virus "portugais" sur msn bis (Résolu)

kirikou19

16 Décembre 2006 16:27:20

bonjour j'ai deja fai plusieurs manipulations pour enlever mon virus de msn. il va comme ceci : Le message va comme suit :

oi olhe o cartao que vi no orkut como e legal...
http://www.doiop.com/cartao-orkut.html
depois vc me fala se e legal

Il s'écrit automatiquement a mes contacts avant même que je puisse entamer la conversation avec eux. j'ai deja essayer de l'enlever avec différents antivirus et je ne sais plus quoi faire.

HELP !!!!!

Autres pages sur : virus portugais msn bis resolu

| Etre averti des réponses
| Alerter

Répondre à kirikou19

remi57050

16 Décembre 2006 17:17:44

Bonjour,

Déja d'une quand tu met ton lien infecté au lieu de mettre http met hxxp ou autres lettres pour éviter certaines catastrophes

De deux je vais t'aider :

Télécharge Hijackthis de Merjin dans ce lien :

http://www.merijn.org/files/hijackthis.zip

Ensuite suis bien ces procédures à la clé :

Télécharge le, puis met le dans un dossier dédié (exemple : ..\Bureau\Hijackthis\Hijackthis.exe ).
Renomme-le en Scanner.exe (clic droit sur le fichier)
Ensuite, lance le (double clic sur Scanner.exe ensuite tu l’exécutes) appuie sur
Do a system scan a save a logfile, le bloc note va alors s’ouvrir, tu copies et tu colles le rapport ici dans ta prochaine réponse.

Bonne chance

| Alerter

Répondre à remi57050

kirikou19

17 Décembre 2006 03:46:27

voila mon rapport

Logfile of HijackThis v1.99.1
Scan saved at 04:46:02, on 17.12.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\Bluewin\QUICKH~1\SMARTB~1\MotiveSB.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
C:\Program Files\Logitech\ImageStudio\LogiTray.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\system32\bssys.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\Fichiers communs\Teleca Shared\CapabilityManager.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-ch\bin\WindowsSearch.exe
C:\Program Files\Bluewin\Quick Help\bin\mpbtn.exe
C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-ch\bin\WindowsSearchIndexer.exe
c:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
C:\Documents and Settings\Armelle\Mes documents\LimeWire\LimeWire.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-ch\bin\WindowsSearchFilter.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\jb\LOCALS~1\Temp\Rar$EX00.187\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ch/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.01net.com/telecharger/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Bluewin Toolbar - {4E7BD74F-2B8D-469E-DCF7-E869A199B87D} - C:\WINDOWS\DOWNLO~1\bluewin.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\DOCUME~1\jb\Bureau\SPYBOT~1\SDHelper.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: Barre d'outils de MSN Search Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-ch\msntb.dll
O3 - Toolbar: Bluewin Toolbar - {4E7BD74F-2B8D-469E-DCF7-E869A199B87D} - C:\WINDOWS\DOWNLO~1\bluewin.dll (file missing)
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Barre d'outils de MSN Search - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-ch\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\Bluewin\QUICKH~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
O4 - HKLM\..\Run: [LogitechGalleryRepair] C:\Program Files\Logitech\ImageStudio\ISStart.exe
O4 - HKLM\..\Run: [LogitechImageStudioTray] C:\Program Files\Logitech\ImageStudio\LogiTray.exe
O4 - HKLM\..\Run: [bssys] C:\WINDOWS\system32\bssys.exe
O4 - HKCU\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [msnmsgr] ~"C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Quick Help.lnk = C:\Program Files\Bluewin\Quick Help\bin\matcli.exe
O4 - Global Startup: Recherche sur le bureau de Windows.lnk = C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-ch\bin\WindowsSearch.exe
O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-ch\msntb.dll/search.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra button: Information - {0B590232-B5EB-41FB-A867-95D6A8327BDF} - C:\WINDOWS\DOWNLO~1\bluewin.dll (file missing)
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.wanadoo.fr (file missing) (HKCU)
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267....
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPACl...
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab312...
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClie...
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab47946.ca...
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown....
O18 - Protocol: bw+0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: offline-8876480 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: SPBBCSvc - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe

| Alerter

Répondre à kirikou19

remi57050

17 Décembre 2006 12:03:19

Re,

Passe un scan AVG Anti-Spyware
Choisis l'onglet "Analyse"
Puis l'onglet "Paramètres"
Sous la question "Comment réagir ?", clique sur "Actions recommandées" et choisis
"Quarantaine"
Re-clique sur l'onglet "Analyse" puis réalise une "Analyse complète du système"

/!\ Si un fichier est infecté détécté en fin d'analyse /!\
Clique sur "Appliquer toutes les actions "
Clique sur "Enregistrer le rapport" puis sur "Enregistrer le rapport sous"
Enregistre ce fichier texte sur ton bureau.

Ensuite re-post un log Hijackthis

Bonne chance

| Alerter

Répondre à remi57050

kirikou19

18 Décembre 2006 12:42:36

Voila donc mon rapport Hijackthis :

Logfile of HijackThis v1.99.1
Scan saved at 07:13:02, on 18.12.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\PROGRA~1\Bluewin\QUICKH~1\SMARTB~1\MotiveSB.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\Logitech\ImageStudio\LogiTray.exe
C:\WINDOWS\system32\bssys.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
c:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\jb\LOCALS~1\Temp\Rar$EX00.000\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ch/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.01net.com/telecharger/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Bluewin Toolbar - {4E7BD74F-2B8D-469E-DCF7-E869A199B87D} - C:\WINDOWS\DOWNLO~1\bluewin.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\DOCUME~1\jb\Bureau\SPYBOT~1\SDHelper.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: Barre d'outils de MSN Search Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-ch\msntb.dll
O3 - Toolbar: Bluewin Toolbar - {4E7BD74F-2B8D-469E-DCF7-E869A199B87D} - C:\WINDOWS\DOWNLO~1\bluewin.dll (file missing)
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Barre d'outils de MSN Search - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-ch\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\Bluewin\QUICKH~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
O4 - HKLM\..\Run: [LogitechGalleryRepair] C:\Program Files\Logitech\ImageStudio\ISStart.exe
O4 - HKLM\..\Run: [LogitechImageStudioTray] C:\Program Files\Logitech\ImageStudio\LogiTray.exe
O4 - HKLM\..\Run: [bssys] C:\WINDOWS\system32\bssys.exe
O4 - HKCU\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [msnmsgr] ~"C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Quick Help.lnk = C:\Program Files\Bluewin\Quick Help\bin\matcli.exe
O4 - Global Startup: Recherche sur le bureau de Windows.lnk = C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-ch\bin\WindowsSearch.exe
O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-ch\msntb.dll/search.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra button: Information - {0B590232-B5EB-41FB-A867-95D6A8327BDF} - C:\WINDOWS\DOWNLO~1\bluewin.dll (file missing)
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.wanadoo.fr (file missing) (HKCU)
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267....
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPACl...
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab312...
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClie...
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab47946.ca...
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown....
O18 - Protocol: bw+0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: offline-8876480 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: SPBBCSvc - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe

| Alerter

Répondre à kirikou19

kirikou19

18 Décembre 2006 12:43:30

et voila mon rapport avg anti spyware

---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

+ Créé à: 07:12:26 18.12.2006

+ Résultat de l'analyse:

