Toujours myalbum2007

Bonjour


Télécharge MSNFix.zip (de !aur3n7) sur le Bureau
http://sosvirus.changelog.fr/MSNFix.zip

Décompresse-le (clic droit >> Extraire ici) et double clique sur le fichier MSNFix.bat.
- Exécute l'option R.
-- Si l'infection est détectée, exécute l'option N.

Le rapport sera enregistré dans le même dossier que MSNFix sous forme date_heure.txt
Poste le ainsi qu'un nouveau scan HijackThis fait en mode normal.

Note :
Si une erreur de suppression est détectée un message s'affichera demandant de redémarrer l'ordinateur afin de terminer les opérations. Dans ce cas il suffit de redémarrer l'ordinateur en mode normal
Sauvegarder et fermer le rapport pour que Windows termine de se lancer normalement.

Que dois-je faire ensuite?

arretez un peu on va qund meme pas faire 100000000 topic pour un virus
http://dcangeldark.blogspot.com/20 [...] oszip.html

SDFix: Version 1.90

Run by Antoine on 08/07/2007 at 17:12

Microsoft Windows XP [version 5.1.2600]

Running From: C:\SDFix

Safe Mode:
Checking Services:






Restoring Windows Registry Values
Restoring Windows Default Hosts File
Restoring Missing Security Center Service
Restoring Missing SharedAccess Service

Rebooting...


Normal Mode:
Checking Files:

Below files will be copied to Backups folder then removed:

C:\DOCUME~1\Antoine\LOCALS~1\Temp\ExtractDLL.dll - Deleted
C:\DOCUME~1\Antoine\LOCALS~1\Temp\hdh1E.tmp - Deleted
C:\WINDOWS\myalbum2007.zip - Deleted
C:\WINDOWS\PART0100.DAT - Deleted
C:\WINDOWS\system32\sysprinters.dll - Deleted



Removing Temp Files...

ADS Check:

Checking C:\WINDOWS
C:\WINDOWS
No streams found.

Checking C:\WINDOWS\system32
C:\WINDOWS\system32
No streams found.

Checking C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
No streams found.

Checking C:\WINDOWS\system32\ntoskrnl.exe
C:\WINDOWS\system32\ntoskrnl.exe
No streams found.



Final Check:

Remaining Services:
------------------



Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\\Program Files\\LimeWire\\LimeWire.exe"="C:\\Program Files\\LimeWire\\LimeWire.exe:*:Enabled:LimeWire"
"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe"="C:\\Program Files\\VideoLAN\\VLC\\vlc.exe:*:Enabled:VLC media player"
"C:\\Program Files\\Yu-Gi-Oh Virtual Battle 5\\YVB5.exe"="C:\\Program Files\\Yu-Gi-Oh Virtual Battle 5\\YVB5.exe:*:Enabled:YVB5"
"C:\\Program Files\\eMule\\emule.exe"="C:\\Program Files\\eMule\\emule.exe:*:Enabled:eMule"
"C:\\Program Files\\MSN Messenger\\msncall.exe"="C:\\Program Files\\MSN Messenger\\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
"C:\\Program Files\\Azureus\\Azureus.exe"="C:\\Program Files\\Azureus\\Azureus.exe:*:Enabled:Azureus"
"C:\\Program Files\\Grisoft\\AVG Free\\avginet.exe"="C:\\Program Files\\Grisoft\\AVG Free\\avginet.exe:*:Enabled:avginet.exe"
"C:\\Program Files\\Grisoft\\AVG Free\\avgemc.exe"="C:\\Program Files\\Grisoft\\AVG Free\\avgemc.exe:*:Enabled:avgemc.exe"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\\Program Files\\BitGrabber\\BitGrabber.exe"="C:\\Program Files\\BitGrabber\\BitGrabber.exe:*:Enabled:Torrent P2P application"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\MSN Messenger\\msncall.exe"="C:\\Program Files\\MSN Messenger\\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

Remaining Files:
---------------

Backups Folder: - C:\SDFix\backups\backups.zip

Files with Hidden Attributes:

C:\Documents and Settings\Antoine\Local Settings\Application Data\Microsoft\Messenger\homerleporc@hotmail.com\Sharing Folders\a_ton_avis_87@hotmail.com\Thumbs.db
C:\i386\705AB3DBF1.sys
C:\i386\KGyGaAvL.sys
C:\WINDOWS\system32\705AB3DBF1.sys
C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp

