mon.exe" [2004-08-19 c:\windows\system32\tp4mon.exe]
    "PV92TRAY"="PV92Tray.exe" [2003-10-30 c:\windows\system32\PV92Tray.exe]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
    "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-19 15360]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
    "LSD_III"="c:\windows\LSD\end.cmd" [2007-08-07 2336]
    "tscuninstall"="c:\windows\system32\tscupgrd.exe" [2004-08-19 44544]
    "nltide_3"="advpack.dll" [2008-12-20 c:\windows\system32\advpack.dll]

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
    "ForceClassicControlPanel"= 1 (0x1)
    "NoSMBalloonTip"= 0 (0x0)

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
    BootExecute REG_MULTI_SZ autocheck autochk /k:C /k:F *

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
    Authentication Packages REG_MULTI_SZ msv1_0 nwprovau

    [HKEY_LOCAL_MACHINE\software\microsoft\security center]
    "AntiVirusDisableNotify"=dword:00000001
    "UpdatesDisableNotify"=dword:00000001
    "AntiVirusOverride"=dword:00000001
    "FirewallOverride"=dword:00000001

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
    "EnableFirewall"= 0 (0x0)
    "DisableUnicastResponsesToMulticastBroadcast"= 0 (0x0)

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
    "%windir%\\system32\\sessmgr.exe"=
    "c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
    "c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
    "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
    "3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009

    R1 aswSP;avast! Self Protection; [x]
    R2 aswFsBlk;aswFsBlk; [x]
    S0 DeepFrz;DeepFrz; [x]
    S0 pbmxsgsl;pbmxsgsl;c:\windows\system32\drivers\pbmxsgsl.sys [2001-08-28 23424]
    S1 bbcap;bbcap;c:\windows\system32\DRIVERS\bbcap.sys [2008-01-26 2944]
    S2 SeaPort;SeaPort;c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2008-12-04 226640]


    --- Other Services/Drivers In Memory ---

    *Deregistered* - ALG
    *Deregistered* - AntiVirScheduler
    *Deregistered* - AntiVirService
    *Deregistered* - AudioSrv
    *Deregistered* - BITS
    *Deregistered* - Browser
    *Deregistered* - CryptSvc
    *Deregistered* - DcomLaunch
    *Deregistered* - Dhcp
    *Deregistered* - dmserver
    *Deregistered* - Dnscache
    *Deregistered* - ERSvc
    *Deregistered* - EventSystem
    *Deregistered* - FastUserSwitchingCompatibility
    *Deregistered* - gusvc
    *Deregistered* - helpsvc
    *Deregistered* - HidServ
    *Deregistered* - HTTPFilter
    *Deregistered* - IBMPMSVC
    *Deregistered* - IpNat
    *Deregistered* - IPSec
    *Deregistered* - KSecDD
    *Deregistered* - lanmanserver
    *Deregistered* - lanmanworkstation
    *Deregistered* - mnmdd
    *Deregistered* - MountMgr
    *Deregistered* - MRxSmb
    *Deregistered* - Msfs
    *Deregistered* - mssmbios
    *Deregistered* - Mup
    *Deregistered* - NDIS
    *Deregistered* - NdisTapi
    *Deregistered* - NdisWan
    *Deregistered* - NDProxy
    *Deregistered* - NetBIOS
    *Deregistered* - NetBT
    *Deregistered* - Netman
    *Deregistered* - Nla
    *Deregistered* - Npfs
    *Deregistered* - Ntfs
    *Deregistered* - Null
    *Deregistered* - NWCWorkstation
    *Deregistered* - NwlnkFlt
    *Deregistered* - NwlnkFwd
    *Deregistered* - NwlnkIpx
    *Deregistered* - NwlnkNb
    *Deregistered* - NwlnkSpx
    *Deregistered* - NWRDR
    *Deregistered* - PartMgr
    *Deregistered* - ParVdm
    *Deregistered* - pbmxsgsl
    *Deregistered* - PptpMiniport
    *Deregistered* - PSched
    *Deregistered* - RasAcd
    *Deregistered* - Rasl2tp
    *Deregistered* - RasMan
    *Deregistered* - RasPppoe
    *Deregistered* - Raspti
    *Deregistered* - Rdbss
    *Deregistered* - RDPCDD
    *Deregistered* - rdpdr
    *Deregistered* - RDPWD
    *Deregistered* - RemoteAccess
    *Deregistered* - RpcSs
    *Deregistered* - SeaPort
    *Deregistered* - Secdrv
    *Deregistered* - SENS
    *Deregistered* - SharedAccess
    *Deregistered* - ShellHWDetection
    *Deregistered* - SoundMAX Agent Service (default)
    *Deregistered* - Spooler
    *Deregistered* - sptd
    *Deregistered* - sr
    *Deregistered* - srservice
    *Deregistered* - Srv
    *Deregistered* - SSDPSRV
    *Deregistered* - ssmdrv
    *Deregistered* - stisvc
    *Deregistered* - swenum
    *Deregistered* - SysmonLog
    *Deregistered* - TapiSrv
    *Deregistered* - Tcpip
    *Deregistered* - TDTCP
    *Deregistered* - TermDD
    *Deregistered* - TermService
    *Deregistered* - Themes
    *Deregistered* - Update
    *Deregistered* - upnphost
    *Deregistered* - VgaSave
    *Deregistered* - VolSnap
    *Deregistered* - Wanarp
    *Deregistered* - winmgmt
    *Deregistered* - wscsvc
    *Deregistered* - wuauserv
    *Deregistered* - WudfPf
    *Deregistered* - WudfSvc

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{243ff9a0-f0f2-11dc-a59d-000ae4394baf}]
    \Shell\AutoRun\command - c:\windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL antihost.exe
    .
    - - - - ORPHANS REMOVED - - - -

    BHO-{5D9B1F28-1AF0-4C6A-BD10-D985166DD03D} - c:\windows\system32\atmpvcn.dll
    HKCU-Run-ares - c:\program files\Ares\Ares.exe
    HKCU-Run-wsusk - c:\documents and settings\rockmyroot.ordinateur\local settings\application data\wsusk.exe
    HKCU-Run-Nero DriveSpeed - c:\progra~1\NERO9~1\NERODR~1\DRIVES~1.EXE
    HKCU-Run-wsqeiqs - c:\documents and settings\rockmyroot.ordinateur\local settings\application data\wsqeiqs.exe
    HKCU-Run-BitTorrent DNA - c:\program files\DNA\btdna.exe
    HKLM-Run-NBKeyScan - c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe
    HKLM-Run-avast! - c:\progra~1\ALWILS~1\Avast4\ashDisp.exe
    Notify-DfLogon - LogonDll.dll


    .
    ------- Supplementary Scan -------
    .
    uStart Page = hxxp://www.google.com/
    uSearchMigratedDefaultURL = 687474703a2f2f7777772e676f6f676c652e636f6d2f
    uDefault_Search_URL = 687474703a2f2f7777772e676f6f676c652e636f6d2f
    mSearch Bar = 687474703a2f2f7777772e676f6f676c652e636f6d2f
    mSearchMigratedDefaultURL = 687474703a2f2f7777772e676f6f676c652e636f6d2f
    uSearchURL,(Default) = hxxp://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
    mSearchURL = 687474703a2f2f7777772e676f6f676c652e636f6d2f
    IE: &Download with &DAP - c:\program files\DAP\dapextie.htm
    IE: &Search - http://ko.bar.need2find.com/KO/menusearch.html?p=KO
    IE: Download &all with DAP - c:\program files\DAP\dapextie2.htm
    IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~1\Office12\EXCEL.EXE/3000
    Name-Space Handler: ftp\ZDA - {5BFA1DAF-5EDC-11D2-959E-00C00C02DA5E} -
    Name-Space Handler: http\ZDA - {5BFA1DAF-5EDC-11D2-959E-00C00C02DA5E} -
    DPF: CabBuilder - hxxp://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
    DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - hxxp://fichiers.touslesdrivers.com/fichiers/hardwaredetection/hardwaredetection_2_0_4_13.cab
    FF - ProfilePath - c:\documents and settings\rockmyroot.ORDINATEUR\Application Data\Mozilla\Firefox\Profiles\tt1eynfz.default\
    FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
    FF - prefs.js: browser.search.selectedEngine - Ask
    FF - prefs.js: browser.startup.homepage - hxxp://www.google.fr
    FF - prefs.js: keyword.URL - hxxp://toolbar.ask.com/toolbarv/askRedirect?o=101761&gct=&gc=1&q=
    FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
    FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
    .

    **************************************************************************

    catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2009-02-24 00:18:28
    Windows 5.1.2600 Service Pack 2 NTFS

    scanning hidden processes ...

    scanning hidden autostart entries ...

    scanning hidden files ...


    c:\windows\TEMP\JET9EB0.tmp 0 bytes

    scan completed successfully
    hidden files: 1

    **************************************************************************
    .
    --------------------- LOCKED REGISTRY KEYS ---------------------

    [HKEY_USERS\S-1-5-21-1275210071-113007714-1957994488-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*i%Ø*g*]
    @Class="Shell"

    [HKEY_USERS\S-1-5-21-1275210071-113007714-1957994488-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*i%Ø*g*\OpenWithList]
    @Class="Shell"
    .
    ------------------------ Other Running Processes ------------------------
    .
    c:\windows\system32\ibmpmsvc.exe
    c:\program files\Avira\AntiVir PersonalEdition Classic\sched.exe
    c:\program files\Avira\AntiVir PersonalEdition Classic\avguard.exe
    c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe
    c:\program files\Analog Devices\SoundMAX\SMAgent.exe
    c:\windows\pchealth\helpctr\binaries\HelpSvc.exe
    c:\program files\Mozilla Firefox\firefox.exe
    c:\windows\system32\notepad.exe
    .
    **************************************************************************
    .
    Completion time: 2009-02-24 0:31:28 - machine was rebooted
    ComboFix-quarantined-files.txt 2009-02-23 23:31:04

    Pre-Run: 3 797 479 424 octets libres
    Post-Run: 7,957,790,720 octets libres

    341 --- E O F --- 2009-01-20 07:02:25

  • Relance MBAM, va dans Quarantaine et supprime tout.

  • Menu Démarrer > Exécuter > Tape combofix /u et valide.

  • Télécharge Toolbar S&D (Team IDN) sur ton Bureau.
  • Lance l'installation du programme en exécutant le fichier téléchargé.
  • Double-clique maintenant sur le raccourci de Toolbar S&D.
  • Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.
  • Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.
  • Poste le rapport généré. (C:\TB.txt)

    Bonjour,

    -----------\\ ToolBar S&D 1.2.8 XP/Vista

    Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
    X86-based PC ( Uniprocessor Free : Intel(R) Celeron(R) M processor 1.40GHz )
    BIOS : Phoenix FirstBIOS(tm) Notebook Pro Version 2.0 for IBM ThinkPad
    USER : rockmyroot ( Administrator )
    BOOT : Normal boot
    Antivirus : avast! antivirus 4.8.1229 [VPS 081003-0] 4.8.1229 (Activated)
    C:\ (Local Disk) - NTFS - Total:21 Go (Free:7 Go)
    D:\ (CD or DVD)
    F:\ (Local Disk) - NTFS - Total:16 Go (Free:16 Go)

    "C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
    Option : [1] ( 24/02/2009| 8:19 )

    -----------\\ Recherche de Fichiers / Dossiers ...