C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP260\A0170867.exe -> Adware.180Solutions : Nettoyé et sauvegardé (mise en quarantaine).
HKU\S-1-5-21-1297757155-723239895-2359620686-1015\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{56F1D444-11BF-4879-A12B-79CF0177F038} -> Adware.180Solutions : Nettoyé et sauvegardé (mise en quarantaine).
HKU\S-1-5-21-1297757155-723239895-2359620686-1015\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EA0D26BD-9029-431A-86E0-83152D67828A} -> Adware.180Solutions : Nettoyé et sauvegardé (mise en quarantaine).
HKU\S-1-5-21-1297757155-723239895-2359620686-1015\Software\zango -> Adware.Zango : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP260\A0170866.scr -> Logger.Banker.ark : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP260\A0170865.scr -> Logger.Banker.aww : Nettoyé et sauvegardé (mise en quarantaine).
:mozilla.212:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.213:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.42:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.152:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.153:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.154:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
C:\Documents and Settings\jb\Cookies\jb@adbrite[2].txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.241:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.242:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.163:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.164:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.62:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Atdmt : Nettoyé.
C:\Documents and Settings\Armelle\Cookies\armelle@atdmt[2].txt -> TrackingCookie.Atdmt : Nettoyé.
C:\Documents and Settings\Bénédicte\Cookies\bénédicte@atdmt[2].txt -> TrackingCookie.Atdmt : Nettoyé.
C:\Documents and Settings\ayméric\Cookies\ayméric@atdmt[2].txt -> TrackingCookie.Atdmt : Nettoyé.
C:\Documents and Settings\jb\Cookies\jb@atdmt[2].txt -> TrackingCookie.Atdmt : Nettoyé.
:mozilla.12:C:\Documents and Settings\ayméric\Application Data\Mozilla\Firefox\Profiles\0zsjsml1.default\cookies.txt -> TrackingCookie.Bluestreak : Nettoyé.
:mozilla.46:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\ayméric\Cookies\ayméric@bluestreak[2].txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\jb\Cookies\jb@bluestreak[1].txt -> TrackingCookie.Bluestreak : Nettoyé.
:mozilla.129:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.130:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.131:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.132:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.133:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.134:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.135:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.36:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Centrport : Nettoyé.
:mozilla.233:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.234:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.235:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.35:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\Armelle\Cookies\armelle@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\Bénédicte\Cookies\bénédicte@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\Famille Yanga\Cookies\famille_yanga@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\ayméric\Cookies\ayméric@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\jb\Cookies\jb@doubleclick[2].txt -> TrackingCookie.Doubleclick : Nettoyé.
:mozilla.63:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Estat : Nettoyé.
:mozilla.6:C:\Documents and Settings\Armelle\Application Data\Mozilla\Firefox\Profiles\rvh9d5cz.default\cookies.txt -> TrackingCookie.Estat : Nettoyé.
C:\Documents and Settings\Armelle\Cookies\armelle@estat[1].txt -> TrackingCookie.Estat : Nettoyé.
C:\Documents and Settings\Bénédicte\Cookies\bénédicte@estat[1].txt -> TrackingCookie.Estat : Nettoyé.
:mozilla.236:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Falkag : Nettoyé.
:mozilla.237:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Falkag : Nettoyé.
:mozilla.238:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Falkag : Nettoyé.
:mozilla.239:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Falkag : Nettoyé.
:mozilla.240:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Falkag : Nettoyé.
:mozilla.128:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.136:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.137:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.138:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.139:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
C:\Documents and Settings\Armelle\Cookies\armelle@fastclick[2].txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.271:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.
:mozilla.275:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.276:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.277:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.278:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.279:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.280:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.281:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.282:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.283:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.284:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.293:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Ivwbox : Nettoyé.
:mozilla.55:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Mediaplex : Nettoyé.
C:\Documents and Settings\jb\Cookies\jb@mediaplex[1].txt -> TrackingCookie.Mediaplex : Nettoyé.
:mozilla.34:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Overture : Nettoyé.
:mozilla.291:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Planetactive : Nettoyé.
C:\Documents and Settings\jb\Cookies\jb@ads.pointroll[2].txt -> TrackingCookie.Pointroll : Nettoyé.
:mozilla.254:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Questionmarket : Nettoyé.
:mozilla.255:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Questionmarket : Nettoyé.
C:\Documents and Settings\Armelle\Cookies\armelle@questionmarket[1].txt -> TrackingCookie.Questionmarket : Nettoyé.
C:\Documents and Settings\Bénédicte\Cookies\bénédicte@questionmarket[2].txt -> TrackingCookie.Questionmarket : Nettoyé.
C:\Documents and Settings\Famille Yanga\Cookies\famille_yanga@questionmarket[2].txt -> TrackingCookie.Questionmarket : Nettoyé.
C:\Documents and Settings\ayméric\Cookies\ayméric@questionmarket[2].txt -> TrackingCookie.Questionmarket : Nettoyé.
C:\Documents and Settings\jb\Cookies\jb@questionmarket[1].txt -> TrackingCookie.Questionmarket : Nettoyé.
:mozilla.116:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
:mozilla.117:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
:mozilla.118:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
:mozilla.119:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
:mozilla.120:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Reliablestats : Nettoyé.
C:\Documents and Settings\Armelle\Cookies\armelle@ads1.revenue[1].txt -> TrackingCookie.Revenue : Nettoyé.
C:\Documents and Settings\jb\Cookies\jb@edge.ru4[2].txt -> TrackingCookie.Ru4 : Nettoyé.
:mozilla.56:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.57:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.58:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.59:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.60:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.61:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
C:\Documents and Settings\Armelle\Cookies\armelle@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : Nettoyé.
C:\Documents and Settings\Armelle\Cookies\armelle@serving-sys[2].txt -> TrackingCookie.Serving-sys : Nettoyé.
C:\Documents and Settings\Bénédicte\Cookies\bénédicte@serving-sys[1].txt -> TrackingCookie.Serving-sys : Nettoyé.
C:\Documents and Settings\Famille Yanga\Cookies\famille_yanga@serving-sys[2].txt -> TrackingCookie.Serving-sys : Nettoyé.
C:\Documents and Settings\jb\Cookies\jb@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : Nettoyé.
C:\Documents and Settings\jb\Cookies\jb@serving-sys[1].txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.178:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Sexlist : Nettoyé.
:mozilla.179:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Sexlist : Nettoyé.
C:\Documents and Settings\jb\Cookies\jb@sexlist[1].txt -> TrackingCookie.Sexlist : Nettoyé.
C:\Documents and Settings\jb\Cookies\jb@counter5.sextracker[1].txt -> TrackingCookie.Sextracker : Nettoyé.
C:\Documents and Settings\jb\Cookies\jb@counter9.sextracker[1].txt -> TrackingCookie.Sextracker : Nettoyé.
C:\Documents and Settings\jb\Cookies\jb@sextracker[2].txt -> TrackingCookie.Sextracker : Nettoyé.
:mozilla.10:C:\Documents and Settings\ayméric\Application Data\Mozilla\Firefox\Profiles\0zsjsml1.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.64:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.65:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.66:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.8:C:\Documents and Settings\ayméric\Application Data\Mozilla\Firefox\Profiles\0zsjsml1.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.9:C:\Documents and Settings\ayméric\Application Data\Mozilla\Firefox\Profiles\0zsjsml1.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\Armelle\Cookies\armelle@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\Bénédicte\Cookies\bénédicte@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\Famille Yanga\Cookies\famille_yanga@www.smartadserver[2].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\ayméric\Cookies\ayméric@www.smartadserver[2].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\jb\Cookies\jb@www.smartadserver[2].txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.10:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.11:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.12:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.6:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.8:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.9:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
C:\Documents and Settings\jb\Cookies\jb@statcounter[1].txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.89:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.90:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
C:\Documents and Settings\jb\Cookies\jb@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.268:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Tribalfusion : Nettoyé.
:mozilla.200:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.201:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.202:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\Armelle\Cookies\armelle@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\Bénédicte\Cookies\bénédicte@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\Famille Yanga\Cookies\famille_yanga@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\ayméric\Cookies\ayméric@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\jb\Cookies\jb@weborama[1].txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.203:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Webtrendslive : Nettoyé.
:mozilla.204:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Webtrendslive : Nettoyé.
:mozilla.205:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Webtrendslive : Nettoyé.
:mozilla.101:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.102:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.103:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.104:C:\Documents and Settings\jb\Application Data\Mozilla\Firefox\Profiles\co6qckod.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
C:\Documents and Settings\Armelle\Cookies\armelle@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Nettoyé.
C:\Documents and Settings\jb\Cookies\jb@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Nettoyé.
C:\Documents and Settings\jb\Cookies\jb@ad.yieldmanager[3].txt -> TrackingCookie.Yieldmanager : Nettoyé.

Fin du rapport

| Alerter

Répondre à kirikou19

Angeldark

18 Décembre 2006 12:45:56

Bonjour,

- Télécharge Clean.zip (de Malekal),
décompresse-le sur ton bureau (clic droit / extraire tout), tu dois obtenir un dossier clean.

Redémarre en mode sans échec

- Ouvre le dossier clean qui se trouve sur ton bureau, et double-clic sur clean.cmd, une fenêtre noire va apparaître pendant un instant, laisse la ouverte.