Finished






Logfile of HijackThis v1.99.1
Scan saved at 17:25:38, on 08/07/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\system32\hkcmd.exe
C:\PROGRA~1\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Dell\Media Experience\DMXLauncher.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\NetWaiting\netWaiting.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Club-Internet\Wizard\Agent_wifi.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\Program Files\Olympus\DeviceDetector\DevDtct2.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\Antoine\LOCALS~1\Temp\Rar$EX00.843\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.fr/myway
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell.fr/myway
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer avec Club-Internet
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\deSrcAs.dll (file missing)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: RunBus Class - {4865F155-CE00-4E93-A414-147844D7C81A} - C:\WINDOWS\system32\tcblpase.dll (file missing)
O2 - BHO: SelasI Class - {59F4F380-01A0-4083-9FA4-E3B827319F7E} - C:\WINDOWS\system32\vcbhkhhm.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: ohb - {5ED7D3DE-6DBE-4516-8712-01B1B64B7057} - C:\WINDOWS\system32\SearchTool\nsx24.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [ShowLOMControl]

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [MSKDetectorExe] C:\Program Files\McAfee\SpamKiller\MSKDetct.exe /uninstall
O4 - HKLM\..\Run: [Workflow] D:\install\Workflow.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|DEFAULT=cnx|PARAM=
O4 - HKCU\..\Run: [ModemOnHold] C:\Program Files\NetWaiting\netWaiting.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Creative Detector] C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe /R
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVGFRE~1\avgw.exe /RUNONCE
O4 - HKCU\..\Run: [Chckup] C:\WINDOWS\system32\Netverchk.exe
O4 - HKCU\..\Run: [ItalU] C:\WINDOWS\system32\italfds.exe
O4 - HKCU\..\Run: [TVAgent WiFi] C:\Club-Internet\Wizard\Agent_wifi.exe
O4 - HKCU\..\Run: [LifeCU] C:\WINDOWS\system32\BastaYa.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [HOPEOPEN] C:\DOCUME~1\Antoine\APPLIC~1\FIVEFL~1\Barb Itch.exe
O4 - Global Startup: Device Detector 3.lnk = C:\Program Files\Olympus\DeviceDetector\DevDtct2.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?93338ff98fda48518e5bd8fa15a7c690
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?93338ff98fda48518e5bd8fa15a7c690
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-F [...] E_UNO1.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/bina [...] b56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/bina [...] b56986.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) - Intel(R) Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe





Rapport lopxpMH2 version 2.0 fait à 17:26:42,28 le 08/07/2007
C:\Documents and Settings\Antoine\Bureau

******************************************
## Répertoires Application Data

Le volume dans le lecteur C n'a pas de nom.
Le numéro de série du volume est AC77-8C07

Répertoire de C:\Documents and Settings\All Users\Application Data

20/08/2004 11:30 <REP> .
20/08/2004 11:30 <REP> ..
28/03/2006 22:17 <REP> Adobe
07/07/2007 01:37 <REP> AntiVir PersonalEdition Classic
28/03/2006 22:16 <REP> AOL
16/07/2006 10:06 <REP> avg7
14/09/2006 15:35 <REP> Google
14/09/2006 16:18 <REP> Grisoft
28/03/2006 22:20 <REP> InstallShield
28/03/2006 22:14 <REP> Intel
28/03/2006 22:24 <REP> McAfee
28/03/2006 22:23 <REP> McAfee.com
28/03/2006 22:24 <REP> McAfee.com Personal Firewall
13/05/2006 12:54 <REP> Messenger Plus!
20/08/2004 11:30 <REP> Microsoft
07/10/2006 11:02 <REP> Motive
28/03/2006 22:17 <REP> QuickTime
22/02/2007 23:50 <REP> roam defy rdr noun
20/08/2004 11:46 <REP> SBSI
28/03/2006 22:17 <REP> Viewpoint
22/08/2006 19:55 <REP> Windows Genuine Advantage
25/08/2006 12:42 <REP> Windows Live Toolbar
20/08/2004 11:30 62 desktop.ini
28/03/2006 22:13 4 QSLLPSVCShare
2 fichier(s) 66 octets
22 Rép(s) 7 492 857 856 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le numéro de série du volume est AC77-8C07