    C:\Program Files\AskBarDis
    C:\Program Files\AskBarDis\bar
    C:\Program Files\AskBarDis\PopSwatter
    C:\Program Files\AskBarDis\unins000.dat
    C:\Program Files\AskBarDis\unins000.exe
    C:\Program Files\AskBarDis\bar\bin
    C:\Program Files\AskBarDis\bar\Cache
    C:\Program Files\AskBarDis\bar\History
    C:\Program Files\AskBarDis\bar\Settings
    C:\Program Files\AskBarDis\bar\bin\askBar.dll
    C:\Program Files\AskBarDis\bar\bin\askPopStp.dll
    C:\Program Files\AskBarDis\bar\bin\psvince.dll
    C:\Program Files\AskBarDis\bar\Cache\00120CC8
    C:\Program Files\AskBarDis\bar\Cache\0012B47C.bin
    C:\Program Files\AskBarDis\bar\Cache\0012B870.bin
    C:\Program Files\AskBarDis\bar\Cache\0012BA1E.bin
    C:\Program Files\AskBarDis\bar\Cache\0012BC13.bin
    C:\Program Files\AskBarDis\bar\Cache\0012BEC6.bin
    C:\Program Files\AskBarDis\bar\Cache\0012C22D.bin
    C:\Program Files\AskBarDis\bar\Cache\0029A2F5
    C:\Program Files\AskBarDis\bar\Cache\0030F555
    C:\Program Files\AskBarDis\bar\Cache\00E7E44E
    C:\Program Files\AskBarDis\bar\Cache\00EB8BB6
    C:\Program Files\AskBarDis\bar\Cache\files.ini
    C:\Program Files\AskBarDis\bar\History\search
    C:\Program Files\AskBarDis\bar\Settings\config.dat
    C:\Program Files\AskBarDis\bar\Settings\config.dat.bak
    C:\Program Files\AskBarDis\bar\Settings\prevcfg.htm
    C:\Program Files\AskBarDis\bar\Settings\prevCfg2.htm
    C:\Program Files\AskBarDis\PopSwatter\History
    C:\Program Files\AskBarDis\PopSwatter\History\allowed
    C:\Program Files\AskBarDis\PopSwatter\History\notallow
    C:\Program Files\AskTBar
    C:\Program Files\AskTBar\bar
    C:\Program Files\AskTBar\PopSwatr
    C:\Program Files\AskTBar\SrchAstt
    C:\Program Files\AskTBar\bar\3.bin
    C:\Program Files\AskTBar\bar\Cache
    C:\Program Files\AskTBar\bar\History
    C:\Program Files\AskTBar\bar\Settings
    C:\Program Files\AskTBar\bar\3.bin\A5POPSWT.DLL
    C:\Program Files\AskTBar\bar\3.bin\ASKTBAR.DLL
    C:\Program Files\AskTBar\bar\Cache\00EF1939
    C:\Program Files\AskTBar\bar\Cache\00EF2FE9
    C:\Program Files\AskTBar\bar\Cache\00EF94CD.bin
    C:\Program Files\AskTBar\bar\Cache\00EFB603.bin
    C:\Program Files\AskTBar\bar\Cache\00F02897.bin
    C:\Program Files\AskTBar\bar\Cache\00F03056.bin
    C:\Program Files\AskTBar\bar\Cache\00F04092.bin
    C:\Program Files\AskTBar\bar\Cache\00F043EF.bin
    C:\Program Files\AskTBar\bar\Cache\00F04B22.bin
    C:\Program Files\AskTBar\bar\Cache\files.ini
    C:\Program Files\AskTBar\bar\History\search2
    C:\Program Files\AskTBar\bar\Settings\prevcfg2.htm
    C:\Program Files\AskTBar\PopSwatr\History
    C:\Program Files\AskTBar\PopSwatr\History\notallow
    C:\Program Files\AskTBar\SrchAstt\3.bin
    C:\Program Files\AskTBar\SrchAstt\3.bin\A5SRCHAS.DLL
    C:\DOCUME~1\ROCKMY~1.ORD\Cookies\rockmyroot@need2find[1].txt
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\---Yahoo.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\01net.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\1
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\1px_dark.gif
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\1px_green.gif
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\1px_white.gif
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\a.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\amazon.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\an.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\arrowB.gif
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\arrowT.gif
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\arrow_down.gif
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\arrow_red.gif
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\arrow_red2.gif
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\arrow_up.gif
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\autofill.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\avstate.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\b.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\background2.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\bgmeteo_results.gif
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\bg_pub.gif
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\bg_ttl.gif
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\bn.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\bottom.png
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\bottom_left.png
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\bottom_right.png
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\btn_close.gif
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\btn_minus.gif
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\btn_moreforecast.gif
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\c.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\canalblog.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\cn.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\COMBOSEARCH.acs
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\d.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\dictionary2.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\dn.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\downfile
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Download
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\DownloadCOM.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\dropdown.css
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\ErrorLog.txt
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\ErrorPageTemplate.css
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\f.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\flag_argentine.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\flag_australia.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\flag_brazil.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\flag_canada.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\flag_china.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\flag_france.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\flag_germany.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\flag_greece.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\flag_hongkong.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\flag_india.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\flag_indonesia.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\flag_italy.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\flag_japan.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\flag_korea.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\flag_mexico.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\flag_netherlands.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\flag_spain.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\flag_sweeden.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\flag_taiwan.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\flag_uk.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\flag_usa.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\fn.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\g.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\gaming.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\gn.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\gograph.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\graphred0.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\graphred0_5.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\graphred1.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\graphred1_5.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\graphred2.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\graphred2_5.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\graphred3.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\graphred3_5.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\graphred4.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\graphred4_5.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\graphred5.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\h.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\help.gif
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\hideremove.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\highlight.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\hn.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\h_aquarius.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\h_aries.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\h_cancer.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\h_capricorn.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\h_gemini.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\h_leo.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\h_libra.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\h_pisces.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\h_sagittarius.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\h_scorpio.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\h_taurus.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\h_virgo.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\i.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\icotemp_placeholder.gif
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\IEtab1_7d.zip
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\in.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\ipsearch.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\j.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\jn.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\k.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\kn.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\l.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\left.png
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\ln.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\loading.gif
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\login.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\logo.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\n.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\New York_NY_weather.txt
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\new02.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\NewCfg
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\news.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\news.html
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\nn.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\o.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\on.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\p.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt100549081
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt100961044
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt10149003
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt104956168
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt109748199
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt109748289
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt10999085
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt110014402
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt11007477
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt111152158
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt113629110
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt114763721
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt115163866
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt117185153
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt117185353
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt118773817
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt120850433
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt120850483
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt122381845
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt122381855
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt125401718
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt125727065
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt12598095
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt126307200
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt126307410
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt126915284
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt12737255
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt127801198
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt12783191
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt12783241
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt12799054
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt129606754
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt131571049
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt135018846
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt135846797
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt138781046
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt142197038
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt14585172
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt14590129
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt14625430
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt14790157
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt147951172
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt1519184
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt153357766
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt15516060
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt160443145
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt160567143
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt161558258
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt163361100
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt16433199
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt16439879
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt16440169
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt17046050
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt17387962
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt179982511
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt18097072
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt18128076
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt18141085
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt18650808
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt188028130
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt18851006
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt1887013
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt1955011
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt1970513
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt19885103
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt199226953
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt20013297
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt2009058
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt204786627
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt2063076
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt206409240
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt208428594
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt21010521
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt21848135
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt21855105
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt2223106
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt22428560
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt22820113
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt2296542
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt22987364
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt23558395
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt23558545
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt241006028
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt25002081
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt25194057
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt25291056
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt261320048
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt262646555
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt269133022
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt27280266
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt28378576
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt284743239
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt287341044
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt29166509
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt291951724
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt29212455
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt29657475
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt29925160
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt30925328
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt31293037
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt32220080
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt32654254
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt329343871
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt332955284
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt332955454
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt33397342
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt33528160
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt340173022
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt34320720
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt34350162
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt34391101
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt34528689
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt34606110
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt351010045
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt36115090
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt3700741
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt37409802
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt37955136
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt38630217
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt38631088
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt38981472
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt39707125
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt39838094
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt41014085
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt4156116
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt42100066
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt42775938
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt42817097
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt4293223
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt43327121
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt43509022
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt43509263
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt44535248
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt44535258
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt4463187
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt454117416
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt45540063
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt46384136
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt46420849
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt47265043
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt47396132
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt47683254
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt4793702
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt48132020
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt48132220
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt48184075
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt49306078
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt49985084
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt50792295
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt5169343
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt52954374
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt53113052
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt5588045
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt56513161
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt56709113
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt5688309
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt57983105
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt57983495
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt57983596
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt57983746
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt57983806
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt5825116
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt5829041
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt5900073
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt60656108
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt61427768
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt6286008
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt63420784
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt63420944
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt65037188
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt6782192
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt68578140
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt68849229
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt712284
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt72255457
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt7397046
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt7400631
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt7461188
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt75069193
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt75070766
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt75203136
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt7630642
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt7665252
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt77585031
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt7953806
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt7955018
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt7955048
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt7955208
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt7955309
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt7955329
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt7955339
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt7955349
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt81079055
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt81806271
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt83426000
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt83880083
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt84701003
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt86518987
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt87672125
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt88335259
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt88381876
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt91274175
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt91942806
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt93748092
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt9554168
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt9807021
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt98933739
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt98933869
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt9941815
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Paris_FR_weather.txt99620516
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\pestscanimg.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\pixsy.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\pn.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\popup_off.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\popup_on.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\popup_ona.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\p_yahoo.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\p_yahoo_fr.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\q.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\qn.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\r.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\relatedlinks.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\report.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\right.png
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\rn.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\rss.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\rss.xsl
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\rss1.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\rsslib.js
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\rssmenu1_7a.zip
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\s.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\search.gif
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\search_fr.gif
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\security.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt100022034
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt100032579
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt102203100
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt102502961
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt103186374
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt10329462
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt106101105
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt106134273
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt10677423
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt10677593
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt11053343
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt11079731
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt11196810
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt112663771
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt11274882
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt11558199
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt116594293
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt11797794
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt1183181
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt11861856
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt119072377
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt119546709
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt121238191
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt124282378
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt124833410
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt124877734
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt124922228
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt13023947
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt133468717
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt1341378
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt1341529
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt135846667
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt13657328
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt13660002
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt136626328
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt137755552
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt138195394
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt13866679
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt138928098
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt138984469
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt141487798
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt14161583
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt14305460
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt143287436
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt143964860
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt14552485
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt1456654
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt146171653
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt146414212
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt14655713
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt14750900
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt14751171
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt14751321
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt14751671
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt14785790
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt14786181
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt1478796
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt14800532
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt14950788
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt1501909
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt1501939
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt15063540
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt15300490
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt15344634
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt15360016
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt15382819
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt15421695
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt15456505
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt15459779
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt15496903
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt15638496
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt15639157
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt15640960
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt15642602
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt157022326
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt15793039
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt15799758
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt162884
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt16295381
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt167811630
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt168712
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt16958955
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt17472534
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt17741561
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt17997108
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt180124945
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt183493
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt1837482
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt186488
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt18650738
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt18704044
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt188313991
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt18937480
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt18987422
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt19011557
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt19157727
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt19262978
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt19437709
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt197163
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt199440640
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt199446689
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt199454740
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt200963700
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt201920
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt202000
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt202152259
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt202153391
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt2027224
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt20401235
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt208499957
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt210702
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt21089845
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt21105227
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt21118316
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt216510786
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt21962109
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt221186859
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt221327171
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt222449
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt22371708
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt22501225
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt22501485
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt22501695
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt22529085
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt2258517
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt228108
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt228238
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt23140654
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt236690
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt2371079
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt23955025
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt2397918
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt24208489
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt242779
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt24537312
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt24537412
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt24539515
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt251135553
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt2602712
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt26109373
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt26137393
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt26472144
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt26912438
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt27028004
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt2732549
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt2816720
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt2825773
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt28320382
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt2982849
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt301403
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt304307
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt30726932
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt31059801
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt3179832
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt3199941
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt323124
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt3264504
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt33124620
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt3333393
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt33497436
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt33622696
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt33750710
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt33751081
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt338076037
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt338076227
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt33962976
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt34512586
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt34622664
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt3477199
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt3569743
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt35932067
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt359486
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt36663899
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt37870785
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt38157227
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt38581977
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt38586374
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt387567
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt39012026
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt39298568
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt39945939
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt39946770
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt40473537
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt40917886
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt41135409
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt41324992
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt4154664
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt41805042
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt41806374
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt41809198
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt419589898
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt422307
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt43070111
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt43072555
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt43587435
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt43591220
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt43602697
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt43605461
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt43622686
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt4421437
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt4421838
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt44904889
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt452571924
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt4532677
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt45495378
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt46217387
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt47193831
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt47285292
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt47509304
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt47532858
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt47564273
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt47608767
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt47879537
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt48072684
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt49224240
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt5111009
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt5141102
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt51668265
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt52035723
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt5279551
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt5364123
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt5364393
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt5364483
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt551412
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt551462
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt551472
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt5595505
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt5619350
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt56846931
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt57240307
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt58815692
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt60989838
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt6102875
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt61335986
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt6319476
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt6354276
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt6474009
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt653179
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt6556107
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt674499
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt67511346
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt6782022
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt68226444
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt68226484
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt6831102
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt686967
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt687198
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt689231
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt6906020
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt6913801
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt711973
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt7364810
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt7375765
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt7476740
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt75156128
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt76579355
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt773822
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt7914410
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt7929862
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt81814603
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt8192530
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt83842429
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt8515744
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt8577433
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt8580067
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt8590282
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt9025928
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt9026990
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt9077703
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt90887329
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt9138089
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt9138350
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt915205
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt92790125
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt9393396
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt9508993
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sinfo.txt97644905
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\siteinfo.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\slider.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\sn.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\spacer.gif
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\stars-red1.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\stars-red2.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\stars-red3.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\stars-red4.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\stars-red5.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\storage.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\t.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\tabdataV3.js
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\tablib.js
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\tabwelcome_en.html
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\tabwelcome_fr.html
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\tab_icon.png
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\technorati.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\thes_search.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\tn.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\tools.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\top.png
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\top_left.png
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\top_right.png
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\translate.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\u.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\un.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\userbadsites.txt
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\utf8.js
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\v.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\vmlib.js
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\vmntoolbartb1501.cfg
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\vmntoolbartb1501.cfg410149
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\vn.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\w.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\web.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\web_fr.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\wikipedia.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\wn.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\x.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\xp_close_small.gif
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\yahoo.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\yahoo_search.gif
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\YouTube.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\z.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\zn.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\zoom.bmp
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\downfile\searchdataV3.php116656613
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\downfile\searchdataV3.php120396851
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\downfile\searchdataV3.php135846797
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\downfile\searchdataV3.php135846807
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\downfile\searchdataV3.php195631
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\downfile\searchdataV3.php46078307
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\downfile\searchdataV3.php4793702
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\downfile\searchdataV3.php49509150
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\downfile\searchdataV3.php6301991
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\downfile\searchdataV3.php992036
    C:\DOCUME~1\ROCKMY~1.ORD\APPLIC~1\VMNToolbar\Download\games.html
    C:\Program Files\VMNToolbar
    C:\Program Files\VMNToolbar\install.ico
    C:\Program Files\VMNToolbar\tbuninstall.exe
    C:\Program Files\VMNToolbar\toolbar.ini
    C:\Program Files\VMNToolbar\uninstall.exe
    C:\Program Files\VMNToolbar\vmntoolbar.dll
    C:\Program Files\VMNToolbar\vmntoolbar.dll.old47

    -----------\\ Extensions

    (All Users.WINDOWS) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar


    -----------\\ [..\Internet Explorer\Main]

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
    "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iese..."
    "Start Page"="http://www.google.com/"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
    "Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
    "Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
    "Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
    "Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"


    --------------------\\ Recherche d'autres infections


    Aucune autre infection trouvée !


    1 - "C:\ToolBar SD\TB_1.txt" - 24/02/2009| 8:20 - Option : [1]

    -----------\\ Fin du rapport a 8:20:42,21

    Re, scan antivir tout à l'air ok non?



    Avira AntiVir Personal
    Date de création du fichier de rapport : mardi 24 février 2009 12:00

    La recherche porte sur 1262573 souches de virus.

    Détenteur de la licence :Avira AntiVir PersonalEdition Classic
    Numéro de série : 0000149996-ADJIE-0001
    Plateforme : Windows XP
    Version de Windows :( Service Pack 2) [5.1.2600]
    Mode Boot : Démarré normalement
    Identifiant : SYSTEM
    Nom de l'ordinateur :o RDINATEUR

    Informations de version :
    BUILD.DAT : 8.2.0.52 16931 Bytes 02/12/2008 14:55:00
    AVSCAN.EXE : 8.1.4.10 315649 Bytes 18/11/2008 08:21:00
    AVSCAN.DLL : 8.1.4.1 49921 Bytes 21/07/2008 13:44:27
    LUKE.DLL : 8.1.4.5 164097 Bytes 12/06/2008 12:44:16
    LUKERES.DLL : 8.1.4.0 13057 Bytes 04/07/2008 07:30:27
    ANTIVIR0.VDF : 7.1.0.0 15603712 Bytes 27/10/2008 11:30:36
    ANTIVIR1.VDF : 7.1.2.12 3336192 Bytes 11/02/2009 20:02:13
    ANTIVIR2.VDF : 7.1.2.55 248832 Bytes 20/02/2009 20:02:01
    ANTIVIR3.VDF : 7.1.2.68 65536 Bytes 23/02/2009 20:55:16
    Version du moteur: 8.2.0.88
    AEVDF.DLL : 8.1.1.0 106868 Bytes 31/01/2009 13:53:08
    AESCRIPT.DLL : 8.1.1.52 348538 Bytes 23/02/2009 20:55:17
    AESCN.DLL : 8.1.1.7 127347 Bytes 13/02/2009 20:00:49
    AERDL.DLL : 8.1.1.3 438645 Bytes 04/11/2008 13:58:38
    AEPACK.DLL : 8.1.3.8 397684 Bytes 05/02/2009 16:19:53
    AEOFFICE.DLL : 8.1.0.33 196987 Bytes 19/12/2008 20:50:49
    AEHEUR.DLL : 8.1.0.97 1610103 Bytes 20/02/2009 20:02:11
    AEHELP.DLL : 8.1.2.0 119159 Bytes 19/12/2008 20:50:46
    AEGEN.DLL : 8.1.1.21 336244 Bytes 23/02/2009 20:55:17
    AEEMU.DLL : 8.1.0.9 393588 Bytes 14/10/2008 10:05:56
    AECORE.DLL : 8.1.6.6 176501 Bytes 18/02/2009 20:00:56
    AEBB.DLL : 8.1.0.3 53618 Bytes 14/10/2008 10:05:56
    AVWINLL.DLL : 1.0.0.12 15105 Bytes 09/07/2008 08:40:02
    AVPREF.DLL : 8.0.2.0 38657 Bytes 16/05/2008 09:27:58
    AVREP.DLL : 8.0.0.2 98344 Bytes 31/07/2008 12:02:15
    AVREG.DLL : 8.0.0.1 33537 Bytes 09/05/2008 11:26:37
    AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:19
    AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 12/06/2008 12:27:46
    SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:02
    SMTPLIB.DLL : 1.2.0.23 28929 Bytes 12/06/2008 12:49:36
    NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:07
    RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 04/07/2008 07:23:16
    RCTEXT.DLL : 8.0.52.1 86273 Bytes 17/07/2008 10:08:43

    Configuration pour la recherche actuelle :
    Nom de la tâche..................: Disques durs locaux
    Fichier de configuration.........: C:\Program Files\Avira\AntiVir PersonalEdition Classic\alldiscs.avp
    Documentation....................: bas
    Action principale................: interactif
    Action secondaire................: ignorer
    Recherche sur les secteurs d'amorçage maître: marche
    Recherche sur les secteurs d'amorçage: marche
    Secteurs d'amorçage..............: C:, F:,
    Recherche dans les programmes actifs: marche
    Recherche en cours sur l'enregistrement: marche
    Recherche de Rootkits............: arrêt
    Fichier mode de recherche........: Sélection de fichiers intelligente
    Recherche sur les archives.......: marche
    Limiter la profondeur de récursivité: 20
    Archive Smart Extensions.........: marche
    Heuristique de macrovirus........: marche
    Heuristique fichier..............: moyen

    Début de la recherche : mardi 24 février 2009 12:00

    La recherche sur les processus démarrés commence :
    Processus de recherche 'avscan.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'wuauclt.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'alg.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'SMAgent.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'SeaPort.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'GoogleUpdaterService.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'avguard.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'ctfmon.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'avgnt.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'hkcmd.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'igfxtray.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'SMax4PNP.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'PV92Tray.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'tp4mon.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'explorer.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'sched.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'spoolsv.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'ibmpmsvc.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'lsass.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'services.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'winlogon.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'csrss.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'smss.exe' - '1' module(s) sont contrôlés
    '31' processus ont été contrôlés avec '31' modules

    La recherche sur les secteurs d'amorçage maître commence :
    Secteur d'amorçage maître HD0
    [INFO] Aucun virus trouvé !

    La recherche sur les secteurs d'amorçage commence :
    Secteur d'amorçage 'C:\'
    [INFO] Aucun virus trouvé !
    Secteur d'amorçage 'F:\'
    [INFO] Aucun virus trouvé !

    La recherche sur les renvois aux fichiers exécutables (registre) commence.
    Le registre a été contrôlé ( '51' fichiers).


    La recherche sur les fichiers sélectionnés commence :

    Recherche débutant dans 'C:\'
    C:\hiberfil.sys
    [AVERTISSEMENT] Impossible d'ouvrir le fichier !
    C:\pagefile.sys
    [AVERTISSEMENT] Impossible d'ouvrir le fichier !
    C:\WINDOWS\system32\drivers\sptd.sys
    [AVERTISSEMENT] Impossible d'ouvrir le fichier !
    Recherche débutant dans 'F:\' <Nouveau nom>


    Fin de la recherche : mardi 24 février 2009 12:24
    Temps nécessaire: 24:04 Minute(s)

    La recherche a été effectuée intégralement

    5554 Les répertoires ont été contrôlés
    121683 Des fichiers ont été contrôlés
    0 Des virus ou programmes indésirables ont été trouvés
    0 Des fichiers ont été classés comme suspects
    0 Des fichiers ont été supprimés
    0 Des virus ou programmes indésirables ont été réparés
    0 Les fichiers ont été déplacés dans la quarantaine
    0 Les fichiers ont été renommés
    3 Impossible de contrôler des fichiers
    121680 Fichiers non infectés
    1377 Les archives ont été contrôlées
    3 Avertissements
    0 Consignes

    Bonsoir voici le rapport :

    -----------\\ ToolBar S&D 1.2.8 XP/Vista

    Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
    X86-based PC ( Uniprocessor Free : Intel(R) Celeron(R) M processor 1.40GHz )
    BIOS : Phoenix FirstBIOS(tm) Notebook Pro Version 2.0 for IBM ThinkPad
    USER : rockmyroot ( Administrator )
    BOOT : Normal boot
    Antivirus : avast! antivirus 4.8.1229 [VPS 081003-0] 4.8.1229 (Activated)
    C:\ (Local Disk) - NTFS - Total:21 Go (Free:7 Go)
    D:\ (CD or DVD)
    F:\ (Local Disk) - NTFS - Total:16 Go (Free:16 Go)

    "C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
    Option : [2] ( 24/02/2009|22:38 )

    -----------\\ SUPPRESSION

    Supprime! - C:\Program Files\AskBarDis\bar
    Supprime! - C:\Program Files\AskBarDis\PopSwatter
    Supprime! - C:\Program Files\AskBarDis\unins000.dat
    Supprime! - C:\Program Files\AskBarDis\unins000.exe
    Supprime! - C:\Program Files\AskTBar\bar
    Supprime! - C:\Program Files\AskTBar\PopSwatr
    Supprime! - C:\Program Files\AskTBar\SrchAstt
    Supprime! - C:\DOCUME~1\ROCKMY~1.ORD\Cookies\rockmyroot@need2find[1].txt
    Supprime! - C:\Program Files\AskBarDis
    Supprime! - C:\Program Files\AskTBar

    -----------\\ Recherche de Fichiers / Dossiers ...