Redémarre normalement

- Le rapport clean : Poste de travail / double clic sur disque C / double-clic sur rapport_clean.txt et copier/coller le contenu ici C:\rapport_clean.txt

| Alerter

Répondre à Angeldark

kirikou19

18 Décembre 2006 19:13:45

ok je vai faire ce que tu ma di ! mai sa me sert a quoi ces rapport que j'ai posté

| Alerter

Répondre à kirikou19

Tribalman

18 Décembre 2006 19:26:05

A verifier si ton virus est toujours present ou pas et a savoir ce qu'on suprimme comme virus

| Alerter

Répondre à Tribalman

kirikou19

19 Décembre 2006 22:56:55

Voila angeldark. voici mon rapport_clean ! Merci de me dire au plus vite ce qui se passe a+

Script clean par Malekal_morte - http://www.malekal.com

Microsoft Windows XP [version 5.1.2600]
Script execute en mode sans echec

*** Suppression de fichiers sur C:

*** Suppression des fichiers dans C:\WINDOWS\

*** Suppression des fichiers dans C:\WINDOWS\system32
"C:\Documents and Settings\jb\Application Data\hbtools\" FOUND

"C:\Program Files\mozilla firefox\components\npclntax.xpt" FOUND
"C:\Program Files\mozilla firefox\plugins\npclntax.dll" FOUND
"C:\Program Files\HbTools\" FOUND

*** Suppression des clefs du registre effectuee..

| Alerter

Répondre à kirikou19

kirikou19

19 Décembre 2006 22:58:32

Parce qu'il se trouve malgré tout ce que j'ai fait le virus est encore présent sur mon ordi !

| Alerter

Répondre à kirikou19

Angeldark

20 Décembre 2006 12:14:59

Reposte un rapport Hijackthis

| Alerter

Répondre à Angeldark

kirikou19

20 Décembre 2006 17:50:40

voila mon rapport hijackthis !!!

Logfile of HijackThis v1.99.1
Scan saved at 18:50:08, on 20.12.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\PROGRA~1\Bluewin\QUICKH~1\SMARTB~1\MotiveSB.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
C:\Program Files\Logitech\ImageStudio\LogiTray.exe
C:\WINDOWS\system32\bssys.exe
C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-ch\bin\WindowsSearch.exe
C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-ch\bin\WindowsSearchIndexer.exe
C:\Program Files\Bluewin\Quick Help\bin\mpbtn.exe
c:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\jb\LOCALS~1\Temp\Rar$EX00.953\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ch/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.01net.com/telecharger/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Bluewin Toolbar - {4E7BD74F-2B8D-469E-DCF7-E869A199B87D} - C:\WINDOWS\DOWNLO~1\bluewin.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\DOCUME~1\jb\Bureau\SPYBOT~1\SDHelper.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: Barre d'outils de MSN Search Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-ch\msntb.dll
O3 - Toolbar: Bluewin Toolbar - {4E7BD74F-2B8D-469E-DCF7-E869A199B87D} - C:\WINDOWS\DOWNLO~1\bluewin.dll (file missing)
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Barre d'outils de MSN Search - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-ch\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\Bluewin\QUICKH~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
O4 - HKLM\..\Run: [LogitechGalleryRepair] C:\Program Files\Logitech\ImageStudio\ISStart.exe
O4 - HKLM\..\Run: [LogitechImageStudioTray] C:\Program Files\Logitech\ImageStudio\LogiTray.exe
O4 - HKLM\..\Run: [bssys] C:\WINDOWS\system32\bssys.exe
O4 - HKCU\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [msnmsgr] ~"C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Quick Help.lnk = C:\Program Files\Bluewin\Quick Help\bin\matcli.exe
O4 - Global Startup: Recherche sur le bureau de Windows.lnk = C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-ch\bin\WindowsSearch.exe
O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-ch\msntb.dll/search.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra button: Information - {0B590232-B5EB-41FB-A867-95D6A8327BDF} - C:\WINDOWS\DOWNLO~1\bluewin.dll (file missing)
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.wanadoo.fr (file missing) (HKCU)
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPACl...
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClie...
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab47946.ca...
O18 - Protocol: bw+0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: offline-8876480 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: SPBBCSvc - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe

| Alerter

Répondre à kirikou19

kirikou19

22 Décembre 2006 12:18:05

Bonjour alors qu'est-ce que je fais après avoir posté ces deux rapports ?

| Alerter

Répondre à kirikou19

Angeldark

22 Décembre 2006 12:18:59

Re,

Télécharge Lopxp.zip
Dézippe le sur le Bureau
Lance le fichier lopxp.bat
Un rapport sera généré, poste son contenu ici.

| Alerter

Répondre à Angeldark

kirikou19

22 Décembre 2006 13:57:59

voila mon rapport !

Rapport fait à 14:57:06.37 le 22.12.2006

Le volume dans le lecteur C s'appelle HP_PAVILION
Le num‚ro de s‚rie du volume est 7033-F3A9

R‚pertoire de C:\Documents and Settings\All Users\Application Data

08.12.2006 18:40 <REP> Yahoo! Companion
07.12.2006 19:17 <REP> Spybot - Search & Destroy
26.09.2006 22:55 <REP> Google
17.08.2006 11:37 <REP> Avanquest Software
11.08.2006 15:25 <REP> PlayFirst
10.08.2006 11:00 <REP> Sandlot Games
08.08.2006 13:10 <REP> Zylom
03.08.2006 20:32 <REP> BVRP Software
27.07.2006 20:31 <REP> Sony Ericsson
27.07.2006 20:31 <REP> Teleca
21.04.2006 23:41 <REP> Windows Genuine Advantage
19.04.2006 02:10 <REP> muvee Technologies
11.04.2006 18:06 <REP> Messenger Plus!
09.04.2006 09:32 1755 QTSBandwidthCache
03.04.2006 17:07 <REP> Apple Computer
28.03.2006 21:25 <REP> MSN Search Toolbar
13.03.2006 16:15 <REP> Adobe
08.03.2006 01:00 <REP> MotiveSysIDs
07.03.2006 18:02 <REP> Motive
24.02.2006 22:33 <REP> QuickTime
01.01.2005 18:58 <REP> Symantec
01.01.2005 18:36 <REP> InstallShield
01.01.2005 18:26 <REP> HP
01.01.2005 18:26 <REP> Sonic
01.01.2005 18:23 2187 hpzinstall.log
01.01.2005 18:08 <REP> SBSI
24.11.2004 21:25 <REP> Microsoft
24.11.2004 21:25 <REP> ..
24.11.2004 21:25 <REP> .
23.11.2004 16:13 62 desktop.ini
3 fichier(s) 4004 octets
27 R‚p(s) 21808603136 octets libres
Le volume dans le lecteur C s'appelle HP_PAVILION
Le num‚ro de s‚rie du volume est 7033-F3A9

R‚pertoire de C:\Documents and Settings\Armelle\Application Data

15.12.2006 20:42 <REP> Talkback
15.12.2006 20:42 <REP> Mozilla
16.10.2006 19:44 <REP> Template
16.10.2006 19:44 474 wklnhst.dat
27.09.2006 15:10 <REP> Google
12.08.2006 10:29 <REP> PlayFirst
09.08.2006 12:29 <REP> Zylom
28.07.2006 09:03 <REP> Teleca
25.06.2006 08:32 <REP> MSN Search Toolbar
23.04.2006 14:36 <REP> HPQ
16.04.2006 21:23 <REP> HbTools
11.04.2006 14:48 <REP> AdobeUM
11.04.2006 14:30 <REP> Help
05.04.2006 16:29 <REP> Apple Computer
29.03.2006 17:36 <REP> Sun
22.03.2006 13:58 <REP> Adobe
09.03.2006 07:27 <REP> Macromedia
08.03.2006 20:35 <REP> HP
01.03.2006 17:34 <REP> Sonic
01.03.2006 17:33 <REP> Leadertech
01.03.2006 17:25 <REP> InterVideo
26.02.2006 20:09 62 desktop.ini
26.02.2006 20:09 <REP> Identities
26.02.2006 20:09 <REP> Real
26.02.2006 20:09 <REP> Microsoft
26.02.2006 20:09 <REP> Symantec
26.02.2006 20:09 <REP> .
26.02.2006 20:09 <REP> ..
2 fichier(s) 536 octets
26 R‚p(s) 21808599040 octets libres
Le volume dans le lecteur C s'appelle HP_PAVILION
Le num‚ro de s‚rie du volume est 7033-F3A9

R‚pertoire de C:\Documents and Settings\aym‚ric\Application Data

15.12.2006 22:38 <REP> Talkback
15.12.2006 22:37 <REP> Mozilla
09.08.2006 15:11 <REP> Sun
28.07.2006 16:44 <REP> Teleca
04.07.2006 12:30 <REP> Sonic
24.06.2006 18:57 <REP> MSN Search Toolbar
21.05.2006 21:35 <REP> HP
19.05.2006 22:18 <REP> InterVideo
10.05.2006 15:37 <REP> AdobeUM
09.05.2006 12:00 <REP> Symantec
05.05.2006 12:02 <REP> Template
05.05.2006 12:02 458 wklnhst.dat
03.05.2006 13:22 <REP> Apple Computer
21.04.2006 10:17 <REP> Google
20.04.2006 11:01 <REP> Adobe
16.04.2006 17:49 <REP> Macromedia
16.04.2006 17:46 <REP> HbTools
16.04.2006 17:46 62 desktop.ini
16.04.2006 17:46 <REP> Identities
16.04.2006 17:46 <REP> Microsoft
16.04.2006 17:46 <REP> ..
16.04.2006 17:46 <REP> .
16.04.2006 17:46 <REP> Real
2 fichier(s) 520 octets
21 R‚p(s) 21808594944 octets libres
Le volume dans le lecteur C s'appelle HP_PAVILION
Le num‚ro de s‚rie du volume est 7033-F3A9

