desinfection sysbus

voila mes rapports

mitFraudFix v2.107

Rapport fait à 19:29:16,35, 10/10/2006
Executé à partir de C:\Documents and Settings\fabien\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Fix executé en mode normal

»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

C:\WINDOWS\system32\AdService.dll PRESENT !
C:\WINDOWS\system32\dcom_19.dll PRESENT !
C:\WINDOWS\system32\dcom_20.dll PRESENT !
C:\WINDOWS\system32\dcom_21.dll PRESENT !
C:\WINDOWS\system32\interf.tlb PRESENT !
C:\WINDOWS\system32\ot.ico PRESENT !
C:\WINDOWS\system32\1024\ PRESENT !

»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\fabien


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\fabien\Application Data

C:\Documents and Settings\fabien\Application Data\Install.dat PRESENT !

»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer

C:\DOCUME~1\ALLUSE~1\MENUDM~1\Online Security Guide.url PRESENT !
C:\DOCUME~1\ALLUSE~1\MENUDM~1\Security Troubleshooting.url PRESENT !

»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\fabien\Favoris

C:\DOCUME~1\fabien\Favoris\Antivirus Test Online.url PRESENT !

»»»»»»»»»»»»»»»»»»»»»»»» Bureau


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

C:\Program Files\SpywareQuake.com\ PRESENT !

»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues


»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Ma page d'accueil"


»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{E2CA7CD1-1AD9-F1C4-3D2A-DC1A33E7AF9D}"="USB Ware"



»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" c:\\windows\\system32\\svchost.dll c:\\windows\\system32\\explorer.dll MsgPlusLoader.dll C:\\WINDOWS\\system32\\logonui.dll "


»»»»»»»»»»»»»»»»»»»»»»»» pe386-msguard-lzx32


»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin


SmitFraudFix v2.107

Rapport fait à 19:33:39,73, 10/10/2006
Executé à partir de C:\Documents and Settings\fabien\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Fix executé en mode sans echec

»»»»»»»»»»»»»»»»»»»»»»»» Avant SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{E2CA7CD1-1AD9-F1C4-3D2A-DC1A33E7AF9D}"="USB Ware"


»»»»»»»»»»»»»»»»»»»»»»»» Arret des processus


»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

GenericRenosFix by S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés

C:\WINDOWS\system32\AdService.dll supprimé
C:\WINDOWS\system32\dcom_19.dll supprimé
C:\WINDOWS\system32\dcom_20.dll supprimé
C:\WINDOWS\system32\dcom_21.dll supprimé
C:\WINDOWS\system32\interf.tlb supprimé
C:\WINDOWS\system32\ot.ico supprimé
C:\WINDOWS\system32\1024\ supprimé
C:\Documents and Settings\fabien\Application Data\Install.dat supprimé
C:\DOCUME~1\fabien\Favoris\Antivirus Test Online.url supprimé
C:\DOCUME~1\ALLUSE~1\MENUDM~1\Online Security Guide.url supprimé
C:\DOCUME~1\ALLUSE~1\MENUDM~1\Security Troubleshooting.url supprimé
C:\Program Files\SpywareQuake.com\ supprimé

»»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires


»»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre

Nettoyage terminé.

»»»»»»»»»»»»»»»»»»»»»»»» Après SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin

Logfile of HijackThis v1.99.1
Scan saved at 20:04:26, on 10/10/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
D:\bluetooth\bin\btwdins.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\CA\SharedComponents\CA_LIC\LogWatNT.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\niSvcLoc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RunDll32.exe
C:\WINDOWS\Dit.exe
C:\WINDOWS\mHotkey.exe
C:\WINDOWS\CNYHKey.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Medion Home Cinema XL II\PowerCinema\PCMService.exe
C:\Program Files\Logitech\Video\LogiTray.exe
D:\nokia\Nokia PC Suite 6\Launch Application 2.exe
C:\PROGRA~1\FICHIE~1\PCSuite\DATALA~1\DATALA~1.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
D:\Pinnacle\Shared Files\Programs\USBTip\USBTip.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\icpldrvx.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\LVComS.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\PROGRA~1\FICHIE~1\PCSuite\Services\SERVIC~1.EXE
D:\nokia\Nokia PC Suite 6\PcSync2.exe
C:\WINDOWS\DitExp.exe
C:\WINDOWS\YMBOLS~1\taskmgr.exe
C:\WINDOWS\system32\CROSOF~1\MIEXEC~1.EXE
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
D:\bluetooth\BTTray.exe
D:\appareil photo\Monitor.exe
C:\PROGRA~1\FICHIE~1\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Mio Technology\MioSync\mioSync.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\WINDOWS\System32\HPZipm12.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\Documents and Settings\fabien\Bureau\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchURL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchURL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page_bak = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {C9DB94F1-581D-66A0-62ED-5580093F52C1} - C:\WINDOWS\system32\buz.dll
R3 - URLSearchHook: (no name) - {FCF6A4F1-752E-5394-4FDD-65AD390F7FF1} - C:\WINDOWS\system32\buz.dll
O2 - BHO: (no name) - {170C676D-E6E7-9A05-8C51-AD31C0AB9DA5} - C:\WINDOWS\system32\lfyq.dll (file missing)
O2 - BHO: (no name) - {1A24F139-70ED-0208-DBDD-35F8BC1DC1AB} - C:\WINDOWS\system32\ascnoh.dll (file missing)
O2 - BHO: (no name) - {43826150-B58E-903D-B0AC-A7D11EC79BA5} - C:\WINDOWS\system32\fagfbm.dll (file missing)
O2 - BHO: (no name) - {49F1D1DD-500B-7FE4-3ACA-140A63CBC6AC} - C:\WINDOWS\system32\zsw.dll (file missing)
O2 - BHO: (no name) - {7038C5F8-4420-3795-12B5-036BA5ADFAF5} - C:\WINDOWS\system32\yqkpaocy.dll (file missing)
O2 - BHO: (no name) - {739F52FC-D97C-AF9F-1A12-C94757EDA0AF} - C:\WINDOWS\system32\wpzbuzr.dll (file missing)
O2 - BHO: (no name) - {8B7F6853-F7EB-CC5A-CF49-FFBAAA671AC5} - C:\WINDOWS\system32\hnbab.dll
O2 - BHO: (no name) - {96B0C33A-41E6-6257-819D-543E70ED13F3} - C:\WINDOWS\system32\wcqxfcgn.dll (file missing)
O2 - BHO: (no name) - {9AD896F0-5A1D-30F7-6CED-558009395591} - C:\WINDOWS\system32\xatl.dll
O2 - BHO: (no name) - {B0545E51-8385-FB3D-E579-CF979A5736A7} - C:\WINDOWS\system32\ruhkrqg.dll (file missing)
O2 - BHO: (no name) - {BD545E54-83D1-FF6B-E479-CF979A0F35F4} - C:\WINDOWS\system32\vvc.dll (file missing)
O2 - BHO: (no name) - {BD62DAD5-5701-20BC-36E7-46DFFE3338A3} - C:\WINDOWS\system32\zbnkyi.dll (file missing)
O2 - BHO: (no name) - {C01AC926-16FB-601F-CDBF-537ED4C115F0} - C:\WINDOWS\system32\zfhnbv.dll (file missing)
O2 - BHO: (no name) - {C9DB94F1-581D-66A0-62ED-5580093F52C1} - C:\WINDOWS\system32\buz.dll
O2 - BHO: (no name) - {D2BA13A0-C329-EDCD-13B4-D35676BF04A5} - C:\WINDOWS\system32\wel.dll (file missing)
O2 - BHO: (no name) - {D531D0D3-095B-27BD-3DC4-44CFAF410AA7} - C:\WINDOWS\system32\ceszxrgj.dll (file missing)
O2 - BHO: (no name) - {DA04942B-4FFC-3047-C0F0-079B9AA409FA} - C:\WINDOWS\system32\natzs.dll (file missing)
O2 - BHO: (no name) - {DE4AFD8F-285E-5AE6-3217-6C3DD01059F4} - C:\WINDOWS\system32\tlcrcom.dll (file missing)
O2 - BHO: (no name) - {DF35D783-0F08-20B7-6CC4-44CFAF415BA0} - C:\WINDOWS\system32\ioojdq.dll (file missing)
O2 - BHO: (no name) - {E074B72B-34AB-4540-C998-21A9B9D664A3} - C:\WINDOWS\system32\ymytbu.dll (file missing)
O2 - BHO: (no name) - {FCF6A4F1-752E-5394-4FDD-65AD390F7FF1} - C:\WINDOWS\system32\buz.dll
O2 - BHO: (no name) - {FE796A6D-B6B7-915D-DE88-A001B35C29F5} - C:\WINDOWS\system32\fohg.dll (file missing)
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [Dit] Dit.exe
O4 - HKLM\..\Run: [CHotkey] mHotkey.exe
O4 - HKLM\..\Run: [ledpointer] CNYHKey.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Medion Home Cinema XL II\PowerCinema\PCMService.exe"
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\\PSDrvCheck.exe
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [PCSuiteTrayApplication] D:\nokia\Nokia PC Suite 6\Launch Application 2.exe -onlytray
O4 - HKLM\..\Run: [DataLayer] C:\PROGRA~1\FICHIE~1\PCSuite\DATALA~1\DATALA~1.EXE
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [USB2Check] RUNDLL32.EXE "C:\WINDOWS\system32\PCLECoInst.dll",CheckUSBController
O4 - HKLM\..\Run: [USBToolTip] "D:\Pinnacle\Shared Files\Programs\USBTip\USBTip.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [AdslTaskBar] rundll32.exe stmctrl.dll,TaskBar
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [.nvsvc] C:\WINDOWS\system\smss.exe /w
O4 - HKLM\..\Run: [Avg Antivirus] C:\WINDOWS\system32\icpldrvx.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [PcSync] D:\nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [Udot] "C:\WINDOWS\YMBOLS~1\taskmgr.exe" -vt mt
O4 - HKCU\..\Run: [Exlt] C:\WINDOWS\system32\CROSOF~1\MIEXEC~1.EXE
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Digital Image Monitor.lnk = ?
O4 - Global Startup: hp psc 2000 Series.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: MioSync.lnk = C:\Program Files\Mio Technology\MioSync\mioSync.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Envoyer à &Bluetooth - D:\bluetooth\btsendto_ie_ctx.htm
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Download5000 Toolbar - {9D931726-DFBC-480e-851A-20C397E1A2C8} - (no file)
O9 - Extra 'Tools' menuitem: Download5000 Toolbar - {9D931726-DFBC-480e-851A-20C397E1A2C8} - (no file)
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - D:\bluetooth\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - D:\bluetooth\btsendto_ie.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://ptit57.spaces.live.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClie...
O17 - HKLM\System\CCS\Services\Tcpip\..\{656EE83A-2D88-4A59-BFD1-48627A9A6B52}: NameServer = 212.151.137.170 212.151.136.246
O18 - Protocol: bw+0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O18 - Protocol: offline-8876480 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - AppInit_DLLs: c:\windows\system32\svchost.dll c:\windows\system32\explorer.dll MsgPlusLoader.dll C:\WINDOWS\system32\logonui.dll
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: winmxw32 - C:\WINDOWS\SYSTEM32\winmxw32.dll
O21 - SSODL: HjFFTeJvuY - {00932A32-AA39-8098-9A59-010449DF97EB} - C:\WINDOWS\system32\zsa.dll (file missing)
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - D:\bluetooth\bin\btwdins.exe
O23 - Service: Client de licence CA (CA_LIC_CLNT) - Computer Associates - C:\Program Files\CA\SharedComponents\CA_LIC\lic98rmt.exe
O23 - Service: Serveur de licence CA (CA_LIC_SRVR) - Computer Associates - C:\Program Files\CA\SharedComponents\CA_LIC\lic98rmtd.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Event Log Watch (LogWatch) - Computer Associates - C:\Program Files\CA\SharedComponents\CA_LIC\LogWatNT.exe
O23 - Service: NILM License manager - Macrovision Corporation - D:\labview\Shared\License Manager\Bin\lmgrd.exe
O23 - Service: NI Service Locator (niSvcLoc) - National Instruments - C:\WINDOWS\system32\niSvcLoc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe

Bonjour,

Bien infecte !