    -----------\\ Extensions

    (All Users.WINDOWS) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar


    -----------\\ [..\Internet Explorer\Main]

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
    "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iese..."
    "Start Page"="http://www.google.com/"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
    "Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
    "Start Page"="http://www.msn.com/"
    "Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
    "Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"


    --------------------\\ Recherche d'autres infections


    Aucune autre infection trouvée !


    1 - "C:\ToolBar SD\TB_1.txt" - 24/02/2009| 8:20 - Option : [1]
    2 - "C:\ToolBar SD\TB_2.txt" - 24/02/2009|22:40 - Option : [2]

    -----------\\ Fin du rapport a 22:40:54,02


    PS: par contre je n'arrive pas à supprimer nero dans panneau de configuration j'en ai plusieurs

  • Supprime les traces de Nero avec ceci.
  • Supprime les traces d'Avast avec ceci

  • Télécharge Random's System Information Tool (RSIT) (par random/random) sur ton Bureau.
  • Double-clique sur RSIT.exe afin de lancer le programme.
  • Clique sur Continue à l'écran Disclaimer.
  • Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.
  • Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront. Poste le contenu de log.txt (c'est celui qui apparaît à l'écran) ainsi que de info.txt (que tu verras dans la barre des tâches).

    Note : les rapports sont sauvegardés dans le dossier C:\rsit\.

    Logfile of random's system information tool 1.05 (written by random/random)
    Run by rockmyroot at 2009-02-24 23:12:39
    Microsoft Windows XP Professionnel Service Pack 2
    System drive C: has 8 GB (36%) free of 22 GB
    Total RAM: 246 MB (16% free)

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 23:13:05, on 24/02/2009
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16791)
    Boot mode: Normal

    Running processes:
    C:\windows\System32\smss.exe
    C:\windows\system32\winlogon.exe
    C:\windows\system32\services.exe
    C:\windows\system32\lsass.exe
    C:\windows\system32\ibmpmsvc.exe
    C:\windows\system32\svchost.exe
    C:\windows\System32\svchost.exe
    C:\windows\system32\svchost.exe
    C:\windows\system32\spoolsv.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
    C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    C:\windows\Explorer.EXE
    C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
    C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
    C:\windows\system32\svchost.exe
    C:\windows\system32\tp4mon.exe
    C:\windows\system32\PV92Tray.exe
    C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
    C:\WINDOWS\system32\igfxtray.exe
    C:\WINDOWS\system32\hkcmd.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
    C:\windows\system32\ctfmon.exe
    C:\windows\System32\svchost.exe
    C:\windows\system32\wuauclt.exe
    C:\windows\system32\DllHost.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Documents and Settings\rockmyroot.ORDINATEUR\Bureau\RSIT.exe
    C:\Program Files\trend micro\rockmyroot.exe

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    R3 - Default URLSearchHook is missing
    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
    O2 - BHO: (no name) - {5D9B1F28-1AF0-4C6A-BD10-D985166DD03D} - C:\windows\system32\atmpvcn.dll (file missing)
    O2 - BHO: (no name) - {6bcb43af-a20f-4996-8860-48f511a222db} - (no file)
    O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (file missing)
    O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
    O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
    O4 - HKLM\..\Run: [TrackPointSrv] tp4mon.exe
    O4 - HKLM\..\Run: [PV92TRAY] PV92Tray.exe
    O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
    O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
    O4 - HKCU\..\Run: [ctfmon.exe] C:\windows\system32\ctfmon.exe
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\S-1-5-18\..\RunOnce: [LSD_III] %systemroot%\LSD\end.cmd (User 'SYSTEM')
    O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O4 - HKUS\.DEFAULT\..\RunOnce: [LSD_III] %systemroot%\LSD\end.cmd (User 'Default user')
    O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm
    O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
    O9 - Extra button: Trace - {04849C74-016E-4a43-8AA5-1F01DE57F4A1} - C:\Program Files\VisualRoute\vrie.dll (file missing)
    O9 - Extra 'Tools' menuitem: VisualRoute Trace - {04849C74-016E-4a43-8AA5-1F01DE57F4A1} - C:\Program Files\VisualRoute\vrie.dll (file missing)
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
    O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/Install...
    O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986....
    O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - http://fichiers.touslesdrivers.com/fichiers/hardwaredet...
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPACl...
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/fl...
    O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
    O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
    O23 - Service: ASP.NET State Service (aspnet_state) - Unknown owner - C:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)
    O23 - Service: DF5Serv - Unknown owner - C:\Program Files\Faronics\Deep Freeze\Install C-0\DF5Serv.exe (file missing)
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: IBM PM Service (IBMPMSVC) - Unknown owner - C:\windows\system32\ibmpmsvc.exe
    O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

    --
    End of file - 7186 bytes

    ======Registry dump======

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5D9B1F28-1AF0-4C6A-BD10-D985166DD03D}]
    C:\windows\system32\atmpvcn.dll []

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6bcb43af-a20f-4996-8860-48f511a222db}]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
    Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll [2008-12-04 92504]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
    Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
    Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll [2009-01-10 657904]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
    Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll []

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
    Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2008-12-08 1067352]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
    {21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2008-12-08 1067352]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    "TrackPointSrv"=C:\windows\system32\tp4mon.exe [2004-08-19 82432]
    "PV92TRAY"=C:\windows\system32\PV92Tray.exe [2003-10-30 323584]
    "SoundMAXPnP"=C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe [2004-10-14 1388544]
    "IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2004-02-10 155648]
    "HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2004-02-10 118784]
    "avgnt"=C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe [2008-06-12 266497]

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    "ctfmon.exe"=C:\windows\system32\ctfmon.exe [2004-08-19 15360]
    "swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-01-10 39408]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
    C:\windows\system32\igfxsrvc.dll [2004-02-10 339968]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
    C:\windows\system32\WgaLogon.dll [2008-09-05 267304]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
    WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\windows\system32\WPDShServiceObj.dll [2006-10-18 133632]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
    "authentication packages"=msv1_0
    nwprovau

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
    "dontdisplaylastusername"=0
    "legalnoticecaption"=
    "legalnoticetext"=
    "shutdownwithoutlogon"=1
    "undockwithoutlogon"=1

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
    "NoDriveTypeAutoRun"=323
    "ForceClassicControlPanel"=1
    "NoSMBalloonTip"=0
    "NoDriveAutoRun"=67108863
    "NoDrives"=0

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
    "NoDriveTypeAutoRun"=
    "NoDriveAutoRun"=
    "NoDrives"=

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
    "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
    "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
    "C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
    "C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
    "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
    "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
    "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
    "C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
    "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
    "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{243ff9a0-f0f2-11dc-a59d-000ae4394baf}]
    shell\AutoRun\command - C:\windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL antihost.exe


    ======List of files/folders created in the last 1 months======

    2009-02-24 23:12:41 ----D---- C:\Program Files\trend micro
    2009-02-24 23:12:39 ----D---- C:\rsit
    2009-02-24 08:19:04 ----A---- C:\TB.txt
    2009-02-24 08:18:11 ----D---- C:\ToolBar SD
    2009-02-24 08:15:18 ----D---- C:\ComboFix
    2009-02-24 00:31:52 ----D---- C:\windows\temp
    2009-02-24 00:31:36 ----A---- C:\windows\SchedLgU.Txt
    2009-02-24 00:31:36 ----A---- C:\ComboFix.txt
    2009-02-24 00:10:14 ----D---- C:\windows\ERDNT
    2009-02-23 23:54:51 ----D---- C:\Program Files\Mozilla Firefox
    2009-02-23 23:09:54 ----D---- C:\Documents and Settings\rockmyroot.ORDINATEUR\Application Data\Malwarebytes
    2009-02-23 23:09:37 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
    2009-02-23 23:09:37 ----D---- C:\Documents and Settings\All Users.WINDOWS\Application Data\Malwarebytes
    2009-02-19 21:18:17 ----D---- C:\Program Files\Common Files
    2009-02-15 23:00:20 ----D---- C:\Documents and Settings\rockmyroot.ORDINATEUR\Application Data\vlc
    2009-02-12 17:07:54 ----HDC---- C:\windows\$NtUninstallKB960715$
    2009-02-11 15:53:09 ----A---- C:\windows\system32\ptpusb.dll
    2009-02-11 15:53:02 ----A---- C:\windows\system32\ptpusd.dll
    2009-02-11 14:42:12 ----D---- C:\Documents and Settings\rockmyroot.ORDINATEUR\Application Data\agi
    2009-02-11 14:42:10 ----D---- C:\Documents and Settings\All Users.WINDOWS\Application Data\agi
    2009-02-10 15:21:54 ----D---- C:\MicroGaming

    ======List of files/folders modified in the last 1 months======

    2009-02-24 23:12:41 ----D---- C:\Program Files
    2009-02-24 23:11:39 ----D---- C:\Program Files\Alwil Software
    2009-02-24 23:09:44 ----D---- C:\WINDOWS
    2009-02-24 22:55:16 ----SHD---- C:\windows\Installer
    2009-02-24 22:55:16 ----SHD---- C:\Config.Msi
    2009-02-24 22:48:00 ----D---- C:\windows\system32\CatRoot2
    2009-02-24 20:58:10 ----D---- C:\windows\system32\ias
    2009-02-24 20:57:00 ----SHD---- C:\System Volume Information
    2009-02-24 20:57:00 ----D---- C:\windows\system32\Restore
    2009-02-24 08:15:33 ----D---- C:\windows\system32
    2009-02-24 08:02:50 ----D---- C:\windows\system32\CatRoot
    2009-02-24 08:02:12 ----D---- C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft Help
    2009-02-24 08:01:13 ----A---- C:\windows\imsins.BAK
    2009-02-24 08:01:12 ----D---- C:\windows\inf
    2009-02-24 00:32:18 ----D---- C:\windows\system32\drivers
    2009-02-24 00:19:17 ----A---- C:\windows\system.ini
    2009-02-24 00:16:08 ----D---- C:\windows\system32\config
    2009-02-24 00:13:41 ----D---- C:\windows\AppPatch
    2009-02-24 00:13:40 ----D---- C:\Program Files\Fichiers communs
    2009-02-23 23:55:16 ----D---- C:\Documents and Settings\rockmyroot.ORDINATEUR\Application Data\Mozilla
    2009-02-23 23:39:27 ----D---- C:\windows\Network Diagnostic
    2009-02-23 22:08:23 ----D---- C:\windows\system32\wbem
    2009-02-23 22:08:21 ----D---- C:\windows\Registration
    2009-02-21 23:27:51 ----D---- C:\Program Files\Windows Live
    2009-02-21 23:26:08 ----D---- C:\windows\WinSxS
    2009-02-21 23:23:43 ----D---- C:\windows\system32\DirectX
    2009-02-16 18:26:05 ----A---- C:\windows\system32\yyxhvvamhytq.exe
    2009-02-12 17:21:16 ----D---- C:\Program Files\Internet Explorer
    2009-02-12 17:07:48 ----HD---- C:\windows\$hf_mig$
    2009-02-12 17:06:57 ----D---- C:\windows\system32\DllCache
    2009-02-12 17:06:30 ----D---- C:\windows\ie7updates
    2009-02-11 14:41:40 ----A---- C:\windows\system32\pywintypes25.dll
    2009-02-11 14:41:40 ----A---- C:\windows\system32\pythoncom25.dll
    2009-02-11 14:41:40 ----A---- C:\windows\system32\msvcr71.dll
    2009-02-11 14:41:39 ----A---- C:\windows\system32\python25.dll
    2009-02-11 14:41:28 ----D---- C:\Program Files\AGI
    2009-02-11 14:40:57 ----SD---- C:\windows\Downloaded Program Files
    2009-02-09 20:20:55 ----D---- C:\Program Files\Abbyy FineReader 6.0 Sprint
    2009-02-09 20:17:10 ----D---- C:\Program Files\DNA
    2009-02-06 02:20:56 ----D---- C:\Program Files\Ahead
    2009-02-04 01:33:19 ----SD---- C:\Documents and Settings\rockmyroot.ORDINATEUR\Application Data\Microsoft
    2009-02-04 00:21:12 ----A---- C:\windows\system32\MRT.exe

    ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgio.sys []
    R1 avipbb;avipbb; C:\windows\system32\DRIVERS\avipbb.sys [2008-10-30 75072]
    R1 bbcap;bbcap; C:\windows\system32\DRIVERS\bbcap.sys [2008-01-26 2944]
    R1 intelppm;Pilote de processeur Intel; C:\windows\system32\DRIVERS\intelppm.sys [2004-08-19 40320]
    R1 ssmdrv;ssmdrv; C:\windows\system32\DRIVERS\ssmdrv.sys [2007-11-08 21248]
    R2 mdmxsdk;mdmxsdk; C:\windows\system32\DRIVERS\mdmxsdk.sys [2006-06-18 12672]
    R2 NwlnkIpx;Protocole de transport compatible NWLink IPX/SPX/NetBIOS; C:\windows\system32\DRIVERS\nwlnkipx.sys [2004-08-04 88448]
    R2 NwlnkNb;NetBIOS NWLink; C:\windows\system32\DRIVERS\nwlnknb.sys [2001-08-28 63232]
    R2 NwlnkSpx;Protocole NWLink SPX/SPXII; C:\windows\system32\DRIVERS\nwlnkspx.sys [2001-08-28 55936]
    R3 aeaudio;aeaudio; C:\windows\system32\drivers\aeaudio.sys [2005-03-04 127872]
    R3 avgntflt;avgntflt; \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgntflt.sys []
    R3 CmBatt;Pilote d'adaptateur secteur Microsoft; C:\windows\system32\DRIVERS\CmBatt.sys [2004-08-04 14080]
    R3 E100B;Intel(R) PRO Network Connection Driver; C:\windows\system32\DRIVERS\e100b325.sys [2007-03-14 165760]
    R3 HSF_DPV;HSF_DPV; C:\windows\system32\DRIVERS\HSF_DPV.sys [2006-08-28 990592]
    R3 HSFHWICH;HSFHWICH; C:\windows\system32\DRIVERS\HSFHWICH.sys [2006-08-28 247808]
    R3 ialm;ialm; C:\windows\system32\DRIVERS\ialmnt5.sys [2004-02-10 681469]
    R3 IBMPMDRV;IBMPMDRV; C:\windows\system32\DRIVERS\ibmpmdrv.sys [2003-07-03 11344]
    R3 MODEMCSA;Périphérique de filtrage de flux Unimodem; C:\windows\system32\drivers\MODEMCSA.sys [2001-08-17 16128]
    R3 NWRDR;NetWare Rdr; C:\windows\system32\DRIVERS\nwrdr.sys [2007-07-16 163456]
    R3 smwdm;smwdm; C:\windows\system32\drivers\smwdm.sys [2005-03-28 220992]
    R3 TwoTrack;Pilote de filtre de TrackPoint IBM PS/2; C:\windows\system32\DRIVERS\TwoTrack.sys [2001-08-17 11520]
    R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\windows\system32\DRIVERS\usbehci.sys [2007-07-16 30208]
    R3 usbhub;Pilote de concentrateur standard USB Microsoft; C:\windows\system32\DRIVERS\usbhub.sys [2006-10-23 59264]
    R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\windows\system32\DRIVERS\usbuhci.sys [2006-10-23 20608]
    R3 winachsf;winachsf; C:\windows\system32\DRIVERS\HSF_CNXT.sys [2006-08-28 728576]
    S2 zntport;NTPort Library Driver; \??\C:\WINDOWS\system32\zntport.sys []
    S3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\windows\system32\drivers\ALCXWDM.SYS [2007-03-08 4027840]
    S3 ax90j8ud;ax90j8ud; C:\windows\system32\drivers\ax90j8ud.sys []
    S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
    S3 CCDECODE;Décodeur sous-titre fermé; C:\windows\system32\DRIVERS\CCDECODE.sys [2004-08-03 17024]
    S3 HidUsb;Pilote de classe HID Microsoft; C:\windows\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
    S3 HSF_DP;HSF_DP; C:\windows\system32\DRIVERS\HSF_DP.sys []
    S3 mouhid;Pilote HID de souris; C:\windows\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
    S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\windows\system32\drivers\MSTEE.sys [2004-08-03 5504]
    S3 NABTSFEC;Codec NABTS/FEC VBI; C:\windows\system32\DRIVERS\NABTSFEC.sys [2004-08-03 85376]
    S3 NdisIP;Connection TV/vidéo Microsoft; C:\windows\system32\DRIVERS\NdisIP.sys [2004-08-03 10880]
    S3 nm;Pilote du Moniteur réseau; C:\windows\system32\DRIVERS\NMnt.sys [2004-08-04 40320]
    S3 Ptserial;W2K Pctel Serial Device Driver; C:\windows\system32\DRIVERS\ptserial.sys [2003-11-25 356159]
    S3 SLIP;Détrameur décalage BDA; C:\windows\system32\DRIVERS\SLIP.sys [2004-08-03 11136]
    S3 SoC PC-Camera Service;CIF USB CAMERA; C:\windows\system32\DRIVERS\pfc027.sys [2004-02-10 127692]
    S3 streamip;BDA IPSink; C:\windows\system32\DRIVERS\StreamIP.sys [2004-08-03 15360]
    S3 TVICHW32;TVICHW32; \??\C:\WINDOWS\system32\DRIVERS\TVICHW32.SYS []
    S3 usbbus;LGE Mobile Composite USB Device; C:\windows\system32\DRIVERS\lgusbbus.sys [2007-07-11 12416]
    S3 usbccgp;Pilote parent générique USB Microsoft; C:\windows\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
    S3 UsbDiag;LGE Mobile USB Serial Port; C:\windows\system32\DRIVERS\lgusbdiag.sys [2007-07-11 19840]
    S3 USBModem;LGE Mobile USB Modem; C:\windows\system32\DRIVERS\lgusbmodem.sys [2007-07-11 21632]
    S3 usbprint;Classe d'imprimantes USB Microsoft; C:\windows\system32\DRIVERS\usbprint.sys [2004-08-03 25856]
    S3 usbscan;Pilote de scanneur USB; C:\windows\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
    S3 USBSTOR;Pilote de stockage de masse USB; C:\windows\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
    S3 Vmodem;W2K Vmodem; C:\windows\system32\DRIVERS\vmodem.sys [2003-10-30 703673]
    S3 Vpctcom;W2K Vpctcom; C:\windows\system32\DRIVERS\vpctcom.sys [2003-11-25 801778]
    S3 Vvoice;W2K Vvoice; C:\windows\system32\DRIVERS\vvoice.sys [2003-10-30 70320]
    S3 WpdUsb;WpdUsb; C:\windows\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
    S3 WSTCODEC;Codec Teletext standard; C:\windows\system32\DRIVERS\WSTCODEC.SYS [2004-08-03 19328]
    S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\windows\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

    ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R2 AntiVirScheduler;Planificateur Avira AntiVir Personal - Free Antivirus; C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe [2008-10-15 68865]
    R2 AntiVirService;Avira AntiVir Personal - Free Antivirus Guard; C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe [2008-10-15 151297]
    R2 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-01-10 168432]
    R2 IBMPMSVC;IBM PM Service; C:\windows\system32\ibmpmsvc.exe [2003-07-03 57344]
    R2 NWCWorkstation;Service client pour NetWare; C:\windows\system32\svchost.exe [2004-08-19 14336]
    R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2008-12-04 226640]
    R2 SoundMAX Agent Service (default);SoundMAX Agent Service; C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe [2002-09-20 45056]
    R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\windows\system32\svchost.exe [2004-08-19 14336]
    S2 DF5Serv;DF5Serv; C:\Program Files\Faronics\Deep Freeze\Install C-0\DF5Serv.exe []
    S3 aspnet_state;ASP.NET State Service; C:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe []
    S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\ODSERV.EXE [2007-08-24 443776]
    S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
    S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]

    -----------------EOF-----------------

    rE?
    info.txt logfile of random's system information tool 1.05 2009-02-24 23:13:10

    ======Uninstall list======

    -->C:\Program Files\InstallShield Installation Information\{E646DCF0-5A68-11D5-B229-002078017FBF}\SETUP.exe -runfromtemp -l0x040c -removeonly
    -->MsiExec.exe /I{403EF592-953B-4794-BCEF-ECAB835C2095}
    -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {BEE75E01-DD3F-4D5F-B96C-609E6538D419}
    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0015-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0019-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001A-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0401-0000-0000000FF1CE} /uninstall {5A2F65A4-808F-4A1E-973E-92E17824982D}
    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {2AB528A5-BB1B-4EBE-8E51-AD0C4CD33CA9}
    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {3EC77D26-799B-4CD8-914F-C1565E796173}
    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {430971B1-C31E-45DA-81E0-72C095BAB72C}
    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0413-0000-0000000FF1CE} /uninstall {B3F4DC34-7F60-4B7C-A79F-1C13012D99D4}
    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {F7A31780-33C4-4E39-951A-5EC9B91D7BF1}
    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0044-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
    Adobe Flash Player 10 ActiveX-->C:\windows\system32\Macromed\Flash\uninstall_activeX.exe
    Adobe Shockwave Player-->C:\WINDOWS\system32\Adobe\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Adobe\SHOCKW~1\Install.log
    Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
    Ask Toolbar-->"C:\Program Files\AskBarDis\unins000.exe"
    Assistant de connexion Windows Live-->MsiExec.exe /I{D6E592B3-67DA-4BBB-9783-E1838FB253A2}
    Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir PersonalEdition Classic\SETUP.EXE /REMOVE
    Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}
    CIF USB CAMERA-->C:\WINDOWS\CleanDev.exe C:\WINDOWS\DC3110.txt
    Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\windows\$NtUninstallKB939683$\spuninst\spuninst.exe"
    Correctif pour Windows Internet Explorer 7 (KB947864)-->"C:\windows\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
    Correctif pour Windows XP (KB952287)-->"C:\windows\$NtUninstallKB952287$\spuninst\spuninst.exe"
    Favorit-->"c:\documents and settings\rockmyroot.ordinateur\local settings\application data\wsqeiqs.exe" -uninstall
    Galerie de photos Windows Live-->MsiExec.exe /X{43563ACB-371B-4C58-8979-B192B390424C}
    Google Toolbar for Internet Explorer-->MsiExec.exe /I{DBEA1034-5882-4A88-8033-81C4EF0CFA29}
    HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
    Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\windows\$NtUninstallKB929399$\spuninst\spuninst.exe"
    Hotfix for Windows XP (KB915865)-->"C:\WINDOWS\$NtUninstallKB915865$\spuninst\spuninst.exe"
    IBM ThinkPad Power Management Driver-->RunDll32.exe tpinspm.dll,Uninstall
    Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
    Installation Windows Live-->MsiExec.exe /I{3CCB732A-E472-4CF9-B1EE-F18365341FE0}
    Intel(R) Extreme Graphics 2 Driver-->RUNDLL32.EXE C:\WINDOWS\system32\ialmrem.dll,UninstallW2KIGfx PCI\VEN_8086&DEV_3582
    Intel(R) PRO Network Connections 12.3.31.0-->MsiExec.exe /i{DDD0A758-F44C-47D3-8E88-692FFF775127} ARPREMOVE=1
    Junk Mail filter update-->MsiExec.exe /I{4AB8B41B-3AF1-46BE-99B0-0ACD3B300C0A}
    L&H TTS3000 Français-->RunDll32 advpack.dll,LaunchINFSection C:\windows\INF\LHTTSFRF.inf, Uninstall
    Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
    Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
    Matroska Pack-->C:\Program Files\Matroska Pack\uninstall.exe
    Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
    Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
    Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
    Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\windows\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
    Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
    Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
    Microsoft Office Access MUI (French) 2007-->MsiExec.exe /X{90120000-0015-040C-0000-0000000FF1CE}
    Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
    Microsoft Office InfoPath MUI (French) 2007-->MsiExec.exe /X{90120000-0044-040C-0000-0000000FF1CE}
    Microsoft Office Language Pack 2007 Service Pack 1 (SP1)-->msiexec /package {90120000-006E-040C-0000-0000000FF1CE} /uninstall {EC50B538-CBE1-42E6-B7FE-87AA540AADFB}
    Microsoft Office Live Add-in 1.3-->MsiExec.exe /I{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}
    Microsoft Office Outlook Connector-->MsiExec.exe /I{95120000-0120-040C-0000-0000000FF1CE}
    Microsoft Office Outlook MUI (French) 2007-->MsiExec.exe /X{90120000-001A-040C-0000-0000000FF1CE}
    Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
    Microsoft Office Professional Plus 2007-->"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall PROPLUS /dll OSETUP.DLL
    Microsoft Office Professional Plus 2007-->MsiExec.exe /X{90120000-0011-0000-0000-0000000FF1CE}
    Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
    Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
    Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
    Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
    Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
    Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
    Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}
    Microsoft Office Publisher MUI (French) 2007-->MsiExec.exe /X{90120000-0019-040C-0000-0000000FF1CE}
    Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
    Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
    Microsoft Search Enhancement Pack-->MsiExec.exe /I{299CF645-48C7-4FA1-8BCD-5CE200CF180D}
    Microsoft Speech Recognition Engine 4.0 (English)-->RunDll32 advpack.dll,LaunchINFSection C:\windows\INF\mscsrgpc.inf, Uninstall.NT
    Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
    Microsoft Sync Framework Runtime Native v1.0 (x86)-->MsiExec.exe /I{8A74E887-8F0F-4017-AF53-CBA42211AAA5}
    Microsoft Sync Framework Services Native v1.0 (x86)-->MsiExec.exe /I{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
    Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\windows\$NtUninstallWudf01000$\spuninst\spuninst.exe"
    Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
    Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\windows\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\windows\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\windows\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB942615)-->"C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB944533)-->"C:\windows\ie7updates\KB944533-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\windows\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\windows\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\windows\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\windows\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\windows\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB900725)-->"C:\WINDOWS\$NtUninstallKB900725$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\windows\$NtUninstallKB938464$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB941202)-->"C:\WINDOWS\$NtUninstallKB941202$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB941568)-->"C:\WINDOWS\$NtUninstallKB941568$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB941644)-->"C:\WINDOWS\$NtUninstallKB941644$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB941693)-->"C:\windows\$NtUninstallKB941693$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB943055)-->"C:\windows\$NtUninstallKB943055$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB943460)-->"C:\WINDOWS\$NtUninstallKB943460$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB943485)-->"C:\WINDOWS\$NtUninstallKB943485$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB944653)-->"C:\WINDOWS\$NtUninstallKB944653$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB945553)-->"C:\windows\$NtUninstallKB945553$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB946026)-->"C:\windows\$NtUninstallKB946026$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\windows\$NtUninstallKB946648$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB948590)-->"C:\windows\$NtUninstallKB948590$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB948881)-->"C:\windows\$NtUninstallKB948881$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB950749)-->"C:\windows\$NtUninstallKB950749$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\windows\$NtUninstallKB950760$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\windows\$NtUninstallKB950762$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\windows\$NtUninstallKB950974$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\windows\$NtUninstallKB951066$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\windows\$NtUninstallKB951376$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\windows\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\windows\$NtUninstallKB951698$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\windows\$NtUninstallKB951748$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\windows\$NtUninstallKB952954$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\windows\$NtUninstallKB953839$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\windows\$NtUninstallKB954211$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\windows\$NtUninstallKB954600$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\windows\$NtUninstallKB955069$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\windows\$NtUninstallKB956391$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\windows\$NtUninstallKB956802$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\windows\$NtUninstallKB956803$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\windows\$NtUninstallKB956841$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\windows\$NtUninstallKB957095$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\windows\$NtUninstallKB957097$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\windows\$NtUninstallKB960715$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB932823-v3)-->"C:\windows\$NtUninstallKB932823-v3$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB942763)-->"C:\WINDOWS\$NtUninstallKB942763$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB951072-v2)-->"C:\windows\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB955839)-->"C:\windows\$NtUninstallKB955839$\spuninst\spuninst.exe"
    Mozilla Firefox (3.0.6)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
    MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
    MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
    MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
    MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
    MSXML 6 Service Pack 2 (KB954459)-->MsiExec.exe /I{97AA1F3C-DD64-4AA6-AEC5-F8F9F4CC21C5}
    neroxml-->MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}
    Outil de mise à jour Google-->"C:\Program Files\Google\Google Updater\GoogleUpdater.exe" -uninstall
    PowerDVD-->"C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\Setup.exe" -l0x00040c /z-uninstall
    Realtek AC'97 Audio-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FB08F381-6533-4108-B7DD-039E11FBC27E}\setup.exe" -l0x40c -removeonly
    RON Too1 Mxlivemedia-->C:\windows\system32\yyxhvvamhytq.exe
    Security Update for 2007 Microsoft Office System (KB951550)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {B243E9A5-ED77-4F1B-B338-2486FD82DC85}
    Security Update for 2007 Microsoft Office System (KB951944)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {797AE457-BA17-4BBC-B501-25FB3A0103C7}
    Security Update for 2007 Microsoft Office System (KB958439)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {6491B8AA-D11C-4648-A461-6234B31EB7E2}
    Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
    Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
    Security Update for Microsoft Office Excel 2007 (KB958437)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {648FC016-2D6B-4A16-8D87-404533642F4B}
    Security Update for Microsoft Office PowerPoint 2007 (KB951338)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {558B709B-821B-4FC5-90FC-9A8890641E77}
    Security Update for Microsoft Office Publisher 2007 (KB950114)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {F9C3CDBA-1F00-4D4D-959D-75C9D3ACDD85}
    Security Update for Microsoft Office system 2007 (KB954326)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {5F7F6FFF-395D-480E-8450-64F385D82C5F}
    Security Update for Microsoft Office system 2007 (KB956828)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {885E081B-72BD-4E76-8E98-30B4BE468FAC}
    Security Update for Microsoft Office Word 2007 (KB956358)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {4551666D-0FD6-4C69-8A81-1C6F2E64517C}
    Security Update for Visio 2007 (KB947590)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {6BAD036C-261F-4BEF-96CF-C20678D07A41}
    Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
    SoftK56 Data Fax CARP-->C:\Program Files\CONEXANT\CNXT_MODEM_PCI_VEN_8086&DEV_24C6\HXFSETUP.EXE -U -IVEN_8086&DEV_24C6
    SoundMAX-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F0A37341-D692-11D4-A984-009027EC0A9C}\SETUP.exe" -l0x40c -removeonly
    ThinkPad Integrated 56K Modem-->C:\Program Files\CONEXANT\CNXT_MODEM_PCI_VEN_8086&DEV_24C6&SUBSYS_05591014\HXFSETUP.EXE -U -ITkp0559k.inf
    Update for Microsoft Office Outlook 2007 (KB952142)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {4AD3A076-427C-491F-A5B7-7D1DE788A756}
    Update for Office 2007 (KB946691)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {A420F522-7395-4872-9882-C591B4B92278}
    Update for Outlook 2007 Junk Email Filter (kb959634)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {50C77E2F-5C1C-467D-9BC8-3CA07D28C9F2}
    VCRedistSetup-->MsiExec.exe /I{3921A67A-5AB1-4E48-9444-C71814CF3027}
    VLC media player 0.9.4-->C:\Program Files\VideoLAN\VLC\uninstall.exe
    Vodafone 804SS USB driver Software-->C:\windows\system32\Samsung_USB_Drivers\4\SSVDUninstall.exe
    Windows Imaging Component-->"C:\windows\$NtUninstallWIC$\spuninst\spuninst.exe"
    Windows Internet Explorer 7-->"C:\WINDOWS\ie7\spuninst\spuninst.exe"
    Windows Live Call-->MsiExec.exe /I{01523985-2098-43AF-9C97-12B07BE02A9B}
    Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
    Windows Live Communications Platform-->MsiExec.exe /I{F69E83CF-B440-43F8-89E6-6EA80712109B}
    Windows Live Mail-->MsiExec.exe /I{63DC2DA0-2A6C-4C38-9249-B75395458657}
    Windows Live Messenger-->MsiExec.exe /X{059C042E-796A-4ACC-A81A-ECC2010BB78C}
    Windows Live Sync-->MsiExec.exe /X{67D0313C-4F15-437D-9A2D-C1564088A26A}
    Windows Live Toolbar-->MsiExec.exe /X{915809D6-1F93-45F2-9699-5F1DA64DC24B}
    Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
    Windows Media Format 11 runtime-->"C:\windows\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
    Windows Media Player 11-->"C:\windows\$NtUninstallwmp11$\spuninst\spuninst.exe"

    ======Security center information======

    AV: Avira AntiVir PersonalEdition Classic

    System event log

    Computer Name: ORDINATEUR
    Event Code: 7000
    Message: Le service aswFsBlk n'a pas pu démarrer en raison de l'erreur :
    Le fichier spécifié est introuvable.


    Record Number: 5
    Source Name: Service Control Manager
    Time Written: 20090203150404.000000+060
    Event Type: erreur
    User:

    Computer Name: ORDINATEUR
    Event Code: 7000
    Message: Le service DF5Serv n'a pas pu démarrer en raison de l'erreur :
    Le fichier spécifié est introuvable.


    Record Number: 4
    Source Name: Service Control Manager
    Time Written: 20090203150404.000000+060
    Event Type: erreur
    User:

    Computer Name: ORDINATEUR
    Event Code: 17
    Message: AVGNTFLT successfully loaded

    Record Number: 3
    Source Name: avgntflt
    Time Written: 20090203150156.000000+060
    Event Type: Informations
    User:

    Computer Name: ORDINATEUR
    Event Code: 6005
    Message: Le service d'Enregistrement d'événement a démarré.

    Record Number: 2
    Source Name: EventLog
    Time Written: 20090203150140.000000+060
    Event Type: Informations
    User:

    Computer Name: ORDINATEUR
    Event Code: 6009
    Message: Microsoft (R) Windows (R) 5.01. 2600 Service Pack 2 Uniprocessor Free.

    Record Number: 1
    Source Name: EventLog
    Time Written: 20090203150140.000000+060
    Event Type: Informations
    User:

    Application event log

    Computer Name: ORDINATEUR
    Event Code: 101
    Message: msnmsgr (2600) Le moteur de base de données est arrêté.