Répertoire de C:\Documents and Settings\Antoine\Application Data

04/04/2006 10:29 <REP> .
04/04/2006 10:29 <REP> ..
05/04/2006 15:16 <REP> Adobe
16/07/2006 10:07 <REP> AVG7
24/08/2006 20:10 <REP> Azureus
05/01/2007 01:25 <REP> BSplayer
04/04/2006 10:29 <REP> Corel
04/04/2006 11:17 <REP> Corel Photo Album
04/04/2006 16:42 <REP> Creative
05/04/2006 22:20 <REP> CyberLink
22/02/2007 23:49 <REP> five flap help
14/09/2006 15:23 <REP> F-Secure
14/09/2006 16:54 <REP> Google
07/07/2007 13:23 <REP> Grisoft
04/04/2006 18:54 <REP> Help
04/04/2006 10:29 <REP> Identities
04/04/2006 10:29 <REP> Intel
14/09/2006 15:22 <REP> ispnews
04/04/2006 15:41 <REP> Lavasoft
04/04/2006 23:17 <REP> Leadertech
06/04/2006 16:46 <REP> Macromedia
09/07/2006 16:15 <REP> MAGIX
04/04/2006 10:29 <REP> McAfee.com Personal Firewall
04/04/2006 10:29 <REP> Microsoft
04/11/2006 14:04 <REP> Mozilla
03/05/2006 14:08 <REP> Real
20/03/2007 12:49 <REP> Screenshot Sender
08/06/2007 09:21 <REP> SecondLife
04/04/2006 23:17 <REP> Sonic
04/04/2006 10:29 <REP> Sun
04/04/2006 17:47 <REP> Template
07/06/2006 19:42 <REP> vlc
21/01/2007 20:46 <REP> Vso
04/04/2006 10:29 <REP> You've Got Pictures Screensaver
04/04/2006 10:29 62 desktop.ini
21/01/2007 20:46 87 608 ezpinst.exe
21/01/2007 20:46 7 812 ezplay.cat
21/01/2007 20:46 94 080 ezplay.sys
11/11/2006 18:49 23 inifile41.ini
11/11/2006 18:49 381 internaldb1942.dat
19/05/2007 14:03 524 internaldb2905.dat
11/11/2006 18:49 49 internaldb41.dat
11/11/2006 18:49 20 480 internaldb4827.dat
11/11/2006 18:49 0 internaldb5436.dat
11/11/2006 18:49 0 internaldb6334.dat
11/11/2006 18:49 9 216 internaldb8467.dat
21/01/2007 20:46 1 104 IQXYIXMI.inf
21/01/2007 20:46 125 IQXYIXMI.ini
21/01/2007 20:46 34 IQXYIXMI.log
21/01/2007 20:46 7 824 pcouffin.cat
21/01/2007 20:46 1 144 pcouffin.inf
21/01/2007 20:46 33 pcouffin.log
21/01/2007 20:46 47 360 pcouffin.sys
19 fichier(s) 277 859 octets
34 Rép(s) 7 492 853 760 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le numéro de série du volume est AC77-8C07

Répertoire de C:\Documents and Settings\Antoine\Local Settings\Application Data

04/04/2006 10:29 <REP> .
04/04/2006 10:29 <REP> ..
04/04/2006 10:29 <REP> {7148F0A6-6813-11D6-A77B-00B0D0142030}
14/04/2006 22:16 <REP> Adobe
04/04/2006 10:29 <REP> ApplicationHistory
04/04/2006 10:29 <REP> BVRP Software
04/04/2006 11:17 <REP> Corel Photo Album
14/09/2006 16:54 <REP> Google
04/04/2006 18:54 <REP> Help
05/04/2006 15:07 <REP> Identities
04/04/2006 10:29 <REP> Microsoft
04/11/2006 14:08 <REP> Mozilla
05/04/2006 22:20 <REP> PowerDVD
25/03/2007 23:08 <REP> WMTools Downloaded Files
16/04/2006 17:57 178 176 DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
04/04/2006 10:29 130 fusioncache.dat
04/04/2006 11:17 38 208 GDIPFONTCACHEV1.DAT
05/11/2006 00:10 4 313 698 IconCache.db
4 fichier(s) 4 530 212 octets
14 Rép(s) 7 492 853 760 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le numéro de série du volume est AC77-8C07