R‚pertoire de C:\Documents and Settings\B‚n‚dicte\Application Data

15.12.2006 22:51 <REP> Talkback
15.12.2006 22:51 <REP> Mozilla
11.08.2006 15:25 <REP> PlayFirst
08.08.2006 13:10 <REP> Zylom
28.07.2006 13:03 <REP> Teleca
04.07.2006 12:30 <REP> Sonic
24.06.2006 19:19 <REP> MSN Search Toolbar
16.04.2006 19:57 <REP> HbTools
08.04.2006 10:16 <REP> Sun
04.04.2006 19:11 <REP> Apple Computer
28.03.2006 11:51 <REP> AdobeUM
28.03.2006 11:50 <REP> Adobe
09.03.2006 12:39 <REP> Macromedia
08.03.2006 20:35 <REP> HP
08.03.2006 12:15 <REP> Google
27.02.2006 13:38 <REP> HPQ
22.02.2006 14:48 <REP> InterVideo
22.02.2006 14:26 62 desktop.ini
22.02.2006 14:26 <REP> Identities
22.02.2006 14:26 <REP> Microsoft
22.02.2006 14:26 <REP> Real
22.02.2006 14:26 <REP> ..
22.02.2006 14:26 <REP> .
22.02.2006 14:26 <REP> Symantec
1 fichier(s) 62 octets
23 R‚p(s) 21808594944 octets libres
Le volume dans le lecteur C s'appelle HP_PAVILION
Le num‚ro de s‚rie du volume est 7033-F3A9

R‚pertoire de C:\Documents and Settings\Default User\Application Data

21.02.2006 16:30 <REP> Symantec
21.02.2006 16:30 <REP> Real
24.11.2004 21:25 <REP> Identities
24.11.2004 21:25 <REP> Microsoft
24.11.2004 21:25 <REP> ..
24.11.2004 21:25 <REP> .
23.11.2004 16:13 62 desktop.ini
1 fichier(s) 62 octets
6 R‚p(s) 21808594944 octets libres
Le volume dans le lecteur C s'appelle HP_PAVILION
Le num‚ro de s‚rie du volume est 7033-F3A9

R‚pertoire de C:\Documents and Settings\Famille Yanga\Application Data

04.12.2006 23:22 <REP> Template
04.12.2006 23:22 192 wklnhst.dat
27.09.2006 13:21 <REP> HP
27.09.2006 12:26 <REP> Google
27.07.2006 21:13 <REP> Teleca
12.07.2006 01:38 <REP> MSN Search Toolbar
19.05.2006 15:10 <REP> Symantec
04.05.2006 20:02 <REP> Adobe
04.05.2006 19:54 <REP> Sun
30.04.2006 10:10 <REP> HbTools
04.04.2006 11:12 <REP> Macromedia
02.04.2006 18:32 62 desktop.ini
02.04.2006 18:32 <REP> Identities
02.04.2006 18:32 <REP> Microsoft
02.04.2006 18:32 <REP> ..
02.04.2006 18:32 <REP> .
02.04.2006 18:32 <REP> Real
2 fichier(s) 254 octets
15 R‚p(s) 21808594944 octets libres
Le volume dans le lecteur C s'appelle HP_PAVILION
Le num‚ro de s‚rie du volume est 7033-F3A9

R‚pertoire de C:\Documents and Settings\Invit‚\Application Data

24.02.2006 13:05 62 desktop.ini
24.02.2006 13:05 <REP> Identities
24.02.2006 13:05 <REP> Real
24.02.2006 13:05 <REP> Microsoft
24.02.2006 13:05 <REP> Symantec
24.02.2006 13:05 <REP> ..
24.02.2006 13:05 <REP> .
1 fichier(s) 62 octets
6 R‚p(s) 21808594944 octets libres
Le volume dans le lecteur C s'appelle HP_PAVILION
Le num‚ro de s‚rie du volume est 7033-F3A9

R‚pertoire de C:\Documents and Settings\jb\Application Data

15.12.2006 19:16 <REP> Lavasoft
13.11.2006 20:16 <REP> FotoWire
05.11.2006 01:29 <REP> Azureus
27.07.2006 20:32 <REP> Teleca
25.07.2006 20:20 8 usb.dat.bin
21.07.2006 04:12 <REP> FrostWire
07.07.2006 18:07 <REP> HbTools_Icons
28.06.2006 23:52 <REP> G-Force
24.06.2006 13:54 <REP> MSN Search Toolbar
19.04.2006 02:10 <REP> muvee Technologies
14.04.2006 22:28 <REP> Talkback
14.04.2006 22:25 <REP> Mozilla
03.04.2006 17:09 <REP> Apple Computer
13.03.2006 17:53 <REP> Sonic
13.03.2006 17:53 <REP> Leadertech
11.03.2006 03:12 <REP> Sun
07.03.2006 19:38 <REP> MSNInstaller
07.03.2006 19:30 <REP> Google
07.03.2006 19:04 <REP> Macromedia
05.03.2006 20:34 <REP> HPQ
04.03.2006 21:30 <REP> InterVideo
26.02.2006 15:43 <REP> HP
25.02.2006 20:36 <REP> Help
23.02.2006 21:45 <REP> AdobeUM
23.02.2006 21:44 <REP> Adobe
23.02.2006 21:35 <REP> Template
23.02.2006 21:35 10368 wklnhst.dat
23.02.2006 14:04 62 desktop.ini
23.02.2006 14:04 <REP> Identities
23.02.2006 14:04 <REP> Microsoft
23.02.2006 14:04 <REP> Symantec
23.02.2006 14:04 <REP> ..
23.02.2006 14:04 <REP> .
23.02.2006 14:04 <REP> Real
3 fichier(s) 10438 octets
31 R‚p(s) 21808590848 octets libres
******************************************
Recherche des taches planifiées dans C:\WINDOWS\tasks

Le volume dans le lecteur C s'appelle HP_PAVILION
Le num‚ro de s‚rie du volume est 7033-F3A9

R‚pertoire de C:\WINDOWS\Tasks

15.09.2006 22:09 284 AppleSoftwareUpdate.job
08.05.2006 20:18 560 Norton AntiVirus - Effectuer une analyse complŠte du systŠme - jb.job
24.11.2004 22:18 <REP> ..
24.11.2004 22:18 <REP> .
23.11.2004 15:29 6 SA.DAT
05.08.2004 12:00 65 desktop.ini
4 fichier(s) 915 octets
2 R‚p(s) 21'808'590'848 octets libres

******************************************
Recherche dans Program files

Le dossier C:\Program Files\C2Media n'existe pas

*************** Fin du rapport ****************
Rapport fait à 14:57:39.95 le 22.12.2006

Le volume dans le lecteur C s'appelle HP_PAVILION
Le num‚ro de s‚rie du volume est 7033-F3A9

R‚pertoire de C:\Documents and Settings\All Users\Application Data

08.12.2006 18:40 <REP> Yahoo! Companion
07.12.2006 19:17 <REP> Spybot - Search & Destroy
26.09.2006 22:55 <REP> Google
17.08.2006 11:37 <REP> Avanquest Software
11.08.2006 15:25 <REP> PlayFirst
10.08.2006 11:00 <REP> Sandlot Games
08.08.2006 13:10 <REP> Zylom
03.08.2006 20:32 <REP> BVRP Software
27.07.2006 20:31 <REP> Sony Ericsson
27.07.2006 20:31 <REP> Teleca
21.04.2006 23:41 <REP> Windows Genuine Advantage
19.04.2006 02:10 <REP> muvee Technologies
11.04.2006 18:06 <REP> Messenger Plus!
09.04.2006 09:32 1755 QTSBandwidthCache
03.04.2006 17:07 <REP> Apple Computer
28.03.2006 21:25 <REP> MSN Search Toolbar
13.03.2006 16:15 <REP> Adobe
08.03.2006 01:00 <REP> MotiveSysIDs
07.03.2006 18:02 <REP> Motive
24.02.2006 22:33 <REP> QuickTime
01.01.2005 18:58 <REP> Symantec
01.01.2005 18:36 <REP> InstallShield
01.01.2005 18:26 <REP> HP
01.01.2005 18:26 <REP> Sonic
01.01.2005 18:23 2187 hpzinstall.log
01.01.2005 18:08 <REP> SBSI
24.11.2004 21:25 <REP> Microsoft
24.11.2004 21:25 <REP> ..
24.11.2004 21:25 <REP> .
23.11.2004 16:13 62 desktop.ini
3 fichier(s) 4004 octets
27 R‚p(s) 21808566272 octets libres
Le volume dans le lecteur C s'appelle HP_PAVILION
Le num‚ro de s‚rie du volume est 7033-F3A9