    Record Number: 9542
    Source Name: ESENT
    Time Written: 20081119203730.000000+060
    Event Type: Informations
    User:

    Computer Name: ORDINATEUR
    Event Code: 103
    Message: msnmsgr (2600) \\.\C:\Documents and Settings\rockmyroot.ORDINATEUR\Local Settings\Application Data\Microsoft\Messenger\houssine.03@hotmail.fr\SharingMetadata\Working\database_1A1C_6CCB_1C6C_A38B\dfsr.db: Le moteur de base de données a arrêté une instance (0).

    Record Number: 9541
    Source Name: ESENT
    Time Written: 20081119203730.000000+060
    Event Type: Informations
    User:

    Computer Name: ORDINATEUR
    Event Code: 102
    Message: msnmsgr (2600) \\.\C:\Documents and Settings\rockmyroot.ORDINATEUR\Local Settings\Application Data\Microsoft\Messenger\houssine.03@hotmail.fr\SharingMetadata\Working\database_1A1C_6CCB_1C6C_A38B\dfsr.db: Le moteur de base de données a démarré une nouvelle instance (0).

    Record Number: 9540
    Source Name: ESENT
    Time Written: 20081119202405.000000+060
    Event Type: Informations
    User:

    Computer Name: ORDINATEUR
    Event Code: 100
    Message: msnmsgr (2600) Le moteur de base de données 5.01.2600.2780 est démarré.

    Record Number: 9539
    Source Name: ESENT
    Time Written: 20081119202405.000000+060
    Event Type: Informations
    User:

    Computer Name: ORDINATEUR
    Event Code: 101
    Message: msnmsgr (2600) Le moteur de base de données est arrêté.

    Record Number: 9538
    Source Name: ESENT
    Time Written: 20081119180127.000000+060
    Event Type: Informations
    User:

    ======Environment variables======

    "ComSpec"=%SystemRoot%\system32\cmd.exe
    "Path"=%systemroot%\system32;%systemroot%;%systemroot%\system32\wbem;C:\Program Files\Intel\DMIX;C:\Program Files\Fichiers communs\Ulead Systems\MPEG;C:\Program Files\Samsung\Samsung PC Studio 3
    "windir"=%SystemRoot%
    "FP_NO_HOST_CHECK"=NO
    "OS"=Windows_NT
    "PROCESSOR_ARCHITECTURE"=x86
    "PROCESSOR_LEVEL"=6
    "PROCESSOR_IDENTIFIER"=x86 Family 6 Model 13 Stepping 8, GenuineIntel
    "PROCESSOR_REVISION"=0d08
    "NUMBER_OF_PROCESSORS"=1
    "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
    "TEMP"=%SystemRoot%\TEMP
    "TMP"=%SystemRoot%\TEMP
    "DEVMGR_SHOW_DETAILS"=1

    -----------------EOF-----------------

    Pour info, Windows LSD est illégal.

  • Télécharge OTMoveIt3 (OldTimer) sur ton Bureau.
  • Double-clique sur OTMoveIt3.exe afin de le lancer.
  • Copie (Ctrl+C) le texte suivant ci-dessous :

    :processes
    explorer.exe

    :files
    C:\windows\system32\yyxhvvamhytq.exe

    :reg
    [-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{243ff9a0-f0f2-11dc-a59d-000ae4394baf}]
    [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5D9B1F28-1AF0-4C6A-BD10-D985166DD03D}]
    [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6bcb43af-a20f-4996-8860-48f511a222db}]

    :commands
    [purity]
    [emptytemp]
    [reboot]


  • Colle (Ctrl+V) le texte précédemment copié dans le cadre Paste Instructions for Items to be Moved.
  • Clique maintenant sur le bouton MoveIt! puis ferme OTMoveIt3.

    ---> Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
    Accepte en cliquant sur YES.

  • Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\
    ---> Le nom du rapport correspond au moment de sa création : date_heure.log

    Bonjour, oui je sais pour LSD .
    Voici le rapport :
    ========== PROCESSES ==========
    Process explorer.exe killed successfully.
    ========== FILES ==========
    C:\windows\system32\yyxhvvamhytq.exe moved successfully.
    ========== REGISTRY ==========
    Registry key HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{243ff9a0-f0f2-11dc-a59d-000ae4394baf}\\ deleted successfully.
    Unable to delete registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5D9B1F28-1AF0-4C6A-BD10-D985166DD03D}\\ .
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6bcb43af-a20f-4996-8860-48f511a222db}\\ deleted successfully.
    ========== COMMANDS ==========
    File delete failed. C:\DOCUME~1\ROCKMY~1.ORD\LOCALS~1\Temp\etilqs_u9802gMylRkSv3uh1k9j scheduled to be deleted on reboot.
    File delete failed. C:\DOCUME~1\ROCKMY~1.ORD\LOCALS~1\Temp\glizsvoo.dat scheduled to be deleted on reboot.
    User's Temp folder emptied.
    User's Temporary Internet Files folder emptied.
    User's Internet Explorer cache folder emptied.
    Local Service Temp folder emptied.
    Local Service Temporary Internet Files folder emptied.
    Windows Temp folder emptied.
    Java cache emptied.
    File delete failed. C:\Documents and Settings\rockmyroot.ORDINATEUR\Local Settings\Application Data\Mozilla\Firefox\Profiles\tt1eynfz.default\Cache\_CACHE_001_ scheduled to be deleted on reboot.
    File delete failed. C:\Documents and Settings\rockmyroot.ORDINATEUR\Local Settings\Application Data\Mozilla\Firefox\Profiles\tt1eynfz.default\Cache\_CACHE_002_ scheduled to be deleted on reboot.
    File delete failed. C:\Documents and Settings\rockmyroot.ORDINATEUR\Local Settings\Application Data\Mozilla\Firefox\Profiles\tt1eynfz.default\Cache\_CACHE_003_ scheduled to be deleted on reboot.
    File delete failed. C:\Documents and Settings\rockmyroot.ORDINATEUR\Local Settings\Application Data\Mozilla\Firefox\Profiles\tt1eynfz.default\Cache\_CACHE_MAP_ scheduled to be deleted on reboot.
    File delete failed. C:\Documents and Settings\rockmyroot.ORDINATEUR\Local Settings\Application Data\Mozilla\Firefox\Profiles\tt1eynfz.default\urlclassifier3.sqlite scheduled to be deleted on reboot.
    File delete failed. C:\Documents and Settings\rockmyroot.ORDINATEUR\Local Settings\Application Data\Mozilla\Firefox\Profiles\tt1eynfz.default\XUL.mfl scheduled to be deleted on reboot.
    FireFox cache emptied.
    Temp folders emptied.

    OTMoveIt3 by OldTimer - Version 1.0.8.0 log created on 02252009_094637

    Files moved on Reboot...
    File C:\DOCUME~1\ROCKMY~1.ORD\LOCALS~1\Temp\etilqs_u9802gMylRkSv3uh1k9j not found!
    File C:\DOCUME~1\ROCKMY~1.ORD\LOCALS~1\Temp\glizsvoo.dat not found!
    C:\Documents and Settings\rockmyroot.ORDINATEUR\Local Settings\Application Data\Mozilla\Firefox\Profiles\tt1eynfz.default\Cache\_CACHE_001_ moved successfully.
    C:\Documents and Settings\rockmyroot.ORDINATEUR\Local Settings\Application Data\Mozilla\Firefox\Profiles\tt1eynfz.default\Cache\_CACHE_002_ moved successfully.
    C:\Documents and Settings\rockmyroot.ORDINATEUR\Local Settings\Application Data\Mozilla\Firefox\Profiles\tt1eynfz.default\Cache\_CACHE_003_ moved successfully.
    C:\Documents and Settings\rockmyroot.ORDINATEUR\Local Settings\Application Data\Mozilla\Firefox\Profiles\tt1eynfz.default\Cache\_CACHE_MAP_ moved successfully.
    C:\Documents and Settings\rockmyroot.ORDINATEUR\Local Settings\Application Data\Mozilla\Firefox\Profiles\tt1eynfz.default\urlclassifier3.sqlite moved successfully.
    C:\Documents and Settings\rockmyroot.ORDINATEUR\Local Settings\Application Data\Mozilla\Firefox\Profiles\tt1eynfz.default\XUL.mfl moved successfully.

  • Télécharge Navilog1 (de IL-MAFIOSO) sur ton Bureau.
  • Double-clique sur Navilog1.exe afin de lancer l'installation.
  • Si le fix ne lance pas automatiquement après son installation, double-clique sur Navilog1 présent sur le Bureau.
  • Appuie sur F ou f puis valide par Entrée.
  • Appuie sur une touche de ton clavier à chaque fois que cela est demandé, tu arriveras au menu des options.
  • Choisis l'option 1 et appuie sur la touche Entrée pour valider ton choix.
  • Patiente jusqu'au message : *** Analyse terminée le ..... ***
  • Le scan fini, le Bloc-notes contenant le rapport sera affiché, poste le contenu de ce rapport dans ta prochaine réponse.
  • Si le résultat du scan ne s'affiche pas, tu le trouveras dans C:\fixnavi.txt

    N'utilise pas l'option 2, 3 et 4 sans notre accord, des fichiers légitimes peuvent être inclus dans ce scan.

    Search Navipromo version 3.7.4 commencé le 25/02/2009 à 16:57:07,48

    !!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
    !!! Postez ce rapport sur le forum pour le faire analyser !!!
    !!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

    Outil exécuté depuis C:\Program Files\navilog1

    Mise à jour le 16.02.2009 à 18h00 par IL-MAFIOSO

    Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
    X86-based PC ( Uniprocessor Free : Intel(R) Celeron(R) M processor 1.40GHz )
    BIOS : Phoenix FirstBIOS(tm) Notebook Pro Version 2.0 for IBM ThinkPad
    USER : rockmyroot ( Administrator )
    BOOT : Normal boot

    Antivirus : Avira AntiVir PersonalEdition Classic 8.0.1.30 (Activated)


    C:\ (Local Disk) - NTFS - Total:21 Go (Free:7 Go)
    D:\ (CD or DVD)
    F:\ (Local Disk) - NTFS - Total:16 Go (Free:16 Go)


    Recherche executé en mode normal

    *** Recherche Programmes installés ***

    Favorit

    *** Recherche dossiers dans "C:\windows" ***


    *** Recherche dossiers dans "C:\Program Files" ***


    *** Recherche dossiers dans "C:\Documents and Settings\All Users.WINDOWS\menudm~1\progra~1" ***


    *** Recherche dossiers dans "C:\Documents and Settings\All Users.WINDOWS\menudm~1" ***


    *** Recherche dossiers dans "c:\docume~1\alluse~1.win\applic~1" ***


    *** Recherche dossiers dans "C:\Documents and Settings\rockmyroot.ORDINATEUR\applic~1" ***


    *** Recherche dossiers dans "C:\DOCUME~1\samus\applic~1" ***


    *** Recherche dossiers dans "C:\Documents and Settings\rockmyroot.ORDINATEUR\locals~1\applic~1" ***


    *** Recherche dossiers dans "C:\DOCUME~1\samus\locals~1\applic~1" ***


    *** Recherche dossiers dans "C:\Documents and Settings\rockmyroot.ORDINATEUR\menudm~1\progra~1" ***


    *** Recherche dossiers dans "C:\DOCUME~1\samus\menudm~1\progra~1" ***


    *** Recherche avec GenericNaviSearch ***
    !!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
    !!! A vérifier impérativement avant toute suppression manuelle !!!

    * Recherche dans "C:\windows\system32" *

    * Recherche dans "C:\Documents and Settings\rockmyroot.ORDINATEUR\locals~1\applic~1" *

    Fichiers suspects :

    kygii.exe trouvé !

    * Recherche dans "C:\DOCUME~1\samus\locals~1\applic~1" *



    *** Recherche fichiers ***



    *** Recherche clés spécifiques dans le Registre ***
    !! Les clés trouvées ne sont pas forcément infectées !!


    *** Module de Recherche complémentaire ***
    (Recherche fichiers spécifiques)

    1)Recherche nouveaux fichiers Instant Access :


    2)Recherche Heuristique :

    * Dans "C:\windows\system32" :


    * Dans "C:\Documents and Settings\rockmyroot.ORDINATEUR\locals~1\applic~1" :


    * Dans "C:\DOCUME~1\samus\locals~1\applic~1" :


    3)Recherche Certificats :

    Certificat Egroup absent !
    Certificat Electronic-Group trouvé !
    Certificat Montorgueil absent !
    Certificat OOO-Favorit trouvé !
    Certificat Sunny-Day-Design-Ltd absent !

    4)Recherche autres dossiers et fichiers connus :



    *** Analyse terminée le 25/02/2009 à 16:58:26,98 ***

    Merci de me consacrer de votre temps

    Clean Navipromo version 3.7.4 commencé le 25/02/2009 à 17:31:35,30

    Outil exécuté depuis C:\Program Files\navilog1

    Mise à jour le 16.02.2009 à 18h00 par IL-MAFIOSO

    Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
    X86-based PC ( Uniprocessor Free : Intel(R) Celeron(R) M processor 1.40GHz )
    BIOS : Phoenix FirstBIOS(tm) Notebook Pro Version 2.0 for IBM ThinkPad
    USER : rockmyroot ( Administrator )
    BOOT : Normal boot

    Antivirus : Avira AntiVir PersonalEdition Classic 8.0.1.30 (Activated)


    C:\ (Local Disk) - NTFS - Total:21 Go (Free:7 Go)
    D:\ (CD or DVD)
    F:\ (Local Disk) - NTFS - Total:16 Go (Free:16 Go)


    Mode suppression automatique
    avec prise en charge résultats Catchme et GNS


    Nettoyage exécuté au redémarrage de l'ordinateur


    *** fsbl1.txt non trouvé ***
    (Assurez-vous que Catchme n'avait rien trouvé lors de la recherche)


    *** Suppression avec sauvegardes résultats GenericNaviSearch ***

    * Suppression dans "C:\windows\System32" *


    * Suppression dans "C:\Documents and Settings\rockmyroot.ORDINATEUR\locals~1\applic~1" *


    * Suppression dans "C:\DOCUME~1\samus\locals~1\applic~1" *


    *** Suppression dossiers dans "C:\windows" ***


    *** Suppression dossiers dans "C:\Program Files" ***


    *** Suppression dossiers dans "C:\Documents and Settings\All Users.WINDOWS\menudm~1\progra~1" ***


    *** Suppression dossiers dans "C:\Documents and Settings\All Users.WINDOWS\menudm~1" ***


    *** Suppression dossiers dans "c:\docume~1\alluse~1.win\applic~1" ***


    *** Suppression dossiers dans "C:\Documents and Settings\rockmyroot.ORDINATEUR\applic~1" ***


    *** Suppression dossiers dans "C:\DOCUME~1\samus\applic~1" ***


    *** Suppression dossiers dans "C:\Documents and Settings\rockmyroot.ORDINATEUR\locals~1\applic~1" ***


    *** Suppression dossiers dans "C:\DOCUME~1\samus\locals~1\applic~1" ***


    *** Suppression dossiers dans "C:\Documents and Settings\rockmyroot.ORDINATEUR\menudm~1\progra~1" ***


    *** Suppression dossiers dans "C:\DOCUME~1\samus\menudm~1\progra~1" ***



    *** Suppression fichiers ***


    *** Suppression fichiers temporaires ***

    Nettoyage contenu C:\windows\Temp effectué !
    Nettoyage contenu C:\Documents and Settings\rockmyroot.ORDINATEUR\locals~1\Temp effectué !

    *** Traitement Recherche complémentaire ***
    (Recherche fichiers spécifiques)

    1)Suppression avec sauvegardes nouveaux fichiers Instant Access :

    2)Recherche, création sauvegardes et suppression Heuristique :


    * Dans "C:\windows\system32" *


    * Dans "C:\Documents and Settings\rockmyroot.ORDINATEUR\locals~1\applic~1" *


    * Dans "C:\DOCUME~1\samus\locals~1\applic~1" *


    *** Sauvegarde du Registre vers dossier Safebackup ***

    sauvegarde du Registre réalisée avec succès !

    *** Nettoyage Registre ***

    Nettoyage Registre Ok


    *** Certificats ***

    Certificat Egroup absent !
    Certificat Electronic-Group supprimé !
    Certificat Montorgueil absent !
    Certificat OOO-Favorit supprimé !
    Certificat Sunny-Day-Design-Ltdt absent !

    *** Fichiers suspects non supprimés par Navilog1 ***
    !! Fichiers légitimes possibles, à contrôler avant suppression !!

    Fichiers suspects dans "C:\Documents and Settings\rockmyroot.ORDINATEUR\locals~1\applic~1" :

    kygii.exe trouvé !

    *** Recherche autres dossiers et fichiers connus ***



    *** Nettoyage terminé le 25/02/2009 à 17:36:36,94 ***


    Clean Navipromo version 3.7.4 commencé le 25/02/2009 à 20:58:34,90

    Outil exécuté depuis C:\Program Files\navilog1
    Session actuelle : "rockmyroot"

    Mise à jour le 16.02.2009 à 18h00 par IL-MAFIOSO

    Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
    X86-based PC ( Uniprocessor Free : Intel(R) Celeron(R) M processor 1.40GHz )
    BIOS : Phoenix FirstBIOS(tm) Notebook Pro Version 2.0 for IBM ThinkPad
    USER : rockmyroot ( Administrator )
    BOOT : Normal boot

    Antivirus : Avira AntiVir PersonalEdition Classic 8.0.1.30 (Activated)


    C:\ (Local Disk) - NTFS - Total:21 Go (Free:7 Go)
    D:\ (CD or DVD)
    F:\ (Local Disk) - NTFS - Total:16 Go (Free:16 Go)



    Mode suppression par méthode manuelle

    Nom du fichier saisi : kygii

    Nettoyage exécuté au redémarrage de l'ordinateur

    *** Recherche, création sauvegardes et suppression ***

    * Suppression dans "C:\windows\system32" *


    * Suppression dans "C:\Documents and Settings\rockmyroot.ORDINATEUR\locals~1\applic~1" *


    kygii.exe trouvé !
    Copie kygii.exe réalisée avec succès !
    kygii.exe supprimé !