Répertoire de C:\Documents and Settings\Default User\Application Data

20/08/2004 11:30 <REP> .
20/08/2004 11:30 <REP> ..
04/04/2006 10:28 <REP> Corel
04/04/2006 10:28 <REP> Identities
04/04/2006 10:28 <REP> Intel
20/08/2004 11:30 <REP> Microsoft
04/04/2006 10:28 <REP> Sun
04/04/2006 10:28 <REP> You've Got Pictures Screensaver
20/08/2004 11:30 62 desktop.ini
1 fichier(s) 62 octets
8 Rép(s) 7 492 853 760 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le numéro de série du volume est AC77-8C07

Répertoire de C:\Documents and Settings\Default User\Local Settings\Application Data

20/08/2004 11:30 <REP> .
20/08/2004 11:30 <REP> ..
04/04/2006 10:28 <REP> {7148F0A6-6813-11D6-A77B-00B0D0142030}
04/04/2006 10:28 <REP> ApplicationHistory
04/04/2006 10:28 <REP> BVRP Software
20/08/2004 11:37 <REP> Microsoft
04/04/2006 10:28 135 fusioncache.dat
04/04/2006 10:28 3 251 328 IconCache.db
2 fichier(s) 3 251 463 octets
6 Rép(s) 7 492 853 760 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le numéro de série du volume est AC77-8C07

Répertoire de C:\Documents and Settings\LocalService\Application Data

20/08/2004 11:41 <REP> .
20/08/2004 11:41 <REP> ..
16/07/2006 10:10 <REP> AVG7
04/04/2006 15:31 <REP> McAfee.com Personal Firewall
20/08/2004 11:41 <REP> Microsoft
0 fichier(s) 0 octets
5 Rép(s) 7 492 853 760 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le numéro de série du volume est AC77-8C07

Répertoire de C:\Documents and Settings\LocalService\Local Settings\Application Data

20/08/2004 11:41 <REP> .
20/08/2004 11:41 <REP> ..
20/08/2004 11:41 <REP> Microsoft
0 fichier(s) 0 octets
3 Rép(s) 7 492 853 760 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le numéro de série du volume est AC77-8C07

Répertoire de C:\Documents and Settings\NetworkService\Application Data

20/08/2004 11:41 <REP> .
20/08/2004 11:41 <REP> ..
05/04/2006 07:31 <REP> Intel
20/08/2004 11:41 <REP> Microsoft
0 fichier(s) 0 octets
4 Rép(s) 7 492 849 664 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le numéro de série du volume est AC77-8C07

Répertoire de C:\Documents and Settings\NetworkService\Local Settings\Application Data

20/08/2004 11:41 <REP> .
20/08/2004 11:41 <REP> ..
20/08/2004 11:41 <REP> Microsoft
0 fichier(s) 0 octets
3 Rép(s) 7 492 849 664 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le numéro de série du volume est AC77-8C07

Répertoire de C:\WINDOWS\system32\config\systemprofile\Application Data

20/08/2004 11:40 <REP> .
20/08/2004 11:40 <REP> ..
04/04/2006 10:28 <REP> Corel
04/04/2006 10:28 <REP> Identities
28/03/2006 22:14 <REP> Intel
04/04/2006 10:29 <REP> McAfee.com Personal Firewall
20/08/2004 11:40 <REP> Microsoft
04/04/2006 10:28 <REP> Sun
04/04/2006 10:28 <REP> You've Got Pictures Screensaver
20/08/2004 11:40 62 desktop.ini
1 fichier(s) 62 octets
9 Rép(s) 7 492 849 664 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le numéro de série du volume est AC77-8C07

Répertoire de C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data

20/08/2004 11:40 <REP> .
20/08/2004 11:40 <REP> ..
04/04/2006 10:28 <REP> {7148F0A6-6813-11D6-A77B-00B0D0142030}
04/04/2006 10:28 <REP> ApplicationHistory
04/04/2006 10:28 <REP> BVRP Software
20/08/2004 11:40 <REP> Microsoft
04/04/2006 10:28 135 fusioncache.dat
04/04/2006 10:28 3 251 328 IconCache.db
2 fichier(s) 3 251 463 octets
6 Rép(s) 7 492 849 664 octets libres