Télécharge puis installe AVG Anti-Spyware (AVG AS)
Une fois AVG AS lancé, clique sur "Mise à jour"
Ferme le programme.

Redémarre en mode sans échec

Relance AVG AS puis choisis l'onglet "Analyse"
Puis l'onglet "Paramètres"
Sous la question "Comment réagir ?", clique sur "Actions recommandées" et choisis "Quarantaine"
Re-clique sur l'onglet "Analyse" puis réalise une "Analyse complète du système"

/!\ Si un fichier est infecté en fin d'analyse /!\
Clique sur "Appliquer toutes les actions "

Clique sur "Enregistrer le rapport" puis sur "Enregistrer le rapport sous"
Enregistre ce fichier texte sur ton bureau.

Redémarre normalement
Copie/Colle le rapport ici.

oki je v faire ca et je te copie le rapport merci bcp

voila mon rapport merci d'avance car tu vas te casser la tete vu le nombre d objets infectés
pourtant jai mac afee securité et le firwall windows je comprend pas


---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

+ Créé à: 20:28:57 12/10/2006

+ Résultat de l'analyse:



C:\Documents and Settings\gilbert\Local Settings\Temp\!update.exe -> Adware.ClickSpring : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\Sуmantec\mshta.exe -> Adware.ClickSpring : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Downloaded Program Files\MediaTicketsInstaller.ocx -> Adware.MediaTickets : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\mtuninst.exe -> Adware.MediaTickets : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\gilbert\Mes documents\ѕystem32\nѕlookup.exe -> Adware.PurityScan : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\ѕecurity\mѕconfig.exe -> Adware.PurityScan : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{599EDC6E-19FB-41C2-953E-AB199ED6920E}\RP370\A0091188.exe -> Adware.PurityScan : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{599EDC6E-19FB-41C2-953E-AB199ED6920E}\RP370\A0091194.dll -> Adware.PurityScan : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{599EDC6E-19FB-41C2-953E-AB199ED6920E}\RP371\A0091327.dll -> Adware.PurityScan : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{599EDC6E-19FB-41C2-953E-AB199ED6920E}\RP377\A0094604.dll -> Adware.PurityScan : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{599EDC6E-19FB-41C2-953E-AB199ED6920E}\RP378\A0094666.dll -> Adware.PurityScan : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{599EDC6E-19FB-41C2-953E-AB199ED6920E}\RP378\A0095726.dll -> Adware.PurityScan : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{599EDC6E-19FB-41C2-953E-AB199ED6920E}\RP381\A0095853.dll -> Adware.PurityScan : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{599EDC6E-19FB-41C2-953E-AB199ED6920E}\RP382\A0095906.dll -> Adware.PurityScan : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{599EDC6E-19FB-41C2-953E-AB199ED6920E}\RP390\A0100831.dll -> Adware.PurityScan : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{599EDC6E-19FB-41C2-953E-AB199ED6920E}\RP390\A0100832.exe -> Adware.PurityScan : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{599EDC6E-19FB-41C2-953E-AB199ED6920E}\RP393\A0100912.dll -> Adware.PurityScan : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{599EDC6E-19FB-41C2-953E-AB199ED6920E}\RP402\A0101483.dll -> Adware.PurityScan : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{599EDC6E-19FB-41C2-953E-AB199ED6920E}\RP408\A0102805.dll -> Adware.PurityScan : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{599EDC6E-19FB-41C2-953E-AB199ED6920E}\RP416\A0110332.dll -> Adware.PurityScan : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{599EDC6E-19FB-41C2-953E-AB199ED6920E}\RP424\A0112806.dll -> Adware.PurityScan : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{599EDC6E-19FB-41C2-953E-AB199ED6920E}\RP430\A0116406.dll -> Adware.PurityScan : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{599EDC6E-19FB-41C2-953E-AB199ED6920E}\RP430\A0116515.dll -> Adware.PurityScan : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{599EDC6E-19FB-41C2-953E-AB199ED6920E}\RP430\A0116516.dll -> Adware.PurityScan : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{599EDC6E-19FB-41C2-953E-AB199ED6920E}\RP430\A0116517.dll -> Adware.PurityScan : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\system32\buz.dll -> Adware.PurityScan : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\system32\hnbab.dll -> Adware.PurityScan : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\system32\xatl.dll -> Adware.PurityScan : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\system32\Міcrosoft\mѕiexec.exe -> Adware.PurityScan : Nettoyé et sauvegardé (mise en quarantaine).
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MediaTickets -> Adware.PurityScan : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{599EDC6E-19FB-41C2-953E-AB199ED6920E}\RP386\A0098582.dll -> Adware.SaveNow : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{599EDC6E-19FB-41C2-953E-AB199ED6920E}\RP386\A0098583.exe -> Adware.SaveNow : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{599EDC6E-19FB-41C2-953E-AB199ED6920E}\RP386\A0098584.exe -> Adware.SaveNow : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{599EDC6E-19FB-41C2-953E-AB199ED6920E}\RP386\A0098585.exe -> Adware.SaveNow : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{599EDC6E-19FB-41C2-953E-AB199ED6920E}\RP430\A0116465.dll -> Backdoor.Agent.uu : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\winDB16.tmp -> Backdoor.Madtro : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddl4044.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddl4CAC.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddl564B.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddl585A.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddl5960.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddl65C6.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddl667F.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddl685C.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddl6BC2.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddl74C1.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddl74E0.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddl7CC6.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddl8BF3.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddl987B.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddl9AA3.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddl9FEA.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlA2AA.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlAB5E.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlAE9B.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlB0CA.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlB7EB.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlBEDA.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlD093.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlD4A3.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlD4AF.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlD4B9.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlD63B.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlD645.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlD652.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlD6B0.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlD70E.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlD76E.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlD7C7.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlD7CB.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlD7D0.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlD7D5.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlD7E0.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlD7F1.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlD818.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlD819.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlD843.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlD85E.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlD85F.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlD864.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlD890.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlD894.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlD8D2.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlD8FD.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlD905.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlD910.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlD920.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlD968.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlD9A8.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlD9EB.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlDA32.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlDA70.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlDA8A.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlDA97.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlDAD5.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlDB16.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlDB17.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlDB5D.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlDC4B.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlDC53.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlDC5F.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlDC68.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlDC74.