R‚pertoire de C:\Documents and Settings\Armelle\Application Data

15.12.2006 20:42 <REP> Talkback
15.12.2006 20:42 <REP> Mozilla
16.10.2006 19:44 <REP> Template
16.10.2006 19:44 474 wklnhst.dat
27.09.2006 15:10 <REP> Google
12.08.2006 10:29 <REP> PlayFirst
09.08.2006 12:29 <REP> Zylom
28.07.2006 09:03 <REP> Teleca
25.06.2006 08:32 <REP> MSN Search Toolbar
23.04.2006 14:36 <REP> HPQ
16.04.2006 21:23 <REP> HbTools
11.04.2006 14:48 <REP> AdobeUM
11.04.2006 14:30 <REP> Help
05.04.2006 16:29 <REP> Apple Computer
29.03.2006 17:36 <REP> Sun
22.03.2006 13:58 <REP> Adobe
09.03.2006 07:27 <REP> Macromedia
08.03.2006 20:35 <REP> HP
01.03.2006 17:34 <REP> Sonic
01.03.2006 17:33 <REP> Leadertech
01.03.2006 17:25 <REP> InterVideo
26.02.2006 20:09 62 desktop.ini
26.02.2006 20:09 <REP> Identities
26.02.2006 20:09 <REP> Real
26.02.2006 20:09 <REP> Microsoft
26.02.2006 20:09 <REP> Symantec
26.02.2006 20:09 <REP> .
26.02.2006 20:09 <REP> ..
2 fichier(s) 536 octets
26 R‚p(s) 21808566272 octets libres
Le volume dans le lecteur C s'appelle HP_PAVILION
Le num‚ro de s‚rie du volume est 7033-F3A9

R‚pertoire de C:\Documents and Settings\aym‚ric\Application Data

15.12.2006 22:38 <REP> Talkback
15.12.2006 22:37 <REP> Mozilla
09.08.2006 15:11 <REP> Sun
28.07.2006 16:44 <REP> Teleca
04.07.2006 12:30 <REP> Sonic
24.06.2006 18:57 <REP> MSN Search Toolbar
21.05.2006 21:35 <REP> HP
19.05.2006 22:18 <REP> InterVideo
10.05.2006 15:37 <REP> AdobeUM
09.05.2006 12:00 <REP> Symantec
05.05.2006 12:02 <REP> Template
05.05.2006 12:02 458 wklnhst.dat
03.05.2006 13:22 <REP> Apple Computer
21.04.2006 10:17 <REP> Google
20.04.2006 11:01 <REP> Adobe
16.04.2006 17:49 <REP> Macromedia
16.04.2006 17:46 <REP> HbTools
16.04.2006 17:46 62 desktop.ini
16.04.2006 17:46 <REP> Identities
16.04.2006 17:46 <REP> Microsoft
16.04.2006 17:46 <REP> ..
16.04.2006 17:46 <REP> .
16.04.2006 17:46 <REP> Real
2 fichier(s) 520 octets
21 R‚p(s) 21808566272 octets libres
Le volume dans le lecteur C s'appelle HP_PAVILION
Le num‚ro de s‚rie du volume est 7033-F3A9

R‚pertoire de C:\Documents and Settings\B‚n‚dicte\Application Data

15.12.2006 22:51 <REP> Talkback
15.12.2006 22:51 <REP> Mozilla
11.08.2006 15:25 <REP> PlayFirst
08.08.2006 13:10 <REP> Zylom
28.07.2006 13:03 <REP> Teleca
04.07.2006 12:30 <REP> Sonic
24.06.2006 19:19 <REP> MSN Search Toolbar
16.04.2006 19:57 <REP> HbTools
08.04.2006 10:16 <REP> Sun
04.04.2006 19:11 <REP> Apple Computer
28.03.2006 11:51 <REP> AdobeUM
28.03.2006 11:50 <REP> Adobe
09.03.2006 12:39 <REP> Macromedia
08.03.2006 20:35 <REP> HP
08.03.2006 12:15 <REP> Google
27.02.2006 13:38 <REP> HPQ
22.02.2006 14:48 <REP> InterVideo
22.02.2006 14:26 62 desktop.ini
22.02.2006 14:26 <REP> Identities
22.02.2006 14:26 <REP> Microsoft
22.02.2006 14:26 <REP> Real
22.02.2006 14:26 <REP> ..
22.02.2006 14:26 <REP> .
22.02.2006 14:26 <REP> Symantec
1 fichier(s) 62 octets
23 R‚p(s) 21808562176 octets libres
Le volume dans le lecteur C s'appelle HP_PAVILION
Le num‚ro de s‚rie du volume est 7033-F3A9

R‚pertoire de C:\Documents and Settings\Default User\Application Data

21.02.2006 16:30 <REP> Symantec
21.02.2006 16:30 <REP> Real
24.11.2004 21:25 <REP> Identities
24.11.2004 21:25 <REP> Microsoft
24.11.2004 21:25 <REP> ..
24.11.2004 21:25 <REP> .
23.11.2004 16:13 62 desktop.ini
1 fichier(s) 62 octets
6 R‚p(s) 21808562176 octets libres
Le volume dans le lecteur C s'appelle HP_PAVILION
Le num‚ro de s‚rie du volume est 7033-F3A9

R‚pertoire de C:\Documents and Settings\Famille Yanga\Application Data

04.12.2006 23:22 <REP> Template
04.12.2006 23:22 192 wklnhst.dat
27.09.2006 13:21 <REP> HP
27.09.2006 12:26 <REP> Google
27.07.2006 21:13 <REP> Teleca
12.07.2006 01:38 <REP> MSN Search Toolbar
19.05.2006 15:10 <REP> Symantec
04.05.2006 20:02 <REP> Adobe
04.05.2006 19:54 <REP> Sun
30.04.2006 10:10 <REP> HbTools
04.04.2006 11:12 <REP> Macromedia
02.04.2006 18:32 62 desktop.ini
02.04.2006 18:32 <REP> Identities
02.04.2006 18:32 <REP> Microsoft
02.04.2006 18:32 <REP> ..
02.04.2006 18:32 <REP> .
02.04.2006 18:32 <REP> Real
2 fichier(s) 254 octets
15 R‚p(s) 21808562176 octets libres
Le volume dans le lecteur C s'appelle HP_PAVILION
Le num‚ro de s‚rie du volume est 7033-F3A9

R‚pertoire de C:\Documents and Settings\Invit‚\Application Data

24.02.2006 13:05 62 desktop.ini
24.02.2006 13:05 <REP> Identities
24.02.2006 13:05 <REP> Real
24.02.2006 13:05 <REP> Microsoft
24.02.2006 13:05 <REP> Symantec
24.02.2006 13:05 <REP> ..
24.02.2006 13:05 <REP> .
1 fichier(s) 62 octets
6 R‚p(s) 21808562176 octets libres
Le volume dans le lecteur C s'appelle HP_PAVILION
Le num‚ro de s‚rie du volume est 7033-F3A9

R‚pertoire de C:\Documents and Settings\jb\Application Data

15.12.2006 19:16 <REP> Lavasoft
13.11.2006 20:16 <REP> FotoWire
05.11.2006 01:29 <REP> Azureus
27.07.2006 20:32 <REP> Teleca
25.07.2006 20:20 8 usb.dat.bin
21.07.2006 04:12 <REP> FrostWire
07.07.2006 18:07 <REP> HbTools_Icons
28.06.2006 23:52 <REP> G-Force
24.06.2006 13:54 <REP> MSN Search Toolbar
19.04.2006 02:10 <REP> muvee Technologies
14.04.2006 22:28 <REP> Talkback
14.04.2006 22:25 <REP> Mozilla
03.04.2006 17:09 <REP> Apple Computer
13.03.2006 17:53 <REP> Sonic
13.03.2006 17:53 <REP> Leadertech
11.03.2006 03:12 <REP> Sun
07.03.2006 19:38 <REP> MSNInstaller
07.03.2006 19:30 <REP> Google
07.03.2006 19:04 <REP> Macromedia
05.03.2006 20:34 <REP> HPQ
04.03.2006 21:30 <REP> InterVideo
26.02.2006 15:43 <REP> HP
25.02.2006 20:36 <REP> Help
23.02.2006 21:45 <REP> AdobeUM
23.02.2006 21:44 <REP> Adobe
23.02.2006 21:35 <REP> Template
23.02.2006 21:35 10368 wklnhst.dat
23.02.2006 14:04 62 desktop.ini
23.02.2006 14:04 <REP> Identities
23.02.2006 14:04 <REP> Microsoft
23.02.2006 14:04 <REP> Symantec
23.02.2006 14:04 <REP> ..
23.02.2006 14:04 <REP> .
23.02.2006 14:04 <REP> Real
3 fichier(s) 10438 octets
31 R‚p(s) 21808558080 octets libres
******************************************
Recherche des taches planifiées dans C:\WINDOWS\tasks