******************************************
Recherche des taches planifiées dans C:\WINDOWS\tasks


C:\WINDOWS\Tasks\Rappel
Rappel inexploitable


C:\WINDOWS\Tasks\Vérifier
Vérifier inexploitable

******************************************
## Répertoires de C:\Program Files

Le volume dans le lecteur C n'a pas de nom.
Le numéro de série du volume est AC77-8C07

Répertoire de C:\Program Files

07/07/2007 01:37 <REP> .
07/07/2007 01:37 <REP> ..
28/03/2006 22:17 <REP> Adobe
13/05/2006 12:53 <REP> Adverts
29/01/2007 22:27 <REP> ahead
26/02/2007 19:03 <REP> Alwil Software
07/07/2007 01:37 <REP> AntiVir PersonalEdition Classic
25/05/2007 01:13 <REP> Azureus
23/02/2007 00:04 <REP> BitGrabber
28/03/2006 22:13 <REP> Broadcom
05/01/2007 01:26 <REP> BSplayer_WhenUSave_Installer
31/08/2006 12:30 <REP> burnatonce
07/10/2006 11:02 <REP> Common Files
20/08/2004 11:35 <REP> ComPlus Applications
28/03/2006 22:11 <REP> CONEXANT
09/04/2006 16:27 <REP> Corel
04/04/2006 16:36 <REP> Creative
28/03/2006 22:14 <REP> CyberLink
28/03/2006 22:20 <REP> Dell
28/03/2006 22:13 <REP> Digital Line Detect
09/09/2006 23:17 <REP> DivX
09/09/2006 23:16 <REP> eMule
05/11/2006 17:34 <REP> Fichiers communs
26/04/2007 02:00 <REP> five flap help
07/02/2007 12:54 <REP> Google
07/07/2007 13:23 <REP> Grisoft
28/03/2006 22:14 <REP> Intel
28/03/2006 22:14 <REP> Intel, Inc
06/07/2007 03:01 <REP> Internet Explorer
07/05/2007 14:44 <REP> Java
04/04/2006 15:49 <REP> Kaspersky Lab
14/09/2006 14:53 <REP> Lavasoft
28/03/2006 22:17 <REP> Learn2.com
01/07/2007 22:08 <REP> LimeWire
02/07/2007 16:50 <REP> L'Odyssée d'Abe
28/03/2006 22:24 <REP> McAfee
28/03/2006 22:09 <REP> Messenger
26/06/2007 11:21 <REP> Messenger Plus! Live
13/05/2006 12:53 <REP> MessengerPlus! 3
20/08/2004 11:37 <REP> microsoft frontpage
09/10/2006 16:17 <REP> Microsoft Office
28/03/2006 22:16 <REP> Microsoft Works
28/03/2006 22:13 <REP> Modem Helper
20/08/2004 11:35 <REP> Movie Maker
08/07/2007 17:21 <REP> Mozilla Firefox
20/08/2004 11:34 <REP> MSN
20/08/2004 11:34 <REP> MSN Gaming Zone
26/06/2007 11:21 <REP> MSN Messenger
14/10/2006 23:45 <REP> MSXML 4.0
28/03/2006 22:20 <REP> MyWaySA
20/08/2004 11:35 <REP> NetMeeting
28/03/2006 22:13 <REP> NetWaiting
24/09/2006 14:52 <REP> Olympus
21/01/2007 20:53 <REP> ONES Trial (F)
20/08/2004 11:34 <REP> Online Services
17/06/2007 12:09 <REP> Outlook Express
11/11/2006 18:49 <REP> PuzzleDesktop
28/03/2006 22:17 <REP> QuickTime
04/11/2006 14:02 <REP> Real
20/08/2004 11:35 <REP> Services en ligne
28/06/2007 21:57 <REP> Sierra On-Line
28/03/2006 22:11 <REP> Sigmatel
15/04/2006 16:15 <REP> Sonic
28/03/2006 22:12 <REP> Synaptics
29/06/2007 11:56 <REP> Ubisoft
07/06/2006 19:04 <REP> VideoLAN
28/03/2006 22:17 <REP> Viewpoint
21/01/2007 20:46 <REP> VSO
04/04/2006 23:01 <REP> Wanadoo
05/01/2007 01:25 <REP> Webteh
12/04/2006 13:18 <REP> Winamp
26/06/2007 11:21 <REP> Windows Live
03/06/2007 00:17 <REP> Windows Live Toolbar
02/05/2007 20:36 <REP> Windows Media Connect 2
02/05/2007 20:36 <REP> Windows Media Player
20/08/2004 11:34 <REP> Windows NT
07/03/2007 02:00 <REP> WinRAR
24/11/2006 23:28 <REP> WLAN
28/06/2007 21:57 <REP> WON
20/08/2004 11:37 <REP> xerox
09/09/2006 23:21 <REP> Yahoo!
28/03/2006 22:20 <REP> Your Company Name
03/04/2007 20:46 <REP> Yu-Gi-Oh Virtual Battle 5
04/04/2006 16:15 <REP> Zone Labs
0 fichier(s) 0 octets
84 Rép(s) 7 492 833 280 octets libres