    * Suppression dans "C:\DOCUME~1\samus\locals~1\applic~1" *



    *** Suppression dossiers dans "C:\windows" ***


    *** Suppression dossiers dans "C:\Program Files" ***


    *** Suppression dossiers dans "C:\Documents and Settings\All Users.WINDOWS\menudm~1\progra~1" ***


    *** Suppression dossiers dans "C:\Documents and Settings\All Users.WINDOWS\menudm~1" ***


    *** Suppression dossiers dans "c:\docume~1\alluse~1.win\applic~1" ***


    *** Suppression dossiers dans "C:\Documents and Settings\rockmyroot.ORDINATEUR\applic~1" ***


    *** Suppression dossiers dans "C:\DOCUME~1\samus\applic~1" ***


    *** Suppression dossiers dans "C:\Documents and Settings\rockmyroot.ORDINATEUR\locals~1\applic~1" ***


    *** Suppression dossiers dans "C:\DOCUME~1\samus\locals~1\applic~1" ***


    *** Suppression dossiers dans "C:\Documents and Settings\rockmyroot.ORDINATEUR\menudm~1\progra~1" ***


    *** Suppression dossiers dans "C:\DOCUME~1\samus\menudm~1\progra~1" ***



    *** Suppression fichiers ***


    *** Suppression fichiers temporaires ***

    Nettoyage contenu C:\windows\Temp effectué !
    Nettoyage contenu C:\Documents and Settings\rockmyroot.ORDINATEUR\locals~1\Temp effectué !

    *** Traitement Recherche complémentaire ***
    (Recherche fichiers spécifiques)

    1)Suppression avec sauvegardes nouveaux fichiers Instant Access :

    2)Recherche, création sauvegardes et suppression Heuristique :


    * Dans "C:\windows\system32" *


    * Dans "C:\Documents and Settings\rockmyroot.ORDINATEUR\locals~1\applic~1" *


    * Dans "C:\DOCUME~1\samus\locals~1\applic~1" *


    *** Sauvegarde du Registre vers dossier Safebackup ***

    sauvegarde du Registre réalisée avec succès !

    *** Nettoyage Registre ***

    Nettoyage Registre Ok


    *** Certificats ***

    Certificat Egroup absent !
    Certificat Electronic-Group absent !
    Certificat Montorgueil absent !
    Certificat OOO-Favorit absent !
    Certificat Sunny-Day-Design-Ltdt absent !

    *** Recherche autres dossiers et fichiers connus ***



    *** Nettoyage terminé le 25/02/2009 à 21:04:45,52 ***

    Logfile of random's system information tool 1.05 (written by random/random)
    Run by rockmyroot at 2009-02-25 21:43:55
    Microsoft Windows XP Professionnel Service Pack 2
    System drive C: has 8 GB (35%) free of 22 GB
    Total RAM: 246 MB (24% free)

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 21:44:14, on 25/02/2009
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16791)
    Boot mode: Normal

    Running processes:
    C:\windows\System32\smss.exe
    C:\windows\system32\winlogon.exe
    C:\windows\system32\services.exe
    C:\windows\system32\lsass.exe
    C:\windows\system32\ibmpmsvc.exe
    C:\windows\system32\svchost.exe
    C:\windows\System32\svchost.exe
    C:\windows\system32\svchost.exe
    C:\windows\system32\spoolsv.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
    C:\windows\Explorer.EXE
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
    C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
    C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
    C:\windows\system32\svchost.exe
    C:\windows\system32\tp4mon.exe
    C:\windows\system32\PV92Tray.exe
    C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
    C:\WINDOWS\system32\igfxtray.exe
    C:\WINDOWS\system32\hkcmd.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
    C:\windows\system32\ctfmon.exe
    C:\windows\system32\wuauclt.exe
    C:\windows\System32\svchost.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\windows\system32\wuauclt.exe
    C:\windows\system32\msiexec.exe
    C:\Documents and Settings\rockmyroot.ORDINATEUR\Bureau\RSIT.exe
    C:\Program Files\trend micro\rockmyroot.exe

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    R3 - Default URLSearchHook is missing
    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
    O2 - BHO: (no name) - {5D9B1F28-1AF0-4C6A-BD10-D985166DD03D} - C:\windows\system32\atmpvcn.dll (file missing)
    O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (file missing)
    O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
    O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
    O4 - HKLM\..\Run: [TrackPointSrv] tp4mon.exe
    O4 - HKLM\..\Run: [PV92TRAY] PV92Tray.exe
    O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
    O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
    O4 - HKCU\..\Run: [ctfmon.exe] C:\windows\system32\ctfmon.exe
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\S-1-5-18\..\RunOnce: [LSD_III] %systemroot%\LSD\end.cmd (User 'SYSTEM')
    O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O4 - HKUS\.DEFAULT\..\RunOnce: [LSD_III] %systemroot%\LSD\end.cmd (User 'Default user')
    O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm
    O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
    O9 - Extra button: Trace - {04849C74-016E-4a43-8AA5-1F01DE57F4A1} - C:\Program Files\VisualRoute\vrie.dll (file missing)
    O9 - Extra 'Tools' menuitem: VisualRoute Trace - {04849C74-016E-4a43-8AA5-1F01DE57F4A1} - C:\Program Files\VisualRoute\vrie.dll (file missing)
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
    O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/Install...
    O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986....
    O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - http://fichiers.touslesdrivers.com/fichiers/hardwaredet...
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPACl...
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/fl...
    O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
    O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
    O23 - Service: ASP.NET State Service (aspnet_state) - Unknown owner - C:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)
    O23 - Service: DF5Serv - Unknown owner - C:\Program Files\Faronics\Deep Freeze\Install C-0\DF5Serv.exe (file missing)
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: IBM PM Service (IBMPMSVC) - Unknown owner - C:\windows\system32\ibmpmsvc.exe
    O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

    --
    End of file - 7145 bytes

    ======Registry dump======

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5D9B1F28-1AF0-4C6A-BD10-D985166DD03D}]
    C:\windows\system32\atmpvcn.dll []

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
    Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll [2008-12-04 92504]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
    Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
    Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll [2009-01-10 657904]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
    Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll []

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
    Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2008-12-08 1067352]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
    {21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2008-12-08 1067352]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    "TrackPointSrv"=C:\windows\system32\tp4mon.exe [2004-08-19 82432]
    "PV92TRAY"=C:\windows\system32\PV92Tray.exe [2003-10-30 323584]
    "SoundMAXPnP"=C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe [2004-10-14 1388544]
    "IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2004-02-10 155648]
    "HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2004-02-10 118784]
    "avgnt"=C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe [2008-06-12 266497]

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    "ctfmon.exe"=C:\windows\system32\ctfmon.exe [2004-08-19 15360]
    "swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-01-10 39408]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
    C:\windows\system32\igfxsrvc.dll [2004-02-10 339968]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
    C:\windows\system32\WgaLogon.dll [2008-09-05 267304]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
    WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\windows\system32\WPDShServiceObj.dll [2006-10-18 133632]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
    "authentication packages"=msv1_0
    nwprovau

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
    "dontdisplaylastusername"=0
    "legalnoticecaption"=
    "legalnoticetext"=
    "shutdownwithoutlogon"=1
    "undockwithoutlogon"=1

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
    "NoDriveTypeAutoRun"=323
    "ForceClassicControlPanel"=1
    "NoSMBalloonTip"=0
    "NoDriveAutoRun"=67108863
    "NoDrives"=0

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
    "NoDriveTypeAutoRun"=
    "NoDriveAutoRun"=
    "NoDrives"=
    "HonorAutoRunSetting"=

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
    "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
    "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
    "C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
    "C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
    "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
    "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
    "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
    "C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
    "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
    "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

    ======List of files/folders created in the last 1 months======

    2009-02-25 20:58:34 ----A---- C:\cleannavi.txt
    2009-02-25 16:57:07 ----A---- C:\fixnavi.txt
    2009-02-25 16:56:15 ----D---- C:\Program Files\Navilog1
    2009-02-25 09:47:19 ----SHD---- C:\RECYCLER
    2009-02-25 09:46:37 ----D---- C:\_OTMoveIt
    2009-02-25 09:42:41 ----HDC---- C:\windows\$NtUninstallKB967715$
    2009-02-24 23:12:41 ----D---- C:\Program Files\trend micro
    2009-02-24 23:12:39 ----D---- C:\rsit
    2009-02-24 08:19:04 ----A---- C:\TB.txt
    2009-02-24 08:18:11 ----D---- C:\ToolBar SD
    2009-02-24 08:15:18 ----D---- C:\ComboFix
    2009-02-24 00:31:52 ----D---- C:\windows\temp
    2009-02-24 00:31:36 ----A---- C:\windows\SchedLgU.Txt
    2009-02-24 00:31:36 ----A---- C:\ComboFix.txt
    2009-02-24 00:10:14 ----D---- C:\windows\ERDNT
    2009-02-23 23:54:51 ----D---- C:\Program Files\Mozilla Firefox
    2009-02-23 23:09:54 ----D---- C:\Documents and Settings\rockmyroot.ORDINATEUR\Application Data\Malwarebytes
    2009-02-23 23:09:37 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
    2009-02-23 23:09:37 ----D---- C:\Documents and Settings\All Users.WINDOWS\Application Data\Malwarebytes
    2009-02-19 21:18:17 ----D---- C:\Program Files\Common Files
    2009-02-15 23:00:20 ----D---- C:\Documents and Settings\rockmyroot.ORDINATEUR\Application Data\vlc
    2009-02-12 17:07:54 ----HDC---- C:\windows\$NtUninstallKB960715$
    2009-02-11 15:53:09 ----A---- C:\windows\system32\ptpusb.dll
    2009-02-11 15:53:02 ----A---- C:\windows\system32\ptpusd.dll
    2009-02-11 14:42:12 ----D---- C:\Documents and Settings\rockmyroot.ORDINATEUR\Application Data\agi
    2009-02-11 14:42:10 ----D---- C:\Documents and Settings\All Users.WINDOWS\Application Data\agi
    2009-02-10 15:21:54 ----D---- C:\MicroGaming

    ======List of files/folders modified in the last 1 months======

    2009-02-25 21:04:45 ----D---- C:\windows\system32
    2009-02-25 21:03:30 ----D---- C:\windows\system32\ias
    2009-02-25 16:56:15 ----D---- C:\Program Files
    2009-02-25 09:50:37 ----D---- C:\WINDOWS
    2009-02-25 09:45:14 ----D---- C:\windows\inf
    2009-02-25 09:43:17 ----D---- C:\windows\system32\DllCache
    2009-02-25 09:40:14 ----HD---- C:\windows\$hf_mig$
    2009-02-25 09:39:55 ----D---- C:\windows\system32\CatRoot2
    2009-02-24 23:11:39 ----D---- C:\Program Files\Alwil Software
    2009-02-24 22:55:16 ----SHD---- C:\windows\Installer
    2009-02-24 22:55:16 ----SHD---- C:\Config.Msi
    2009-02-24 20:57:00 ----SHD---- C:\System Volume Information
    2009-02-24 20:57:00 ----D---- C:\windows\system32\Restore
    2009-02-24 11:31:33 ----A---- C:\windows\imsins.BAK
    2009-02-24 08:02:50 ----D---- C:\windows\system32\CatRoot
    2009-02-24 08:02:12 ----D---- C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft Help
    2009-02-24 00:32:18 ----D---- C:\windows\system32\drivers
    2009-02-24 00:19:17 ----A---- C:\windows\system.ini
    2009-02-24 00:16:08 ----D---- C:\windows\system32\config
    2009-02-24 00:13:41 ----D---- C:\windows\AppPatch
    2009-02-24 00:13:40 ----D---- C:\Program Files\Fichiers communs
    2009-02-23 23:55:16 ----D---- C:\Documents and Settings\rockmyroot.ORDINATEUR\Application Data\Mozilla
    2009-02-23 23:39:27 ----D---- C:\windows\Network Diagnostic
    2009-02-23 22:08:23 ----D---- C:\windows\system32\wbem
    2009-02-23 22:08:21 ----D---- C:\windows\Registration
    2009-02-21 23:27:51 ----D---- C:\Program Files\Windows Live
    2009-02-21 23:26:08 ----D---- C:\windows\WinSxS
    2009-02-21 23:23:43 ----D---- C:\windows\system32\DirectX
    2009-02-12 17:21:16 ----D---- C:\Program Files\Internet Explorer
    2009-02-12 17:06:30 ----D---- C:\windows\ie7updates
    2009-02-11 14:41:40 ----A---- C:\windows\system32\pywintypes25.dll
    2009-02-11 14:41:40 ----A---- C:\windows\system32\pythoncom25.dll
    2009-02-11 14:41:40 ----A---- C:\windows\system32\msvcr71.dll
    2009-02-11 14:41:39 ----A---- C:\windows\system32\python25.dll
    2009-02-11 14:41:28 ----D---- C:\Program Files\AGI
    2009-02-11 14:40:57 ----SD---- C:\windows\Downloaded Program Files
    2009-02-09 20:20:55 ----D---- C:\Program Files\Abbyy FineReader 6.0 Sprint
    2009-02-09 20:17:10 ----D---- C:\Program Files\DNA
    2009-02-06 02:20:56 ----D---- C:\Program Files\Ahead
    2009-02-04 01:33:19 ----SD---- C:\Documents and Settings\rockmyroot.ORDINATEUR\Application Data\Microsoft
    2009-02-04 00:21:12 ----A---- C:\windows\system32\MRT.exe

    ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgio.sys []
    R1 avipbb;avipbb; C:\windows\system32\DRIVERS\avipbb.sys [2008-10-30 75072]
    R1 bbcap;bbcap; C:\windows\system32\DRIVERS\bbcap.sys [2008-01-26 2944]
    R1 intelppm;Pilote de processeur Intel; C:\windows\system32\DRIVERS\intelppm.sys [2004-08-19 40320]
    R1 ssmdrv;ssmdrv; C:\windows\system32\DRIVERS\ssmdrv.sys [2007-11-08 21248]
    R2 mdmxsdk;mdmxsdk; C:\windows\system32\DRIVERS\mdmxsdk.sys [2006-06-18 12672]
    R2 NwlnkIpx;Protocole de transport compatible NWLink IPX/SPX/NetBIOS; C:\windows\system32\DRIVERS\nwlnkipx.sys [2004-08-04 88448]
    R2 NwlnkNb;NetBIOS NWLink; C:\windows\system32\DRIVERS\nwlnknb.sys [2001-08-28 63232]
    R2 NwlnkSpx;Protocole NWLink SPX/SPXII; C:\windows\system32\DRIVERS\nwlnkspx.sys [2001-08-28 55936]
    R3 aeaudio;aeaudio; C:\windows\system32\drivers\aeaudio.sys [2005-03-04 127872]
    R3 avgntflt;avgntflt; \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgntflt.sys []
    R3 CmBatt;Pilote d'adaptateur secteur Microsoft; C:\windows\system32\DRIVERS\CmBatt.sys [2004-08-04 14080]
    R3 E100B;Intel(R) PRO Network Connection Driver; C:\windows\system32\DRIVERS\e100b325.sys [2007-03-14 165760]
    R3 HSF_DPV;HSF_DPV; C:\windows\system32\DRIVERS\HSF_DPV.sys [2006-08-28 990592]
    R3 HSFHWICH;HSFHWICH; C:\windows\system32\DRIVERS\HSFHWICH.sys [2006-08-28 247808]
    R3 ialm;ialm; C:\windows\system32\DRIVERS\ialmnt5.sys [2004-02-10 681469]
    R3 IBMPMDRV;IBMPMDRV; C:\windows\system32\DRIVERS\ibmpmdrv.sys [2003-07-03 11344]
    R3 MODEMCSA;Périphérique de filtrage de flux Unimodem; C:\windows\system32\drivers\MODEMCSA.sys [2001-08-17 16128]
    R3 NWRDR;NetWare Rdr; C:\windows\system32\DRIVERS\nwrdr.sys [2007-07-16 163456]
    R3 smwdm;smwdm; C:\windows\system32\drivers\smwdm.sys [2005-03-28 220992]
    R3 TwoTrack;Pilote de filtre de TrackPoint IBM PS/2; C:\windows\system32\DRIVERS\TwoTrack.sys [2001-08-17 11520]
    R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\windows\system32\DRIVERS\usbehci.sys [2007-07-16 30208]
    R3 usbhub;Pilote de concentrateur standard USB Microsoft; C:\windows\system32\DRIVERS\usbhub.sys [2006-10-23 59264]
    R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\windows\system32\DRIVERS\usbuhci.sys [2006-10-23 20608]
    R3 winachsf;winachsf; C:\windows\system32\DRIVERS\HSF_CNXT.sys [2006-08-28 728576]
    S2 zntport;NTPort Library Driver; \??\C:\WINDOWS\system32\zntport.sys []
    S3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\windows\system32\drivers\ALCXWDM.SYS [2007-03-08 4027840]
    S3 avpg83hy;avpg83hy; C:\windows\system32\drivers\avpg83hy.sys []
    S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
    S3 CCDECODE;Décodeur sous-titre fermé; C:\windows\system32\DRIVERS\CCDECODE.sys [2004-08-03 17024]
    S3 HidUsb;Pilote de classe HID Microsoft; C:\windows\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
    S3 HSF_DP;HSF_DP; C:\windows\system32\DRIVERS\HSF_DP.sys []
    S3 mouhid;Pilote HID de souris; C:\windows\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
    S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\windows\system32\drivers\MSTEE.sys [2004-08-03 5504]
    S3 NABTSFEC;Codec NABTS/FEC VBI; C:\windows\system32\DRIVERS\NABTSFEC.sys [2004-08-03 85376]
    S3 NdisIP;Connection TV/vidéo Microsoft; C:\windows\system32\DRIVERS\NdisIP.sys [2004-08-03 10880]
    S3 nm;Pilote du Moniteur réseau; C:\windows\system32\DRIVERS\NMnt.sys [2004-08-04 40320]
    S3 Ptserial;W2K Pctel Serial Device Driver; C:\windows\system32\DRIVERS\ptserial.sys [2003-11-25 356159]
    S3 SLIP;Détrameur décalage BDA; C:\windows\system32\DRIVERS\SLIP.sys [2004-08-03 11136]
    S3 SoC PC-Camera Service;CIF USB CAMERA; C:\windows\system32\DRIVERS\pfc027.sys [2004-02-10 127692]
    S3 streamip;BDA IPSink; C:\windows\system32\DRIVERS\StreamIP.sys [2004-08-03 15360]
    S3 TVICHW32;TVICHW32; \??\C:\WINDOWS\system32\DRIVERS\TVICHW32.SYS []
    S3 usbbus;LGE Mobile Composite USB Device; C:\windows\system32\DRIVERS\lgusbbus.sys [2007-07-11 12416]
    S3 usbccgp;Pilote parent générique USB Microsoft; C:\windows\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
    S3 UsbDiag;LGE Mobile USB Serial Port; C:\windows\system32\DRIVERS\lgusbdiag.sys [2007-07-11 19840]
    S3 USBModem;LGE Mobile USB Modem; C:\windows\system32\DRIVERS\lgusbmodem.sys [2007-07-11 21632]
    S3 usbprint;Classe d'imprimantes USB Microsoft; C:\windows\system32\DRIVERS\usbprint.sys [2004-08-03 25856]
    S3 usbscan;Pilote de scanneur USB; C:\windows\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
    S3 USBSTOR;Pilote de stockage de masse USB; C:\windows\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
    S3 Vmodem;W2K Vmodem; C:\windows\system32\DRIVERS\vmodem.sys [2003-10-30 703673]
    S3 Vpctcom;W2K Vpctcom; C:\windows\system32\DRIVERS\vpctcom.sys [2003-11-25 801778]
    S3 Vvoice;W2K Vvoice; C:\windows\system32\DRIVERS\vvoice.sys [2003-10-30 70320]
    S3 WpdUsb;WpdUsb; C:\windows\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
    S3 WSTCODEC;Codec Teletext standard; C:\windows\system32\DRIVERS\WSTCODEC.SYS [2004-08-03 19328]
    S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\windows\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

    ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R2 AntiVirScheduler;Planificateur Avira AntiVir Personal - Free Antivirus; C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe [2008-10-15 68865]
    R2 AntiVirService;Avira AntiVir Personal - Free Antivirus Guard; C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe [2008-10-15 151297]
    R2 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-01-10 168432]
    R2 IBMPMSVC;IBM PM Service; C:\windows\system32\ibmpmsvc.exe [2003-07-03 57344]
    R2 NWCWorkstation;Service client pour NetWare; C:\windows\system32\svchost.exe [2004-08-19 14336]
    R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2008-12-04 226640]
    R2 SoundMAX Agent Service (default);SoundMAX Agent Service; C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe [2002-09-20 45056]
    R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\windows\system32\svchost.exe [2004-08-19 14336]
    S2 DF5Serv;DF5Serv; C:\Program Files\Faronics\Deep Freeze\Install C-0\DF5Serv.exe []
    S3 aspnet_state;ASP.NET State Service; C:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe []
    S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\ODSERV.EXE [2007-08-24 443776]
    S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
    S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]

    -----------------EOF-----------------

    1/

  • Cherche ce fichier : C:\Program Files\trend micro\rockmyroot.exe
  • Double-clique sur ce fichier.
  • Choisis Do a system scan only.
  • Coche les cases qui sont devant les lignes suivantes :

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =

    R3 - Default URLSearchHook is missing

    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

    O2 - BHO: (no name) - {5D9B1F28-1AF0-4C6A-BD10-D985166DD03D} - C:\windows\system32\atmpvcn.dll (file missing)

    O23 - Service: ASP.NET State Service (aspnet_state) - Unknown owner - C:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)

    O23 - Service: DF5Serv - Unknown owner - C:\Program Files\Faronics\Deep Freeze\Install C-0\DF5Serv.exe (file missing)

  • Clique en bas sur Fix checked. Mets oui si HijackThis te demande quelque chose.
  • Ferme HijackThis.


    2/

  • Double-clique sur l'icône d'Antivir (Parapluie) dans la barre des tâches.
  • Dans Antivir, choisis Outils puis Configuration.
  • Coche Mode Expert et coche Rech. Rootkit au dém. de la recherche à droite dans Autres réglages.
  • Fais un scan complet et poste le rapport.



    Avira AntiVir Personal
    Date de création du fichier de rapport : mercredi 25 février 2009 22:13

    La recherche porte sur 1265535 souches de virus.

    Détenteur de la licence :Avira AntiVir PersonalEdition Classic
    Numéro de série : 0000149996-ADJIE-0001
    Plateforme : Windows XP
    Version de Windows :( Service Pack 2) [5.1.2600]
    Mode Boot : Démarré normalement
    Identifiant : SYSTEM
    Nom de l'ordinateur :o RDINATEUR

    Informations de version :
    BUILD.DAT : 8.2.0.52 16931 Bytes 02/12/2008 14:55:00
    AVSCAN.EXE : 8.1.4.10 315649 Bytes 18/11/2008 08:21:00
    AVSCAN.DLL : 8.1.4.1 49921 Bytes 21/07/2008 13:44:27
    LUKE.DLL : 8.1.4.5 164097 Bytes 12/06/2008 12:44:16
    LUKERES.DLL : 8.1.4.0 13057 Bytes 04/07/2008 07:30:27
    ANTIVIR0.VDF : 7.1.0.0 15603712 Bytes 27/10/2008 11:30:36
    ANTIVIR1.VDF : 7.1.2.12 3336192 Bytes 11/02/2009 20:02:13
    ANTIVIR2.VDF : 7.1.2.55 248832 Bytes 20/02/2009 20:02:01
    ANTIVIR3.VDF : 7.1.2.82 109568 Bytes 25/02/2009 20:48:02
    Version du moteur: 8.2.0.88
    AEVDF.DLL : 8.1.1.0 106868 Bytes 31/01/2009 13:53:08
    AESCRIPT.DLL : 8.1.1.52 348538 Bytes 23/02/2009 20:55:17
    AESCN.DLL : 8.1.1.7 127347 Bytes 13/02/2009 20:00:49
    AERDL.DLL : 8.1.1.3 438645 Bytes 04/11/2008 13:58:38
    AEPACK.DLL : 8.1.3.8 397684 Bytes 05/02/2009 16:19:53
    AEOFFICE.DLL : 8.1.0.33 196987 Bytes 19/12/2008 20:50:49
    AEHEUR.DLL : 8.1.0.97 1610103 Bytes 20/02/2009 20:02:11
    AEHELP.DLL : 8.1.2.0 119159 Bytes 19/12/2008 20:50:46
    AEGEN.DLL : 8.1.1.21 336244 Bytes 23/02/2009 20:55:17
    AEEMU.DLL : 8.1.0.9 393588 Bytes 14/10/2008 10:05:56
    AECORE.DLL : 8.1.6.6 176501 Bytes 18/02/2009 20:00:56
    AEBB.DLL : 8.1.0.3 53618 Bytes 14/10/2008 10:05:56
    AVWINLL.DLL : 1.0.0.12 15105 Bytes 09/07/2008 08:40:02
    AVPREF.DLL : 8.0.2.0 38657 Bytes 16/05/2008 09:27:58
    AVREP.DLL : 8.0.0.2 98344 Bytes 31/07/2008 12:02:15
    AVREG.DLL : 8.0.0.1 33537 Bytes 09/05/2008 11:26:37
    AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:19
    AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 12/06/2008 12:27:46
    SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:02
    SMTPLIB.DLL : 1.2.0.23 28929 Bytes 12/06/2008 12:49:36
    NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:07
    RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 04/07/2008 07:23:16
    RCTEXT.DLL : 8.0.52.1 86273 Bytes 17/07/2008 10:08:43

    Configuration pour la recherche actuelle :
    Nom de la tâche..................: Contrôle intégral du système
    Fichier de configuration.........: c:\program files\avira\antivir personaledition classic\sysscan.avp
    Documentation....................: bas
    Action principale................: interactif
    Action secondaire................: ignorer
    Recherche sur les secteurs d'amorçage maître: marche
    Recherche sur les secteurs d'amorçage: marche
    Secteurs d'amorçage..............: C:, F:,
    Recherche dans les programmes actifs: marche
    Recherche en cours sur l'enregistrement: marche
    Recherche de Rootkits............: marche
    Fichier mode de recherche........: Sélection de fichiers intelligente
    Recherche sur les archives.......: marche
    Limiter la profondeur de récursivité: 20
    Archive Smart Extensions.........: marche
    Heuristique de macrovirus........: marche
    Heuristique fichier..............: moyen

    Début de la recherche : mercredi 25 février 2009 22:13

    La recherche d'objets cachés commence.
    Erreur dans la bibliothèque ARK

    La recherche sur les processus démarrés commence :
    Processus de recherche 'avscan.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'avcenter.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'wuauclt.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'wuauclt.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'alg.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'SMAgent.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'SeaPort.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'GoogleUpdaterService.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'avguard.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'ctfmon.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'avgnt.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'hkcmd.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'igfxtray.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'SMax4PNP.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'PV92Tray.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'tp4mon.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'explorer.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'sched.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'spoolsv.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'ibmpmsvc.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'lsass.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'services.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'winlogon.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'csrss.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'smss.exe' - '1' module(s) sont contrôlés
    '33' processus ont été contrôlés avec '33' modules

    La recherche sur les secteurs d'amorçage maître commence :
    Secteur d'amorçage maître HD0
    [INFO] Aucun virus trouvé !

    La recherche sur les secteurs d'amorçage commence :
    Secteur d'amorçage 'C:\'
    [INFO] Aucun virus trouvé !
    Secteur d'amorçage 'F:\'
    [INFO] Aucun virus trouvé !

    La recherche sur les renvois aux fichiers exécutables (registre) commence.
    Le registre a été contrôlé ( '51' fichiers).


    La recherche sur les fichiers sélectionnés commence :

    Recherche débutant dans 'C:\'
    C:\hiberfil.sys
    [AVERTISSEMENT] Impossible d'ouvrir le fichier !
    C:\pagefile.sys
    [AVERTISSEMENT] Impossible d'ouvrir le fichier !
    C:\WINDOWS\system32\drivers\sptd.sys
    [AVERTISSEMENT] Impossible d'ouvrir le fichier !
    Recherche débutant dans 'F:\' <Nouveau nom>


    Fin de la recherche : mercredi 25 février 2009 22:39
    Temps nécessaire: 26:25 Minute(s)

    La recherche a été effectuée intégralement

    5500 Les répertoires ont été contrôlés
    119745 Des fichiers ont été contrôlés
    0 Des virus ou programmes indésirables ont été trouvés
    0 Des fichiers ont été classés comme suspects
    0 Des fichiers ont été supprimés
    0 Des virus ou programmes indésirables ont été réparés
    0 Les fichiers ont été déplacés dans la quarantaine
    0 Les fichiers ont été renommés
    3 Impossible de contrôler des fichiers
    119742 Fichiers non infectés
    1373 Les archives ont été contrôlées
    3 Avertissements
    0 Consignes
    34193 Des objets ont été contrôlés lors du Rootkitscan
    0 Des objets cachés ont été trouvés

    Je pense que ça va par contre je n'ai toujours pas réussi à supprimer nero et msn aussi ne veut pas fonctionner et ni se désinstaller

    Logfile of random's system information tool 1.05 (written by random/random)
    Run by rockmyroot at 2009-02-25 23:08:22
    Microsoft Windows XP Professionnel Service Pack 2
    System drive C: has 7 GB (34%) free of 22 GB
    Total RAM: 246 MB (19% free)

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 23:08:40, on 25/02/2009
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16791)
    Boot mode: Normal

    Running processes:
    C:\windows\System32\smss.exe
    C:\windows\system32\winlogon.exe
    C:\windows\system32\services.exe
    C:\windows\system32\lsass.exe
    C:\windows\system32\ibmpmsvc.exe
    C:\windows\system32\svchost.exe
    C:\windows\System32\svchost.exe
    C:\windows\system32\svchost.exe
    C:\windows\system32\spoolsv.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
    C:\windows\Explorer.EXE
    C:\windows\system32\tp4mon.exe
    C:\windows\system32\PV92Tray.exe
    C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
    C:\WINDOWS\system32\igfxtray.exe
    C:\WINDOWS\system32\hkcmd.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
    C:\windows\system32\ctfmon.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
    C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
    C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
    C:\windows\system32\svchost.exe
    C:\windows\System32\svchost.exe
    C:\windows\system32\wuauclt.exe
    C:\windows\system32\msiexec.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Documents and Settings\rockmyroot.ORDINATEUR\Bureau\RSIT.exe
    C:\Program Files\trend micro\rockmyroot.exe

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
    O2 - BHO: (no name) - {5D9B1F28-1AF0-4C6A-BD10-D985166DD03D} - C:\windows\system32\atmpvcn.dll (file missing)
    O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (file missing)
    O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
    O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
    O4 - HKLM\..\Run: [TrackPointSrv] tp4mon.exe
    O4 - HKLM\..\Run: [PV92TRAY] PV92Tray.exe
    O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
    O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
    O4 - HKCU\..\Run: [ctfmon.exe] C:\windows\system32\ctfmon.exe
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\S-1-5-18\..\RunOnce: [LSD_III] %systemroot%\LSD\end.cmd (User 'SYSTEM')
    O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O4 - HKUS\.DEFAULT\..\RunOnce: [LSD_III] %systemroot%\LSD\end.cmd (User 'Default user')
    O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm
    O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
    O9 - Extra button: Trace - {04849C74-016E-4a43-8AA5-1F01DE57F4A1} - C:\Program Files\VisualRoute\vrie.dll (file missing)
    O9 - Extra 'Tools' menuitem: VisualRoute Trace - {04849C74-016E-4a43-8AA5-1F01DE57F4A1} - C:\Program Files\VisualRoute\vrie.dll (file missing)
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
    O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/Install...
    O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986....
    O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - http://fichiers.touslesdrivers.com/fichiers/hardwaredet...
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPACl...
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/fl...
    O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
    O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
    O23 - Service: ASP.NET State Service (aspnet_state) - Unknown owner - C:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: IBM PM Service (IBMPMSVC) - Unknown owner - C:\windows\system32\ibmpmsvc.exe
    O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

    --
    End of file - 6887 bytes

    ======Registry dump======

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5D9B1F28-1AF0-4C6A-BD10-D985166DD03D}]
    C:\windows\system32\atmpvcn.dll []

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
    Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll [2008-12-04 92504]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
    Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
    Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll [2009-01-10 657904]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
    Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll []

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
    Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2008-12-08 1067352]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
    {21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2008-12-08 1067352]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    "TrackPointSrv"=C:\windows\system32\tp4mon.exe [2004-08-19 82432]
    "PV92TRAY"=C:\windows\system32\PV92Tray.exe [2003-10-30 323584]
    "SoundMAXPnP"=C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe [2004-10-14 1388544]
    "IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2004-02-10 155648]
    "HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2004-02-10 118784]
    "avgnt"=C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe [2008-06-12 266497]

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    "ctfmon.exe"=C:\windows\system32\ctfmon.exe [2004-08-19 15360]
    "swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-01-10 39408]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
    C:\windows\system32\igfxsrvc.dll [2004-02-10 339968]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
    C:\windows\system32\WgaLogon.dll [2008-09-05 267304]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
    WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\windows\system32\WPDShServiceObj.dll [2006-10-18 133632]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
    "authentication packages"=msv1_0
    nwprovau

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
    "dontdisplaylastusername"=0
    "legalnoticecaption"=
    "legalnoticetext"=
    "shutdownwithoutlogon"=1
    "undockwithoutlogon"=1

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
    "NoDriveTypeAutoRun"=323
    "ForceClassicControlPanel"=1
    "NoSMBalloonTip"=0
    "NoDriveAutoRun"=67108863
    "NoDrives"=0

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
    "NoDriveTypeAutoRun"=
    "NoDriveAutoRun"=
    "NoDrives"=
    "HonorAutoRunSetting"=

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
    "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
    "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
    "C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
    "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
    "C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
    "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
    "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
    "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
    "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
    "C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"