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlDC7C.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlDC88.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlDC91.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlDC9D.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlDCA6.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlDCB7.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlDD17.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlDD2E.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlDD3D.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlDD4D.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlDEA0.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\ddlDEEE.tmp.exe -> Dialer.Agent.z : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\sdl36A6.tmp.exe -> Dialer.Generic : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{599EDC6E-19FB-41C2-953E-AB199ED6920E}\RP427\A0114174.exe -> Downloader.Agent.aii : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\anne\Local Settings\Temp\31exhdd.c.exe -> Downloader.Horst.a : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\anne\Local Settings\Temp\38exhdd.c.exe -> Downloader.Horst.a : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\anne\Local Settings\Temp\58exhdd.c.exe -> Downloader.Horst.a : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\anne\Local Settings\Temp\69exhdd.c.exe -> Downloader.Horst.a : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\winres.dl$ -> Downloader.IstBar.eq : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{599EDC6E-19FB-41C2-953E-AB199ED6920E}\RP430\A0116526.exe -> Downloader.PurityScan.bt : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\fabien\Local Settings\Temporary Internet Files\Content.IE5\W12FOPIB\!update-4295[1].0000 -> Downloader.PurityScan.co : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\gilbert\Local Settings\Temporary Internet Files\Content.IE5\8HQ7K9AZ\!update-4095[1].0000 -> Downloader.PurityScan.co : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{599EDC6E-19FB-41C2-953E-AB199ED6920E}\RP431\A0116698.exe -> Downloader.PurityScan.co : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{599EDC6E-19FB-41C2-953E-AB199ED6920E}\RP431\A0116783.exe -> Downloader.PurityScan.co : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\!update.exe -> Downloader.PurityScan.co : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\ѕуstem\attrib.exe -> Downloader.PurityScan.co : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\winsysupd3.exe -> Downloader.Small : Nettoyé et sauvegardé (mise en quarantaine).
C:\quarantine\rdgFR2404[1].exe.Vir -> Downloader.Small.ayl : Nettoyé et sauvegardé (mise en quarantaine).
C:\quarantine\rdgFR2404[1].exe.Vir.0 -> Downloader.Small.ayl : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{599EDC6E-19FB-41C2-953E-AB199ED6920E}\RP430\A0116468.tlb -> Downloader.Zlob.lg : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\gilbert\Local Settings\Temp\p2p.exe -> Dropper.Agent.ajs : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\gilbert\Local Settings\Temp\2222.exe -> Dropper.Agent.ako : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\anne\Local Settings\Temp\2222.exe -> Dropper.Agent.aqc : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{599EDC6E-19FB-41C2-953E-AB199ED6920E}\RP430\A0116524.exe -> Logger.Banker.byu : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\anne\Local Settings\Temp\11exssd32.9.exe -> Proxy.Horst.eq : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\anne\Local Settings\Temp\16exssd32.9.exe -> Proxy.Horst.eq : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\anne\Local Settings\Temp\17exssd32.9.exe -> Proxy.Horst.eq : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\anne\Local Settings\Temp\1exssd32.9.exe -> Proxy.Horst.eq : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\anne\Local Settings\Temp\27exssd32.9.exe -> Proxy.Horst.eq : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\anne\Local Settings\Temp\33exssd32.9.exe -> Proxy.Horst.eq : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\anne\Local Settings\Temp\38exssd32.9.exe -> Proxy.Horst.eq : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\anne\Local Settings\Temp\46exssd32.9.exe -> Proxy.Horst.eq : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\anne\Local Settings\Temp\54exssd32.9.exe -> Proxy.Horst.eq : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\anne\Local Settings\Temp\70exssd32.9.exe -> Proxy.Horst.eq : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\anne\Local Settings\Temp\96exssd32.9.exe -> Proxy.Horst.eq : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\anne\Local Settings\Temp\97exssd32.9.exe -> Proxy.Horst.eq : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\anne\Local Settings\Temp\tmp1.tmp -> Proxy.Horst.kc : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\gilbert\Local Settings\Temp\tmp1.tmp -> Proxy.Horst.kc : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{599EDC6E-19FB-41C2-953E-AB199ED6920E}\RP430\A0116525.exe -> Proxy.Horst.kc : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\anne\Local Settings\Temp\16exmodul32d.c.exe -> Proxy.Horst.ki : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\anne\Local Settings\Temp\18exmodul32d.c.exe -> Proxy.Horst.ki : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\anne\Local Settings\Temp\41exmodul32d.c.exe -> Proxy.Horst.ki : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\anne\Local Settings\Temp\4exmodul32d.c.exe -> Proxy.Horst.ki : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\anne\Local Settings\Temp\67exmodul32d.c.exe -> Proxy.Horst.ki : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\anne\Local Settings\Temp\75exmodul32d.c.exe -> Proxy.Horst.ki : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\anne\Local Settings\Temp\10exmodul32e.b.exe -> Proxy.Horst.kk : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\anne\Local Settings\Temp\43exmodul32e.b.exe -> Proxy.Horst.kk : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\anne\Local Settings\Temp\5exmodul32e.b.exe -> Proxy.Horst.kk : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\anne\Local Settings\Temp\60exmodul32e.b.exe -> Proxy.Horst.kk : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\anne\Local Settings\Temp\65exmodul32e.b.exe -> Proxy.Horst.kk : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\anne\Local Settings\Temp\73exmodul32e.b.exe -> Proxy.Horst.kk : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\anne\Local Settings\Temp\75exmodul32e.b.exe -> Proxy.Horst.kk : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\anne\Local Settings\Temp\7exmodul32e.a.exe -> Proxy.Horst.kk : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\anne\Local Settings\Temp\89exmodul32e.a.exe -> Proxy.Horst.kk : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\anne\Local Settings\Temp\92exmodul32e.b.exe -> Proxy.Horst.kk : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\anne\Local Settings\Temp\95exmodul32e.b.exe -> Proxy.Horst.kk : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{599EDC6E-19FB-41C2-953E-AB199ED6920E}\RP430\A0116451.dll -> Proxy.Xmiler.a : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{599EDC6E-19FB-41C2-953E-AB199ED6920E}\RP430\A0116466.dll -> Proxy.Xmiler.b : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\fabien\Cookies\fabien@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\fabien\Cookies\fabien@adtech[2].txt -> TrackingCookie.Adtech : Nettoyé.
C:\Documents and Settings\anne\Cookies\anne@bluestreak[1].txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\fabien\Cookies\fabien@bluestreak[1].txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\anne\Cookies\anne@estat[1].txt -> TrackingCookie.Estat : Nettoyé.
C:\Documents and Settings\anne\Cookies\anne@as1.falkag[2].txt -> TrackingCookie.Falkag : Nettoyé.
C:\Documents and Settings\anne\Cookies\anne@serving-sys[2].txt -> TrackingCookie.Serving-sys : Nettoyé.
C:\Documents and Settings\fabien\Cookies\fabien@serving-sys[1].txt -> TrackingCookie.Serving-sys : Nettoyé.
C:\Documents and Settings\anne\Cookies\anne@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\fabien\Cookies\fabien@www.smartadserver[2].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\anne\Cookies\anne@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\fabien\Cookies\fabien@weborama[1].txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\fabien\Cookies\fabien@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Nettoyé.
C:\System Volume Information\_restore{599EDC6E-19FB-41C2-953E-AB199ED6920E}\RP430\A0116464.dll -> Trojan.Agent.og : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\win1EEE.tmp -> Trojan.Agent.og : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{599EDC6E-19FB-41C2-953E-AB199ED6920E}\RP430\A0116449.dll -> Trojan.Agent.pk : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{599EDC6E-19FB-41C2-953E-AB199ED6920E}\RP430\A0116452.dll -> Trojan.Agent.pk : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{599EDC6E-19FB-41C2-953E-AB199ED6920E}\RP430\A0116467.dll -> Trojan.Agent.pk : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\hosts -> Trojan.Qhosts.HE : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{599EDC6E-19FB-41C2-953E-AB199ED6920E}\RP430\A0116450.dll -> Trojan.Spambot : Nettoyé et sauvegardé (mise en quarantaine).