Le volume dans le lecteur C s'appelle HP_PAVILION
Le num‚ro de s‚rie du volume est 7033-F3A9

R‚pertoire de C:\WINDOWS\Tasks

15.09.2006 22:09 284 AppleSoftwareUpdate.job
08.05.2006 20:18 560 Norton AntiVirus - Effectuer une analyse complŠte du systŠme - jb.job
24.11.2004 22:18 <REP> ..
24.11.2004 22:18 <REP> .
23.11.2004 15:29 6 SA.DAT
05.08.2004 12:00 65 desktop.ini
4 fichier(s) 915 octets
2 R‚p(s) 21'808'558'080 octets libres

******************************************
Recherche dans Program files

Le dossier C:\Program Files\C2Media n'existe pas

*************** Fin du rapport ****************

| Alerter

Répondre à kirikou19

Angeldark

22 Décembre 2006 16:48:26

Re,

Télécharge KillBox d'Option^Explicit.

Dézippe le dans un dossier ou sur ton bureau (Clique droit puis Extraire Tout).
Selectionne le texte dans le cadre :

Citation :

C:\Documents and Settings\All Users\Application Data\Zylom
C:\Documents and Settings\Armelle\Application Data\Zylom
C:\Documents and Settings\Armelle\Application Data\HbTools
C:\Documents and Settings\aym‚ric\Application Data\HbTools
C:\Documents and Settings\B‚n‚dicte\Application Data\Zylom
C:\Documents and Settings\B‚n‚dicte\Application Data\HbTools
C:\Documents and Settings\Famille Yanga\Application Data\HbTools

---> Clique Droit puis Copier.
----------

-- Ouvre Killbox.exe
-- Choisis "Delete on reboot"
-- Clique sur :
- " File " -> " Paste from Clipboard "
- " All Files "

Pour terminer clique sur [:angeldark:3]

Une question te sera alors posée :
" File will be Removed on Reboot, Do you want to reboot now ? "

-- Répond par OUI, un compte à rebours s'enclenche, ton PC va redémarrer.
-- Après redémarrage, relance Killbox puis clique sur le menu : Files -> Logs -> Actions History Log, poste ce rapport ici.

NOTE: Si tu reçois le message "PendingFileRenameOperations Registry Data has been removed by external process!"
Redémarre ton PC manuellement.

AIDE : Tuto sur KillBox (Jesses)

| Alerter

Répondre à Angeldark

kirikou19

23 Décembre 2006 05:32:26

voila donc mon rapport ca doit etre le 50ème !!! Lol merci de me donner ton aide...

Pocket Killbox version 2.0.0.648
Running on Windows XP as jb(Administrator)
was started @ samedi, décembre 23, 2006, 6:10 AM

# 1 [Delete on Reboot]
Path = C:\Documents and Settings\All Users\Application Data\Zylom

# 2 [Delete on Reboot]
Path = C:\Documents and Settings\Armelle\Application Data\Zylom

# 3 [Delete on Reboot]
Path = C:\Documents and Settings\Armelle\Application Data\HbTools

# 4 [Delete on Reboot]
Path = C:\Documents and Settings\Famille Yanga\Application Data\HbTools

I Rebooted @ 6:12:17 AM
Killbox Closed(Exit) @ 6:12:32 AM
__________________________________________________

Pocket Killbox version 2.0.0.648
Running on Windows XP as jb(Administrator)
was started @ samedi, décembre 23, 2006, 6:31 AM

| Alerter

Répondre à kirikou19

Angeldark

23 Décembre 2006 11:11:55

Refais un scan Lopxp stp.

| Alerter

Répondre à Angeldark

kirikou19

23 Décembre 2006 14:43:32

le voila donc :

Rapport fait à 15:43:09.09 le 23.12.2006

Le volume dans le lecteur C s'appelle HP_PAVILION
Le num‚ro de s‚rie du volume est 7033-F3A9

R‚pertoire de C:\Documents and Settings\All Users\Application Data

08.12.2006 18:40 <REP> Yahoo! Companion
07.12.2006 19:17 <REP> Spybot - Search & Destroy
26.09.2006 22:55 <REP> Google
17.08.2006 11:37 <REP> Avanquest Software
11.08.2006 15:25 <REP> PlayFirst
10.08.2006 11:00 <REP> Sandlot Games
08.08.2006 13:10 <REP> Zylom
03.08.2006 20:32 <REP> BVRP Software
27.07.2006 20:31 <REP> Sony Ericsson
27.07.2006 20:31 <REP> Teleca
21.04.2006 23:41 <REP> Windows Genuine Advantage
19.04.2006 02:10 <REP> muvee Technologies
11.04.2006 18:06 <REP> Messenger Plus!
09.04.2006 09:32 1755 QTSBandwidthCache
03.04.2006 17:07 <REP> Apple Computer
28.03.2006 21:25 <REP> MSN Search Toolbar
13.03.2006 16:15 <REP> Adobe
08.03.2006 01:00 <REP> MotiveSysIDs
07.03.2006 18:02 <REP> Motive
24.02.2006 22:33 <REP> QuickTime
01.01.2005 18:58 <REP> Symantec
01.01.2005 18:36 <REP> InstallShield
01.01.2005 18:26 <REP> HP
01.01.2005 18:26 <REP> Sonic
01.01.2005 18:23 2187 hpzinstall.log
01.01.2005 18:08 <REP> SBSI
24.11.2004 21:25 <REP> Microsoft
24.11.2004 21:25 <REP> ..
24.11.2004 21:25 <REP> .
23.11.2004 16:13 62 desktop.ini
3 fichier(s) 4004 octets
27 R‚p(s) 21778358272 octets libres
Le volume dans le lecteur C s'appelle HP_PAVILION
Le num‚ro de s‚rie du volume est 7033-F3A9

R‚pertoire de C:\Documents and Settings\Armelle\Application Data

15.12.2006 20:42 <REP> Talkback
15.12.2006 20:42 <REP> Mozilla
16.10.2006 19:44 <REP> Template
16.10.2006 19:44 474 wklnhst.dat
27.09.2006 15:10 <REP> Google
12.08.2006 10:29 <REP> PlayFirst
09.08.2006 12:29 <REP> Zylom
28.07.2006 09:03 <REP> Teleca
25.06.2006 08:32 <REP> MSN Search Toolbar
23.04.2006 14:36 <REP> HPQ
16.04.2006 21:23 <REP> HbTools
11.04.2006 14:48 <REP> AdobeUM
11.04.2006 14:30 <REP> Help
05.04.2006 16:29 <REP> Apple Computer
29.03.2006 17:36 <REP> Sun
22.03.2006 13:58 <REP> Adobe
09.03.2006 07:27 <REP> Macromedia
08.03.2006 20:35 <REP> HP
01.03.2006 17:34 <REP> Sonic
01.03.2006 17:33 <REP> Leadertech
01.03.2006 17:25 <REP> InterVideo
26.02.2006 20:09 62 desktop.ini
26.02.2006 20:09 <REP> Identities
26.02.2006 20:09 <REP> Real
26.02.2006 20:09 <REP> Microsoft
26.02.2006 20:09 <REP> Symantec
26.02.2006 20:09 <REP> .
26.02.2006 20:09 <REP> ..
2 fichier(s) 536 octets
26 R‚p(s) 21778358272 octets libres
Le volume dans le lecteur C s'appelle HP_PAVILION
Le num‚ro de s‚rie du volume est 7033-F3A9