    ======List of files/folders created in the last 1 months======

    2009-02-25 23:01:54 ----D---- C:\windows\LastGood
    2009-02-25 20:58:34 ----A---- C:\cleannavi.txt
    2009-02-25 16:57:07 ----A---- C:\fixnavi.txt
    2009-02-25 16:56:15 ----D---- C:\Program Files\Navilog1
    2009-02-25 09:47:19 ----SHD---- C:\RECYCLER
    2009-02-25 09:46:37 ----D---- C:\_OTMoveIt
    2009-02-25 09:42:41 ----HDC---- C:\windows\$NtUninstallKB967715$
    2009-02-24 23:12:41 ----D---- C:\Program Files\trend micro
    2009-02-24 23:12:39 ----D---- C:\rsit
    2009-02-24 08:19:04 ----A---- C:\TB.txt
    2009-02-24 08:18:11 ----D---- C:\ToolBar SD
    2009-02-24 08:15:18 ----D---- C:\ComboFix
    2009-02-24 00:31:52 ----D---- C:\windows\temp
    2009-02-24 00:31:36 ----A---- C:\windows\SchedLgU.Txt
    2009-02-24 00:31:36 ----A---- C:\ComboFix.txt
    2009-02-24 00:10:14 ----D---- C:\windows\ERDNT
    2009-02-23 23:54:51 ----D---- C:\Program Files\Mozilla Firefox
    2009-02-23 23:09:54 ----D---- C:\Documents and Settings\rockmyroot.ORDINATEUR\Application Data\Malwarebytes
    2009-02-23 23:09:37 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
    2009-02-23 23:09:37 ----D---- C:\Documents and Settings\All Users.WINDOWS\Application Data\Malwarebytes
    2009-02-19 21:18:17 ----D---- C:\Program Files\Common Files
    2009-02-15 23:00:20 ----D---- C:\Documents and Settings\rockmyroot.ORDINATEUR\Application Data\vlc
    2009-02-12 17:07:54 ----HDC---- C:\windows\$NtUninstallKB960715$
    2009-02-11 15:53:09 ----A---- C:\windows\system32\ptpusb.dll
    2009-02-11 15:53:02 ----A---- C:\windows\system32\ptpusd.dll
    2009-02-11 14:42:12 ----D---- C:\Documents and Settings\rockmyroot.ORDINATEUR\Application Data\agi
    2009-02-11 14:42:10 ----D---- C:\Documents and Settings\All Users.WINDOWS\Application Data\agi
    2009-02-10 15:21:54 ----D---- C:\MicroGaming

    ======List of files/folders modified in the last 1 months======

    2009-02-25 23:04:54 ----SHD---- C:\windows\Installer
    2009-02-25 23:04:54 ----SHD---- C:\Config.Msi
    2009-02-25 23:04:32 ----D---- C:\Program Files
    2009-02-25 23:04:11 ----D---- C:\Program Files\Windows Live
    2009-02-25 23:03:53 ----D---- C:\windows\system32
    2009-02-25 23:03:48 ----D---- C:\windows\WinSxS
    2009-02-25 23:01:54 ----D---- C:\WINDOWS
    2009-02-25 23:01:52 ----D---- C:\windows\system32\CatRoot2
    2009-02-25 23:01:48 ----D---- C:\windows\system32\DirectX
    2009-02-25 22:09:13 ----D---- C:\windows\system32\ias
    2009-02-25 09:45:14 ----D---- C:\windows\inf
    2009-02-25 09:43:17 ----D---- C:\windows\system32\DllCache
    2009-02-25 09:40:14 ----HD---- C:\windows\$hf_mig$
    2009-02-24 23:11:39 ----D---- C:\Program Files\Alwil Software
    2009-02-24 20:57:00 ----SHD---- C:\System Volume Information
    2009-02-24 20:57:00 ----D---- C:\windows\system32\Restore
    2009-02-24 11:31:33 ----A---- C:\windows\imsins.BAK
    2009-02-24 08:02:50 ----D---- C:\windows\system32\CatRoot
    2009-02-24 08:02:12 ----D---- C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft Help
    2009-02-24 00:32:18 ----D---- C:\windows\system32\drivers
    2009-02-24 00:19:17 ----A---- C:\windows\system.ini
    2009-02-24 00:16:08 ----D---- C:\windows\system32\config
    2009-02-24 00:13:41 ----D---- C:\windows\AppPatch
    2009-02-24 00:13:40 ----D---- C:\Program Files\Fichiers communs
    2009-02-23 23:55:16 ----D---- C:\Documents and Settings\rockmyroot.ORDINATEUR\Application Data\Mozilla
    2009-02-23 23:39:27 ----D---- C:\windows\Network Diagnostic
    2009-02-23 22:08:23 ----D---- C:\windows\system32\wbem
    2009-02-23 22:08:21 ----D---- C:\windows\Registration
    2009-02-12 17:21:16 ----D---- C:\Program Files\Internet Explorer
    2009-02-12 17:06:30 ----D---- C:\windows\ie7updates
    2009-02-11 14:41:40 ----A---- C:\windows\system32\pywintypes25.dll
    2009-02-11 14:41:40 ----A---- C:\windows\system32\pythoncom25.dll
    2009-02-11 14:41:40 ----A---- C:\windows\system32\msvcr71.dll
    2009-02-11 14:41:39 ----A---- C:\windows\system32\python25.dll
    2009-02-11 14:41:28 ----D---- C:\Program Files\AGI
    2009-02-11 14:40:57 ----SD---- C:\windows\Downloaded Program Files
    2009-02-09 20:20:55 ----D---- C:\Program Files\Abbyy FineReader 6.0 Sprint
    2009-02-09 20:17:10 ----D---- C:\Program Files\DNA
    2009-02-06 02:20:56 ----D---- C:\Program Files\Ahead
    2009-02-04 01:33:19 ----SD---- C:\Documents and Settings\rockmyroot.ORDINATEUR\Application Data\Microsoft
    2009-02-04 00:21:12 ----A---- C:\windows\system32\MRT.exe

    ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgio.sys []
    R1 avipbb;avipbb; C:\windows\system32\DRIVERS\avipbb.sys [2008-10-30 75072]
    R1 bbcap;bbcap; C:\windows\system32\DRIVERS\bbcap.sys [2008-01-26 2944]
    R1 intelppm;Pilote de processeur Intel; C:\windows\system32\DRIVERS\intelppm.sys [2004-08-19 40320]
    R1 ssmdrv;ssmdrv; C:\windows\system32\DRIVERS\ssmdrv.sys [2007-11-08 21248]
    R2 mdmxsdk;mdmxsdk; C:\windows\system32\DRIVERS\mdmxsdk.sys [2006-06-18 12672]
    R2 NwlnkIpx;Protocole de transport compatible NWLink IPX/SPX/NetBIOS; C:\windows\system32\DRIVERS\nwlnkipx.sys [2004-08-04 88448]
    R2 NwlnkNb;NetBIOS NWLink; C:\windows\system32\DRIVERS\nwlnknb.sys [2001-08-28 63232]
    R2 NwlnkSpx;Protocole NWLink SPX/SPXII; C:\windows\system32\DRIVERS\nwlnkspx.sys [2001-08-28 55936]
    R3 aeaudio;aeaudio; C:\windows\system32\drivers\aeaudio.sys [2005-03-04 127872]
    R3 avgntflt;avgntflt; \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgntflt.sys []
    R3 CmBatt;Pilote d'adaptateur secteur Microsoft; C:\windows\system32\DRIVERS\CmBatt.sys [2004-08-04 14080]
    R3 E100B;Intel(R) PRO Network Connection Driver; C:\windows\system32\DRIVERS\e100b325.sys [2007-03-14 165760]
    R3 HSF_DPV;HSF_DPV; C:\windows\system32\DRIVERS\HSF_DPV.sys [2006-08-28 990592]
    R3 HSFHWICH;HSFHWICH; C:\windows\system32\DRIVERS\HSFHWICH.sys [2006-08-28 247808]
    R3 ialm;ialm; C:\windows\system32\DRIVERS\ialmnt5.sys [2004-02-10 681469]
    R3 IBMPMDRV;IBMPMDRV; C:\windows\system32\DRIVERS\ibmpmdrv.sys [2003-07-03 11344]
    R3 MODEMCSA;Périphérique de filtrage de flux Unimodem; C:\windows\system32\drivers\MODEMCSA.sys [2001-08-17 16128]
    R3 NWRDR;NetWare Rdr; C:\windows\system32\DRIVERS\nwrdr.sys [2007-07-16 163456]
    R3 smwdm;smwdm; C:\windows\system32\drivers\smwdm.sys [2005-03-28 220992]
    R3 TwoTrack;Pilote de filtre de TrackPoint IBM PS/2; C:\windows\system32\DRIVERS\TwoTrack.sys [2001-08-17 11520]
    R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\windows\system32\DRIVERS\usbehci.sys [2007-07-16 30208]
    R3 usbhub;Pilote de concentrateur standard USB Microsoft; C:\windows\system32\DRIVERS\usbhub.sys [2006-10-23 59264]
    R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\windows\system32\DRIVERS\usbuhci.sys [2006-10-23 20608]
    R3 winachsf;winachsf; C:\windows\system32\DRIVERS\HSF_CNXT.sys [2006-08-28 728576]
    S2 zntport;NTPort Library Driver; \??\C:\WINDOWS\system32\zntport.sys []
    S3 a8nnrfoj;a8nnrfoj; C:\windows\system32\drivers\a8nnrfoj.sys []
    S3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\windows\system32\drivers\ALCXWDM.SYS [2007-03-08 4027840]
    S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
    S3 CCDECODE;Décodeur sous-titre fermé; C:\windows\system32\DRIVERS\CCDECODE.sys [2004-08-03 17024]
    S3 HidUsb;Pilote de classe HID Microsoft; C:\windows\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
    S3 HSF_DP;HSF_DP; C:\windows\system32\DRIVERS\HSF_DP.sys []
    S3 mouhid;Pilote HID de souris; C:\windows\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
    S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\windows\system32\drivers\MSTEE.sys [2004-08-03 5504]
    S3 NABTSFEC;Codec NABTS/FEC VBI; C:\windows\system32\DRIVERS\NABTSFEC.sys [2004-08-03 85376]
    S3 NdisIP;Connection TV/vidéo Microsoft; C:\windows\system32\DRIVERS\NdisIP.sys [2004-08-03 10880]
    S3 nm;Pilote du Moniteur réseau; C:\windows\system32\DRIVERS\NMnt.sys [2004-08-04 40320]
    S3 Ptserial;W2K Pctel Serial Device Driver; C:\windows\system32\DRIVERS\ptserial.sys [2003-11-25 356159]
    S3 SLIP;Détrameur décalage BDA; C:\windows\system32\DRIVERS\SLIP.sys [2004-08-03 11136]
    S3 SoC PC-Camera Service;CIF USB CAMERA; C:\windows\system32\DRIVERS\pfc027.sys [2004-02-10 127692]
    S3 streamip;BDA IPSink; C:\windows\system32\DRIVERS\StreamIP.sys [2004-08-03 15360]
    S3 TVICHW32;TVICHW32; \??\C:\WINDOWS\system32\DRIVERS\TVICHW32.SYS []
    S3 usbbus;LGE Mobile Composite USB Device; C:\windows\system32\DRIVERS\lgusbbus.sys [2007-07-11 12416]
    S3 usbccgp;Pilote parent générique USB Microsoft; C:\windows\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
    S3 UsbDiag;LGE Mobile USB Serial Port; C:\windows\system32\DRIVERS\lgusbdiag.sys [2007-07-11 19840]
    S3 USBModem;LGE Mobile USB Modem; C:\windows\system32\DRIVERS\lgusbmodem.sys [2007-07-11 21632]
    S3 usbprint;Classe d'imprimantes USB Microsoft; C:\windows\system32\DRIVERS\usbprint.sys [2004-08-03 25856]
    S3 usbscan;Pilote de scanneur USB; C:\windows\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
    S3 USBSTOR;Pilote de stockage de masse USB; C:\windows\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
    S3 Vmodem;W2K Vmodem; C:\windows\system32\DRIVERS\vmodem.sys [2003-10-30 703673]
    S3 Vpctcom;W2K Vpctcom; C:\windows\system32\DRIVERS\vpctcom.sys [2003-11-25 801778]
    S3 Vvoice;W2K Vvoice; C:\windows\system32\DRIVERS\vvoice.sys [2003-10-30 70320]
    S3 WpdUsb;WpdUsb; C:\windows\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
    S3 WSTCODEC;Codec Teletext standard; C:\windows\system32\DRIVERS\WSTCODEC.SYS [2004-08-03 19328]
    S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\windows\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

    ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R2 AntiVirScheduler;Planificateur Avira AntiVir Personal - Free Antivirus; C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe [2008-10-15 68865]
    R2 AntiVirService;Avira AntiVir Personal - Free Antivirus Guard; C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe [2008-10-15 151297]
    R2 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-01-10 168432]
    R2 IBMPMSVC;IBM PM Service; C:\windows\system32\ibmpmsvc.exe [2003-07-03 57344]
    R2 NWCWorkstation;Service client pour NetWare; C:\windows\system32\svchost.exe [2004-08-19 14336]
    R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2008-12-04 226640]
    R2 SoundMAX Agent Service (default);SoundMAX Agent Service; C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe [2002-09-20 45056]
    R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\windows\system32\svchost.exe [2004-08-19 14336]
    S3 aspnet_state;ASP.NET State Service; C:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe []
    S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\ODSERV.EXE [2007-08-24 443776]
    S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
    S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
    S4 DF5Serv;DF5Serv; C:\Program Files\Faronics\Deep Freeze\Install C-0\DF5Serv.exe []

    -----------------EOF-----------------

    Si tu as réussi à désinstaller tes deux programmes, fais ceci :


    1/

  • Désinstalle HijackThis.

  • Télécharge ToolsCleaner2 sur ton Bureau.
  • Double-clique sur ToolsCleaner2.exe pour le lancer.
  • Clique sur Recherche et laisse le scan agir.
  • Clique sur Suppression pour finaliser.
  • Tu peux, si tu le souhaites, te servir des Options Facultatives.
  • Clique sur Quitter pour obtenir le rapport.
  • Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).


    2/

  • Télécharge et installe CCleaner (N'installe pas la Yahoo Toolbar).
  • Lance-le. Va dans Options puis Avancé et décoche la case Effacer uniquement les fichiers etc....
  • Va dans Nettoyeur, choisis Analyse. Une fois terminé, lance le nettoyage.
  • Ensuite, choisis Registre, puis Chercher des erreurs. Une fois terminé, répare toutes les erreurs (Sauvegarde la base de registre).


    3/

  • Il est nécessaire de désactiver puis réactiver la restauration système pour la purger.

  • Je te conseille de créer un point de restauration que tu pourras utiliser plus tard si tu as un problème.


    ==Prévention==

    Conserve MBAM. Il te servira à scanner les fichiers douteux en complément de l'antivirus et scanne le disque dur régulièrement.

    Comme navigateur, utilise plutôt Mozilla Firefox qu'Internet Explorer. Tu peux utiliser l'extension NoScript pour plus de sécurité.

    Vérifie que les mises à jour automatiques sont bien activées (Menu Démarrer, clique droit sur Poste de travail, onglet Mises à jour automatiques).

    Tu peux aussi modifier le fichier Hosts pour améliorer la sécurité de ton PC : Lien

    Par rapport au P2P : Lien

    Voici un dossier complet (A lire avec Adobe Reader ou Foxit Reader) : Lien


    ==Problème résolu ?==

    Si tu estimes que ton problème est résolu :

    ---> Ajoute maintenant [Résolu] au titre. Pour cela :
  • Clique, dans ton premier message, sur le bouton Editer .
  • Rajoute la mention [Résolu] devant le titre.
  • Clique ensuite sur Valider votre message.


    Sois plus vigilant(e) sur Internet ;) 

    [ Rapport ToolsCleaner version 2.3.2 (par A.Rothstein & dj QUIOU) ]

    -->- Recherche:

    C:\Combofix.txt: trouvé !
    C:\fixnavi.txt: trouvé !
    C:\cleannavi.txt: trouvé !
    C:\TB.txt: trouvé !
    C:\Combofix: trouvé !
    C:\_OtMoveIt: trouvé !
    C:\Toolbar SD: trouvé !
    C:\Rsit: trouvé !
    C:\Documents and Settings\rockmyroot.ORDINATEUR\Bureau\ToolBarSD.exe: trouvé !
    C:\Documents and Settings\rockmyroot.ORDINATEUR\Bureau\OTMoveIt3.exe: trouvé !
    C:\Program Files\Navilog1: trouvé !
    C:\Program Files\trend micro\HijackThis.exe: trouvé !
    C:\Program Files\trend micro\hijackthis.log: trouvé !

    ---------------------------------
    -->- Suppression:

    C:\Documents and Settings\rockmyroot.ORDINATEUR\Bureau\ToolBarSD.exe: supprimé !
    C:\Program Files\trend micro\HijackThis.exe: supprimé !
    C:\Combofix.txt: supprimé !
    C:\fixnavi.txt: supprimé !
    C:\cleannavi.txt: supprimé !
    C:\TB.txt: supprimé !
    C:\Documents and Settings\rockmyroot.ORDINATEUR\Bureau\OTMoveIt3.exe: supprimé !
    C:\Program Files\trend micro\hijackthis.log: supprimé !
    C:\Combofix: supprimé !
    C:\_OtMoveIt: supprimé !
    C:\Toolbar SD: supprimé !
    C:\Rsit: supprimé !
    C:\Program Files\Navilog1: supprimé !
    Lassé par la pub ? Créez un compte

    Créer un nouveau sujet

    Tom's guide dans le monde