Fin du rapport

Re,

Télécharge VundoFix.exe (par Atribune) sur ton Bureau.

Double-clique VundoFix.exe afin de le lancer

Clique sur le bouton Scan for Vundo

Lorsque le scan est complété, clique sur le bouton Remove Vundo

Une invite te demandera si tu veux supprimer les fichiers, clique YES

Après avoir cliqué "Yes", le Bureau disparaîtra un moment lors de la suppression des fichiers

Tu verras une invite qui t'annonce que ton PC va redémarrer; clique OK

Copie/colle le contenu du rapport situé dans C:\vundofix.txt ainsi qu'un nouveau rapport HijackThis! dans ta prochaine réponse

Note: Il est possible que VundoFix soit confronté à un fichier qu'il ne peut supprimer. Si tel est le cas, l'outil se lancera au prochain redémarrage; il faut simplement suivre les instructions ci-haut, à partir de "clique sur le bouton Scan for Vundo".

Télécharge combofix.exe (par sUBs) sur ton Bureau

Double clique combofix.exe et suis les invites.

Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.

RE,


VundoFix V6.2.1

Checking Java version...

Sun Java not detected
Scan started at 21:12:38 12/10/2006

Listing files found while scanning....

No infected files were found.


Beginning removal...


Logfile of HijackThis v1.99.1
Scan saved at 21:26:33, on 12/10/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
D:\bluetooth\bin\btwdins.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\niSvcLoc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RunDll32.exe
C:\WINDOWS\Dit.exe
C:\WINDOWS\mHotkey.exe
C:\WINDOWS\CNYHKey.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Medion Home Cinema XL II\PowerCinema\PCMService.exe
C:\Program Files\Logitech\Video\LogiTray.exe
D:\nokia\Nokia PC Suite 6\Launch Application 2.exe
C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
C:\PROGRA~1\FICHIE~1\PCSuite\DATALA~1\DATALA~1.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
C:\WINDOWS\DitExp.exe
C:\WINDOWS\System32\LVComS.exe
D:\Pinnacle\Shared Files\Programs\USBTip\USBTip.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\PROGRA~1\FICHIE~1\PCSuite\Services\SERVIC~1.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
D:\nokia\Nokia PC Suite 6\PcSync2.exe
C:\WINDOWS\system32\wuauclt.exe
C:\PROGRA~1\FICHIE~1\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
D:\bluetooth\BTTray.exe
D:\appareil photo\Monitor.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Mio Technology\MioSync\mioSync.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\WINDOWS\System32\HPZipm12.exe
C:\Documents and Settings\fabien\Bureau\HijackThis.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchURL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchURL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page_bak = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {C9DB94F1-581D-66A0-62ED-5580093F52C1} - C:\WINDOWS\system32\buz.dll (file missing)
R3 - URLSearchHook: (no name) - {FCF6A4F1-752E-5394-4FDD-65AD390F7FF1} - C:\WINDOWS\system32\buz.dll (file missing)
O2 - BHO: (no name) - {170C676D-E6E7-9A05-8C51-AD31C0AB9DA5} - C:\WINDOWS\system32\lfyq.dll (file missing)
O2 - BHO: (no name) - {1A24F139-70ED-0208-DBDD-35F8BC1DC1AB} - C:\WINDOWS\system32\ascnoh.dll (file missing)
O2 - BHO: (no name) - {43826150-B58E-903D-B0AC-A7D11EC79BA5} - C:\WINDOWS\system32\fagfbm.dll (file missing)
O2 - BHO: (no name) - {49F1D1DD-500B-7FE4-3ACA-140A63CBC6AC} - C:\WINDOWS\system32\zsw.dll (file missing)
O2 - BHO: (no name) - {7038C5F8-4420-3795-12B5-036BA5ADFAF5} - C:\WINDOWS\system32\yqkpaocy.dll (file missing)
O2 - BHO: (no name) - {739F52FC-D97C-AF9F-1A12-C94757EDA0AF} - C:\WINDOWS\system32\wpzbuzr.dll (file missing)
O2 - BHO: (no name) - {8B7F6853-F7EB-CC5A-CF49-FFBAAA671AC5} - C:\WINDOWS\system32\hnbab.dll (file missing)
O2 - BHO: (no name) - {96B0C33A-41E6-6257-819D-543E70ED13F3} - C:\WINDOWS\system32\wcqxfcgn.dll (file missing)
O2 - BHO: (no name) - {9AD896F0-5A1D-30F7-6CED-558009395591} - C:\WINDOWS\system32\xatl.dll (file missing)
O2 - BHO: (no name) - {B0545E51-8385-FB3D-E579-CF979A5736A7} - C:\WINDOWS\system32\ruhkrqg.dll (file missing)
O2 - BHO: (no name) - {BD545E54-83D1-FF6B-E479-CF979A0F35F4} - C:\WINDOWS\system32\vvc.dll (file missing)
O2 - BHO: (no name) - {BD62DAD5-5701-20BC-36E7-46DFFE3338A3} - C:\WINDOWS\system32\zbnkyi.dll (file missing)