R‚pertoire de C:\Documents and Settings\aym‚ric\Application Data

15.12.2006 22:38 <REP> Talkback
15.12.2006 22:37 <REP> Mozilla
09.08.2006 15:11 <REP> Sun
28.07.2006 16:44 <REP> Teleca
04.07.2006 12:30 <REP> Sonic
24.06.2006 18:57 <REP> MSN Search Toolbar
21.05.2006 21:35 <REP> HP
19.05.2006 22:18 <REP> InterVideo
10.05.2006 15:37 <REP> AdobeUM
09.05.2006 12:00 <REP> Symantec
05.05.2006 12:02 <REP> Template
05.05.2006 12:02 458 wklnhst.dat
03.05.2006 13:22 <REP> Apple Computer
21.04.2006 10:17 <REP> Google
20.04.2006 11:01 <REP> Adobe
16.04.2006 17:49 <REP> Macromedia
16.04.2006 17:46 <REP> HbTools
16.04.2006 17:46 62 desktop.ini
16.04.2006 17:46 <REP> Identities
16.04.2006 17:46 <REP> Microsoft
16.04.2006 17:46 <REP> ..
16.04.2006 17:46 <REP> .
16.04.2006 17:46 <REP> Real
2 fichier(s) 520 octets
21 R‚p(s) 21778354176 octets libres
Le volume dans le lecteur C s'appelle HP_PAVILION
Le num‚ro de s‚rie du volume est 7033-F3A9

R‚pertoire de C:\Documents and Settings\B‚n‚dicte\Application Data

15.12.2006 22:51 <REP> Talkback
15.12.2006 22:51 <REP> Mozilla
11.08.2006 15:25 <REP> PlayFirst
08.08.2006 13:10 <REP> Zylom
28.07.2006 13:03 <REP> Teleca
04.07.2006 12:30 <REP> Sonic
24.06.2006 19:19 <REP> MSN Search Toolbar
16.04.2006 19:57 <REP> HbTools
08.04.2006 10:16 <REP> Sun
04.04.2006 19:11 <REP> Apple Computer
28.03.2006 11:51 <REP> AdobeUM
28.03.2006 11:50 <REP> Adobe
09.03.2006 12:39 <REP> Macromedia
08.03.2006 20:35 <REP> HP
08.03.2006 12:15 <REP> Google
27.02.2006 13:38 <REP> HPQ
22.02.2006 14:48 <REP> InterVideo
22.02.2006 14:26 62 desktop.ini
22.02.2006 14:26 <REP> Identities
22.02.2006 14:26 <REP> Microsoft
22.02.2006 14:26 <REP> Real
22.02.2006 14:26 <REP> ..
22.02.2006 14:26 <REP> .
22.02.2006 14:26 <REP> Symantec
1 fichier(s) 62 octets
23 R‚p(s) 21778354176 octets libres
Le volume dans le lecteur C s'appelle HP_PAVILION
Le num‚ro de s‚rie du volume est 7033-F3A9

R‚pertoire de C:\Documents and Settings\Default User\Application Data

21.02.2006 16:30 <REP> Symantec
21.02.2006 16:30 <REP> Real
24.11.2004 21:25 <REP> Identities
24.11.2004 21:25 <REP> Microsoft
24.11.2004 21:25 <REP> ..
24.11.2004 21:25 <REP> .
23.11.2004 16:13 62 desktop.ini
1 fichier(s) 62 octets
6 R‚p(s) 21778354176 octets libres
Le volume dans le lecteur C s'appelle HP_PAVILION
Le num‚ro de s‚rie du volume est 7033-F3A9

R‚pertoire de C:\Documents and Settings\Famille Yanga\Application Data

04.12.2006 23:22 <REP> Template
04.12.2006 23:22 192 wklnhst.dat
27.09.2006 13:21 <REP> HP
27.09.2006 12:26 <REP> Google
27.07.2006 21:13 <REP> Teleca
12.07.2006 01:38 <REP> MSN Search Toolbar
19.05.2006 15:10 <REP> Symantec
04.05.2006 20:02 <REP> Adobe
04.05.2006 19:54 <REP> Sun
30.04.2006 10:10 <REP> HbTools
04.04.2006 11:12 <REP> Macromedia
02.04.2006 18:32 62 desktop.ini
02.04.2006 18:32 <REP> Identities
02.04.2006 18:32 <REP> Microsoft
02.04.2006 18:32 <REP> ..
02.04.2006 18:32 <REP> .
02.04.2006 18:32 <REP> Real
2 fichier(s) 254 octets
15 R‚p(s) 21778354176 octets libres
Le volume dans le lecteur C s'appelle HP_PAVILION
Le num‚ro de s‚rie du volume est 7033-F3A9

R‚pertoire de C:\Documents and Settings\Invit‚\Application Data

24.02.2006 13:05 62 desktop.ini
24.02.2006 13:05 <REP> Identities
24.02.2006 13:05 <REP> Real
24.02.2006 13:05 <REP> Microsoft
24.02.2006 13:05 <REP> Symantec
24.02.2006 13:05 <REP> ..
24.02.2006 13:05 <REP> .
1 fichier(s) 62 octets
6 R‚p(s) 21778354176 octets libres
Le volume dans le lecteur C s'appelle HP_PAVILION
Le num‚ro de s‚rie du volume est 7033-F3A9

R‚pertoire de C:\Documents and Settings\jb\Application Data

15.12.2006 19:16 <REP> Lavasoft
13.11.2006 20:16 <REP> FotoWire
05.11.2006 01:29 <REP> Azureus
27.07.2006 20:32 <REP> Teleca
25.07.2006 20:20 8 usb.dat.bin
21.07.2006 04:12 <REP> FrostWire
07.07.2006 18:07 <REP> HbTools_Icons
28.06.2006 23:52 <REP> G-Force
24.06.2006 13:54 <REP> MSN Search Toolbar
19.04.2006 02:10 <REP> muvee Technologies
14.04.2006 22:28 <REP> Talkback
14.04.2006 22:25 <REP> Mozilla
03.04.2006 17:09 <REP> Apple Computer
13.03.2006 17:53 <REP> Sonic
13.03.2006 17:53 <REP> Leadertech
11.03.2006 03:12 <REP> Sun
07.03.2006 19:38 <REP> MSNInstaller
07.03.2006 19:30 <REP> Google
07.03.2006 19:04 <REP> Macromedia
05.03.2006 20:34 <REP> HPQ
04.03.2006 21:30 <REP> InterVideo
26.02.2006 15:43 <REP> HP
25.02.2006 20:36 <REP> Help
23.02.2006 21:45 <REP> AdobeUM
23.02.2006 21:44 <REP> Adobe
23.02.2006 21:35 <REP> Template
23.02.2006 21:35 10368 wklnhst.dat
23.02.2006 14:04 62 desktop.ini
23.02.2006 14:04 <REP> Identities
23.02.2006 14:04 <REP> Microsoft
23.02.2006 14:04 <REP> Symantec
23.02.2006 14:04 <REP> ..
23.02.2006 14:04 <REP> .
23.02.2006 14:04 <REP> Real
3 fichier(s) 10438 octets
31 R‚p(s) 21778350080 octets libres
******************************************
Recherche des taches planifiées dans C:\WINDOWS\tasks

Le volume dans le lecteur C s'appelle HP_PAVILION
Le num‚ro de s‚rie du volume est 7033-F3A9

R‚pertoire de C:\WINDOWS\Tasks

15.09.2006 22:09 284 AppleSoftwareUpdate.job
08.05.2006 20:18 560 Norton AntiVirus - Effectuer une analyse complŠte du systŠme - jb.job
24.11.2004 22:18 <REP> ..
24.11.2004 22:18 <REP> .
23.11.2004 15:29 6 SA.DAT
05.08.2004 12:00 65 desktop.ini
4 fichier(s) 915 octets
2 R‚p(s) 21'778'350'080 octets libres

******************************************
Recherche dans Program files

Le dossier C:\Program Files\C2Media n'existe pas

*************** Fin du rapport ****************

| Alerter

Répondre à kirikou19

Angeldark

24 Décembre 2006 11:39:43

Re,

Redémarre en mode sans échec

- Assure toi d'avoir accès aux dossiers/fichiers cachés
-> Démarrer
-> Panneau de configuration
-> Options des Dossiers, onglet Affichage :
. Clique sur Afficher les dossiers cachés
. Décoche Masquer les extensions des fichiers dont le type est connu
. Décoche Masquer les fichiers protégés du système d'exploitation

Supprime ces dossiers :

C:\Documents and Settings\All Users\Application Data\Zylom
C:\Documents and Settings\Armelle\Application Data\Zylom
C:\Documents and Settings\Armelle\Application Data\HbTools
C:\Documents and Settings\aym‚ric\Application Data\HbTools
C:\Documents and Settings\B‚n‚dicte\Application Data\Zylom
C:\Documents and Settings\B‚n‚dicte\Application Data\HbTools
C:\Documents and Settings\Famille Yanga\Application Data\HbTools

| Alerter

Répondre à Angeldark

kirikou19

24 Décembre 2006 23:27:58

bonjour et joyeux Noël. j'ai fait exactement toutes les manoeuvres demandées mais j'ai toujours cette $@!?§ de virus sur mon msn. reste-t-il encore une manipulation à faire ?