******************************************
## Popups autorisées

* Internet Explorer

! REG.EXE VERSION 3.0

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows\Allow
www1.euro.dell.com REG_NONE
support.euro.dell.com REG_NONE
dns-look-up.com REG_SZ
www.dns-look-up.com REG_SZ
netsearchsoft.com REG_SZ
www.netsearchsoft.com REG_SZ
netbios-wait.com REG_SZ
www.netbios-wait.com REG_SZ

* Mozilla Firefox (1 autorisé 2 interdit)

---------- C:\DOCUMENTS AND SETTINGS\ANTOINE\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\Z4LQJ3N0.DEFAULT\HOSTPERM.1

******************************************
## Registre

* [HKEY_CURRENT_USER\\Software\Microsoft\Internet Explorer\Main]
Search Bar REG_SZ http://www.google.com/ie

* [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
HOPEOPEN REG_SZ C:\DOCUME~1\Antoine\APPLIC~1\FIVEFL~1\Barb Itch.exe

******************************************
## Zones de sécurité

* HKCU Domains (4)

* P3P History (5)

******************************************
## Recherche C:\WINDOWS\*.htm, "C:\WINDOWS\*.gif"


*************** Fin du rapport ****************

File/Folder C:\WINDOWS\system32\vcbhkhhm.dll not found.
C:\WINDOWS\system32\SearchTool moved successfully.
File/Folder C:\WINDOWS\system32\Netverchk.exe not found.
File/Folder C:\WINDOWS\system32\italfds.exe not found.
File/Folder C:\WINDOWS\system32\BastaYa.exe not found.
C:\Documents and Settings\All Users\Application Data\roam defy rdr noun moved successfully.
C:\Documents and Settings\Antoine\Application Data\five flap help moved successfully.
C:\Program Files\Adverts moved successfully.
C:\Program Files\five flap help moved successfully.
C:\Program Files\MyWaySA\SrchAsDe moved successfully.
C:\Program Files\MyWaySA moved successfully.

Created on 07/09/2007 17:11:51








Logfile of HijackThis v1.99.1
Scan saved at 17:13:56, on 09/07/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Dell\Media Experience\DMXLauncher.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\PROGRA~1\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\NetWaiting\netWaiting.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Club-Internet\Wizard\Agent_wifi.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\Program Files\Olympus\DeviceDetector\DevDtct2.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\Antoine\LOCALS~1\Temp\Rar$EX00.562\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.fr/myway
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell.fr/myway
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer avec Club-Internet
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [MSKDetectorExe] C:\Program Files\McAfee\SpamKiller\MSKDetct.exe /uninstall
O4 - HKLM\..\Run: [Workflow] D:\install\Workflow.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|DEFAULT=cnx|PARAM=
O4 - HKCU\..\Run: [ModemOnHold] C:\Program Files\NetWaiting\netWaiting.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Creative Detector] C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe /R
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVGFRE~1\avgw.exe /RUNONCE
O4 - HKCU\..\Run: [TVAgent WiFi] C:\Club-Internet\Wizard\Agent_wifi.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - Global Startup: Device Detector 3.lnk = C:\Program Files\Olympus\DeviceDetector\DevDtct2.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?93338ff98fda48518e5bd8fa15a7c690
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?93338ff98fda48518e5bd8fa15a7c690
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) - Intel(R) Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

Le rapport ne s'affiche pas et je ne sais pas où le trouver. Comment faire?