O2 - BHO: (no name) - {C01AC926-16FB-601F-CDBF-537ED4C115F0} - C:\WINDOWS\system32\zfhnbv.dll (file missing)
O2 - BHO: (no name) - {C9DB94F1-581D-66A0-62ED-5580093F52C1} - C:\WINDOWS\system32\buz.dll (file missing)
O2 - BHO: (no name) - {D2BA13A0-C329-EDCD-13B4-D35676BF04A5} - C:\WINDOWS\system32\wel.dll (file missing)
O2 - BHO: (no name) - {D531D0D3-095B-27BD-3DC4-44CFAF410AA7} - C:\WINDOWS\system32\ceszxrgj.dll (file missing)
O2 - BHO: (no name) - {DA04942B-4FFC-3047-C0F0-079B9AA409FA} - C:\WINDOWS\system32\natzs.dll (file missing)
O2 - BHO: (no name) - {DE4AFD8F-285E-5AE6-3217-6C3DD01059F4} - C:\WINDOWS\system32\tlcrcom.dll (file missing)
O2 - BHO: (no name) - {DF35D783-0F08-20B7-6CC4-44CFAF415BA0} - C:\WINDOWS\system32\ioojdq.dll (file missing)
O2 - BHO: (no name) - {E074B72B-34AB-4540-C998-21A9B9D664A3} - C:\WINDOWS\system32\ymytbu.dll (file missing)
O2 - BHO: (no name) - {FCF6A4F1-752E-5394-4FDD-65AD390F7FF1} - C:\WINDOWS\system32\buz.dll (file missing)
O2 - BHO: (no name) - {FE796A6D-B6B7-915D-DE88-A001B35C29F5} - C:\WINDOWS\system32\fohg.dll (file missing)
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [Dit] Dit.exe
O4 - HKLM\..\Run: [CHotkey] mHotkey.exe
O4 - HKLM\..\Run: [ledpointer] CNYHKey.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Medion Home Cinema XL II\PowerCinema\PCMService.exe"
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\\PSDrvCheck.exe
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [PCSuiteTrayApplication] D:\nokia\Nokia PC Suite 6\Launch Application 2.exe -onlytray
O4 - HKLM\..\Run: [DataLayer] C:\PROGRA~1\FICHIE~1\PCSuite\DATALA~1\DATALA~1.EXE
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [USB2Check] RUNDLL32.EXE "C:\WINDOWS\system32\PCLECoInst.dll",CheckUSBController
O4 - HKLM\..\Run: [USBToolTip] "D:\Pinnacle\Shared Files\Programs\USBTip\USBTip.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [AdslTaskBar] rundll32.exe stmctrl.dll,TaskBar
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [PcSync] D:\nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [Udot] "C:\WINDOWS\system32\ICROSO~1.NET\notepad.exe" -vt ndrv
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Digital Image Monitor.lnk = ?
O4 - Global Startup: hp psc 2000 Series.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: MioSync.lnk = C:\Program Files\Mio Technology\MioSync\mioSync.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Envoyer à &Bluetooth - D:\bluetooth\btsendto_ie_ctx.htm
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Download5000 Toolbar - {9D931726-DFBC-480e-851A-20C397E1A2C8} - (no file)
O9 - Extra 'Tools' menuitem: Download5000 Toolbar - {9D931726-DFBC-480e-851A-20C397E1A2C8} - (no file)
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - D:\bluetooth\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - D:\bluetooth\btsendto_ie.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://ptit57.spaces.live.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClie...
O18 - Protocol: bw+0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O18 - Protocol: offline-8876480 - {0D71B0AB-2EB2-4024-8E3D-A93FCA8CE471} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - AppInit_DLLs: c:\windows\system32\svchost.dll c:\windows\system32\explorer.dll MsgPlusLoader.dll C:\WINDOWS\system32\logonui.dll
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: winmxw32 - C:\WINDOWS\SYSTEM32\winmxw32.dll
O21 - SSODL: HjFFTeJvuY - {00932A32-AA39-8098-9A59-010449DF97EB} - C:\WINDOWS\system32\zsa.dll (file missing)
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - D:\bluetooth\bin\btwdins.exe
O23 - Service: Client de licence CA (CA_LIC_CLNT) - Unknown owner - C:\Program Files\CA\SharedComponents\CA_LIC\lic98rmt.exe (file missing)
O23 - Service: Serveur de licence CA (CA_LIC_SRVR) - Unknown owner - C:\Program Files\CA\SharedComponents\CA_LIC\lic98rmtd.exe (file missing)
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Event Log Watch (LogWatch) - Unknown owner - C:\Program Files\CA\SharedComponents\CA_LIC\LogWatNT.exe (file missing)
O23 - Service: NILM License manager - Macrovision Corporation - D:\labview\Shared\License Manager\Bin\lmgrd.exe
O23 - Service: NI Service Locator (niSvcLoc) - National Instruments - C:\WINDOWS\system32\niSvcLoc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe



fabien - 06-10-12 21:27:17,82 Service Pack 2
ComboFix 06.10.12 - Running from: "C:\Documents and Settings\fabien\Bureau"

(((((((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))



~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ Purity ~ ~ ~ ~ ~ ~ ~ ~~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~

Folders Quarantined:

C:\QooBox\Purity\Documents and Settings\fabien\Application Data\CURITY~1
C:\QooBox\Purity\Documents and Settings\fabien\Application Data\FNTS~1
C:\QooBox\Purity\Documents and Settings\fabien\Application Data\RACLE~1
C:\QooBox\Purity\Documents and Settings\fabien\Application Data\SCURIT~1
C:\QooBox\Purity\Documents and Settings\fabien\Application Data\SSTEM3~1
C:\QooBox\Purity\Documents and Settings\fabien\Application Data\YMBOLS~1
C:\QooBox\Purity\Program Files\CROSOF~1
C:\QooBox\Purity\Program Files\ECURIT~1
C:\QooBox\Purity\Program Files\PPATCH~1
C:\QooBox\Purity\Program Files\SMANTE~1
C:\QooBox\Purity\Program Files\TSKS~1
C:\QooBox\Purity\Program Files\SMANTE~1\SMANTE~1
C:\QooBox\Purity\WINDOWS\MBOLS~1
C:\QooBox\Purity\WINDOWS\PPPATC~1
C:\QooBox\Purity\WINDOWS\STEM~1
C:\QooBox\Purity\WINDOWS\WNSXS~1
C:\QooBox\Purity\WINDOWS\STEM~1\??stem
C:\QooBox\Purity\WINDOWS\system32\CROSOF~1
C:\QooBox\Purity\WINDOWS\system32\FNTS~1
C:\QooBox\Purity\WINDOWS\system32\ICROSO~1.NET
C:\QooBox\Purity\WINDOWS\system32\RACLE~1
C:\QooBox\Purity\WINDOWS\system32\SEMBLY~1
C:\QooBox\Purity\WINDOWS\system32\SSTEM~1
C:\QooBox\Purity\WINDOWS\system32\ICROSO~1.NET\?icrosoft.NET


((((((((((((((((((((((((((((((( Files Created from 2006-09-12 to 2006-10-12 ))))))))))))))))))))))))))))))))))


2006-10-11 23:13 3,968 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2006-10-10 19:42 53,248 --a------ C:\WINDOWS\system32\Process.exe
2006-10-10 19:42 40,960 --a------ C:\WINDOWS\system32\swsc.exe
2006-10-10 19:42 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe
2006-10-10 19:42 135,168 --a------ C:\WINDOWS\system32\swreg.exe
2006-10-05 17:25 2,829 --a------ C:\WINDOWS\War3Unin.pif
2006-10-05 17:25 139,264 --a------ C:\WINDOWS\War3Unin.exe


(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))


2006-10-12 21:24 -------- d-------- C:\Program Files\Symantec AntiVirus
2006-10-11 23:13 -------- d-------- C:\Program Files\Grisoft
2006-10-11 16:49 15772 --a------ C:\Documents and Settings\fabien\Application Data\wklnhst.dat
2006-10-10 18:58 -------- d---s---- C:\Documents and Settings\fabien\Application Data\Microsoft
2006-10-10 10:34 2 --a------ C:\WINDOWS\system32\wcptr.exe
2006-10-06 18:32 -------- d-------- C:\Program Files\eMule
2006-10-05 18:18 -------- d-------- C:\Program Files\dvdSanta
2006-09-13 07:03 1084416 --a------ C:\WINDOWS\system32\msxml3.dll
2006-09-05 20:29 -------- d--h----- C:\Program Files\InstallShield Installation Information
2006-09-01 17:03 -------- d-------- C:\Program Files\Common Files
2006-08-31 17:10 -------- d-------- C:\Program Files\QuickTime
2006-08-25 17:51 617472 --a------ C:\WINDOWS\system32\comctl32.dll
2006-08-21 14:26 16896 --a------ C:\WINDOWS\system32\fltlib.dll
2006-08-21 11:14 23040 --a------ C:\WINDOWS\system32\fltmc.exe
2006-08-21 11:14 128896 --------- C:\WINDOWS\system32\drivers\fltmgr.sys
2006-08-19 16:51 43520 --a------ C:\WINDOWS\system32\CmdLineExt03.dll
2006-08-16 13:59 100352 --a------ C:\WINDOWS\system32\6to4svc.dll
2006-08-16 11:37 225664 --a------ C:\WINDOWS\system32\drivers\tcpip6.sys
2006-08-14 17:15 -------- d-------- C:\Program Files\iTunes
2006-08-14 17:14 -------- d-------- C:\Program Files\iPod
2006-08-14 12:34 332928 --a------ C:\WINDOWS\system32\drivers\srv.sys
2006-07-27 15:26 679424 --a------ C:\WINDOWS\system32\inetcomm.dll
2006-07-21 10:27 72704 --a------ C:\WINDOWS\system32\hlink.dll