| Alerter

Répondre à kirikou19

Angeldark

25 Décembre 2006 19:51:41

Re,

Reposte un rapport Hijackthis.

| Alerter

Répondre à Angeldark

kirikou19

25 Décembre 2006 19:56:01

Logfile of HijackThis v1.99.1
Scan saved at 20:55:43, on 25.12.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\PROGRA~1\Bluewin\QUICKH~1\SMARTB~1\MotiveSB.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
C:\Program Files\Logitech\ImageStudio\LogiTray.exe
C:\WINDOWS\system32\bssys.exe
C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Teleca Shared\CapabilityManager.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-ch\bin\WindowsSearch.exe
C:\Program Files\Bluewin\Quick Help\bin\mpbtn.exe
C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-ch\bin\WindowsSearchIndexer.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
c:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
C:\Program Files\iTunes\iTunes.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\jb\LOCALS~1\Temp\Rar$EX00.500\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ch/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.01net.com/telecharger/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Bluewin Toolbar - {4E7BD74F-2B8D-469E-DCF7-E869A199B87D} - C:\WINDOWS\DOWNLO~1\bluewin.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\DOCUME~1\jb\Bureau\SPYBOT~1\SDHelper.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: Barre d'outils de MSN Search Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-ch\msntb.dll
O3 - Toolbar: Bluewin Toolbar - {4E7BD74F-2B8D-469E-DCF7-E869A199B87D} - C:\WINDOWS\DOWNLO~1\bluewin.dll (file missing)
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Barre d'outils de MSN Search - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-ch\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\Bluewin\QUICKH~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
O4 - HKLM\..\Run: [LogitechGalleryRepair] C:\Program Files\Logitech\ImageStudio\ISStart.exe
O4 - HKLM\..\Run: [LogitechImageStudioTray] C:\Program Files\Logitech\ImageStudio\LogiTray.exe
O4 - HKLM\..\Run: [bssys] C:\WINDOWS\system32\bssys.exe
O4 - HKCU\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [msnmsgr] ~"C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Quick Help.lnk = C:\Program Files\Bluewin\Quick Help\bin\matcli.exe
O4 - Global Startup: Recherche sur le bureau de Windows.lnk = C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-ch\bin\WindowsSearch.exe
O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-ch\msntb.dll/search.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra button: Information - {0B590232-B5EB-41FB-A867-95D6A8327BDF} - C:\WINDOWS\DOWNLO~1\bluewin.dll (file missing)
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.wanadoo.fr (file missing) (HKCU)
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPACl...
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClie...
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab47946.ca...
O18 - Protocol: bw+0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: offline-8876480 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: SPBBCSvc - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe

| Alerter

Répondre à kirikou19

Angeldark

25 Décembre 2006 20:01:37

Les manipulations sont à faire sans interruption et dans l'ordre
Si tu ne comprends pas quelque chose, demande des explications avant de commencer.

Enregistre cette page pour avoir accès à la procédure en mode sans échec :
- Fichier
- Enregistrer Sous...
- Nom du fichier : Procédure
- Type : Page Web, complète
- Pour l'emplacement, choisis ton Bureau
- Clique maintenant sur Enregistrer

**Si tu es sous Internet Explorer 7.0, l'onglet à sélectionner est Page**

Télécharge:

Ccleaner
Installe le dans un répertoire dédié.
Lors de l'installation décoche: "Ajouter la Barre d'Outils Yahoo! Ccleaner"
AIDE : Tuto sur Ccleaner

Redémarre en mode sans échec

Ferme TOUTES les fenêtres ouvertes (sauf Hijackthis)
et les logiciels de protection en temps réel (Antivirus, TeaTimer...)

- Lance Hijackthis ->Do a system scan only
->Coche les lignes ci-dessous :

O2 - BHO: Bluewin Toolbar - {4E7BD74F-2B8D-469E-DCF7-E869A199B87D} - C:\WINDOWS\DOWNLO~1\bluewin.dll (file missing)
O3 - Toolbar: Bluewin Toolbar - {4E7BD74F-2B8D-469E-DCF7-E869A199B87D} - C:\WINDOWS\DOWNLO~1\bluewin.dll (file missing)
O4 - HKLM\..\Run: [bssys] C:\WINDOWS\system32\bssys.exe

Clique sur Fix checked (en bas à gauche)

- Assure toi d'avoir accès aux dossiers/fichiers cachés
-> Démarrer
-> Panneau de configuration
-> Options des Dossiers, onglet Affichage :
. Clique sur Afficher les dossiers cachés
. Décoche Masquer les extensions des fichiers dont le type est connu
. Décoche Masquer les fichiers protégés du système d'exploitation

- Supprime ce fichier :
C:\WINDOWS\system32\bssys.exe

-- Lance Ccleaner :
- Clique sur le bouton "Analyse"
- Clique maintenant sur le bouton "Lancer le Néttoyage".

- Clique sur l'onglet "Erreurs"
- Clique successivement sur "Chercher des erreurs" puis sur "Réparer les erreurs sélectionnées".

Redémarre normalement.

- Poste un nouveau rapport Hijackthis.

| Alerter

Répondre à Angeldark

kirikou19

26 Décembre 2006 15:53:07

Voila donc le rapport hijackthis

Logfile of HijackThis v1.99.1
Scan saved at 16:51:17, on 26.12.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\Bluewin\QUICKH~1\SMARTB~1\MotiveSB.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
C:\Program Files\Logitech\ImageStudio\LogiTray.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\Fichiers communs\Teleca Shared\CapabilityManager.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-ch\bin\WindowsSearch.exe
C:\Program Files\Bluewin\Quick Help\bin\mpbtn.exe
C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-ch\bin\WindowsSearchIndexer.exe
c:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
C:\Program Files\MSN Toolbar Suite\SL\02.05.0001.1119\fr-ch\msn_sl.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\jb\LOCALS~1\Temp\Rar$EX00.891\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ch/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.01net.com/telecharger/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\DOCUME~1\jb\Bureau\SPYBOT~1\SDHelper.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: Barre d'outils de MSN Search Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-ch\msntb.dll
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Barre d'outils de MSN Search - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-ch\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\Bluewin\QUICKH~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
O4 - HKLM\..\Run: [LogitechGalleryRepair] C:\Program Files\Logitech\ImageStudio\ISStart.exe
O4 - HKLM\..\Run: [LogitechImageStudioTray] C:\Program Files\Logitech\ImageStudio\LogiTray.exe
O4 - HKCU\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [msnmsgr] ~"C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Quick Help.lnk = C:\Program Files\Bluewin\Quick Help\bin\matcli.exe
O4 - Global Startup: Recherche sur le bureau de Windows.lnk = C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-ch\bin\WindowsSearch.exe
O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-ch\msntb.dll/search.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra button: Information - {0B590232-B5EB-41FB-A867-95D6A8327BDF} - C:\WINDOWS\DOWNLO~1\bluewin.dll (file missing)
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.wanadoo.fr (file missing) (HKCU)
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPACl...
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClie...
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab47946.ca...
O18 - Protocol: bw+0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: offline-8876480 - {9FB3C502-6B39-4D20-B402-382A3CFBE870} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: SPBBCSvc - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe

| Alerter

Répondre à kirikou19

kirikou19

26 Décembre 2006 15:53:29

merci d'avance !

| Alerter

Répondre à kirikou19

Angeldark

26 Décembre 2006 16:02:21

Toujours ce problème ?

| Alerter

Répondre à Angeldark

kirikou19

26 Décembre 2006 17:49:23

non j'ai bien l'impression que ça a disparu merci beaucoup !!!!!!!

| Alerter

Répondre à kirikou19

kirikou19

26 Décembre 2006 17:49:40

YOUPIII !!!!!!

| Alerter

Répondre à kirikou19

Angeldark

26 Décembre 2006 17:52:31

Edite ton premier message avec

puis ajoute (Résolu) au titre.

Dénonce ton infection (Vers MSN) pour faire condamner les auteurs, ça serait sympa.
Crée un message pour faire avancer les choses sur Malware-Complaints, nous devons être le plus nombreux possibles, alors rends compte de ton infection.
AIDE : Comment rapporter son infection sur Malware-Complaints ?

Consulte cette page pour éviter que ces problèmes ne réapparaissent.

| Alerter

Répondre à Angeldark

Tom's guide dans le monde