(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))

*Note* empty entries are not shown

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\ctfmon.exe"
"LDM"="C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"
"PcSync"="D:\\nokia\\Nokia PC Suite 6\\PcSync2.exe /NoDialog"
"Udot"="\"C:\\WINDOWS\\system32\\ICROSO~1.NET\\notepad.exe\" -vt ndrv"
"msnmsgr"="\"C:\\Program Files\\MSN Messenger\\MsnMsgr.Exe\" /background"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"Cmaudio"="RunDll32 cmicnfg.cpl,CMICtrlWnd"
"Dit"="Dit.exe"
"CHotkey"="mHotkey.exe"
"ledpointer"="CNYHKey.exe"
"ATIPTA"="C:\\Program Files\\ATI Technologies\\ATI Control Panel\\atiptaxx.exe"
"PCMService"="\"C:\\Program Files\\Medion Home Cinema XL II\\PowerCinema\\PCMService.exe\""
"PinnacleDriverCheck"="C:\\WINDOWS\\system32\\\\PSDrvCheck.exe"
"LogitechVideoRepair"="C:\\Program Files\\Logitech\\Video\\ISStart.exe"
"LogitechVideoTray"="C:\\Program Files\\Logitech\\Video\\LogiTray.exe"
"PCSuiteTrayApplication"="D:\\nokia\\Nokia PC Suite 6\\Launch Application 2.exe -onlytray"
"DataLayer"="C:\\PROGRA~1\\FICHIE~1\\PCSuite\\DATALA~1\\DATALA~1.EXE"
"Microsoft Works Update Detection"="C:\\Program Files\\Fichiers communs\\Microsoft Shared\\Works Shared\\WkUFind.exe"
"USB2Check"="RUNDLL32.EXE \"C:\\WINDOWS\\system32\\PCLECoInst.dll\",CheckUSBController"
"USBToolTip"="\"D:\\Pinnacle\\Shared Files\\Programs\\USBTip\\USBTip.exe\""
"ccApp"="\"C:\\Program Files\\Fichiers communs\\Symantec Shared\\ccApp.exe\""
"vptray"="C:\\PROGRA~1\\SYMANT~1\\VPTray.exe"
"AdslTaskBar"="rundll32.exe stmctrl.dll,TaskBar"
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"iTunesHelper"="\"C:\\Program Files\\iTunes\\iTunesHelper.exe\""
"!AVG Anti-Spyware"="\"C:\\Program Files\\Grisoft\\AVG Anti-Spyware 7.5\\avgas.exe\" /minimized"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL]
"Installed"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS]
"Installed"="1"

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components]
"DeskHtmlVersion"=dword:00000110
"DeskHtmlMinorVersion"=dword:00000005
"Settings"=dword:00000001
"GeneralFlags"=dword:00000001

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\System32\\CTFMON.EXE"
"Udot"="\"C:\\WINDOWS\\STEM~1\\attrib.exe\" -vt ndrv"
@="C:\\DOCUME~1\\gilbert\\MESDOC~1\\YSTEM3~1\\NLOOKU~1.EXE"
"Klgv"="C:\\Program Files\\?ecurity\\m?config.exe"

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\System32\\CTFMON.EXE"
"Udot"="\"C:\\WINDOWS\\STEM~1\\attrib.exe\" -vt ndrv"
@="C:\\DOCUME~1\\gilbert\\MESDOC~1\\YSTEM3~1\\NLOOKU~1.EXE"
"Klgv"="C:\\Program Files\\?ecurity\\m?config.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler]
"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Pré-chargeur Browseui"
"{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Démon de cache des catégories de composant"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=""
"{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="AVG Anti-Spyware 7.5"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091
"NoToolbarCustomize"=dword:00000000
"NoBandCustomize"=dword:00000000

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\Run]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"dontdisplaylastusername"=dword:00000000
"legalnoticecaption"=""
"legalnoticetext"=""
"shutdownwithoutlogon"=dword:00000001
"undockwithoutlogon"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoToolbarCustomize"=dword:00000000
"NoBandCustomize"=dword:00000000

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer\run]

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload]
"PostBootReminder"="{7849596a-48ea-486e-8937-a2a3009f31a9}"
"CDBurn"="{fbeb8a05-beee-4442-804e-409d6c4515e9}"
"WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"
"SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}"
"HjFFTeJvuY"="{00932A32-AA39-8098-9A59-010449DF97EB}"

HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\winmxw32

HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders
securityproviders REG_SZ msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll


Contents of the 'Scheduled Tasks' folder
C:\WINDOWS\tasks\FRU Task #Hewlett-Packard#hp psc 2170 series#1150127184.job

Completion time: 06-10-12 21:29:18.39
ComboFix.txt


voila tout y est

angel dark ou quelqu'un d'autre peut il venir à mon secours et me dire comment finir pour desinfecter on pc.
je pense avoir fé tt les rapports faut me donner la suites ds opération merci d avance de me consacrer un peu de votre temps.