besoin d'aide trojan.downloader.conhook.ai !!!!!!!
Dernière réponse : dans Sécurité
Bonjour je suis nouvelle sur ce forum
depuis quelque temps j ai de la difficulter avec mon ordi
il est lent et maintenant je ne suis plus capable de d'entré dans mon jeu de age of empire ca m'écrit erreur : le fichier MSXML4.0
est est mal installer bla bla bla mais je ne trouve pas ce fichier
et l'analyse de bitedefender me dit qu'il n'a pu supprimer ou déplacer Trojan.downloader.conhook.ai
Ce serais gentil de m'aider s'il vous plait
Voici le rapport de hijack this
Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 20:12:58, on 2007-10-19
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\arservice.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\HP DigitalMedia Archive\DMAScheduler.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\ARPWRMSG.EXE
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Softwin\BitDefender10\bdagent.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Shareaza\Shareaza.exe
C:\Program Files\BitTorrent\bittorrent.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Updates from HP\9972322\Program\Updates from HP.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\Skype\Plugin Manager\SkypePM.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
C:\Program Files\Softwin\BitDefender10\vsserv.exe
c:\program files\softwin\bitdefender10\bdmcon.exe
C:\Documents and Settings\HP_Administrateur\Bureau\HiJackThis_v2.exe
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe
C:\Program Files\Internet Explorer\iexplore.exe
c:\program files\winamp toolbar\WinampTbServer.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&lo...
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&lo...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&loca...
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Winamp Toolbar BHO - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {8d775d44-cf3f-45b7-9f17-b1fe89ee2870} - C:\WINDOWS\system32\ddemest.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
O4 - HKLM\..\Run: [ftutil2] rundll32.exe ftutil2.dll,SetWriteCacheMode
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe
O4 - HKLM\..\Run: [DMAScheduler] "c:\Program Files\HP DigitalMedia Archive\DMAScheduler.exe"
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [ALCMTR] ALCMTR.EXE
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe"
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [AlwaysReady Power Message APP] ARPWRMSG.EXE
O4 - HKLM\..\Run: [DownloadAccelerator] "C:\Program Files\DAP\DAP.EXE" /STARTUP
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\wianmpa.exe
O4 - HKLM\..\Run: [BDMCon] "C:\Program Files\Softwin\BitDefender10\bdmcon.exe" /reg
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\Softwin\BitDefender10\bdagent.exe"
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Shareaza] "C:\Program Files\Shareaza\Shareaza.exe" -tray
O4 - HKCU\..\Run: [Magentic] C:\PROGRA~1\Magentic\bin\Magentic.exe /c
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
O4 - HKCU\..\Run: [Orb] "C:\Program Files\Winamp Remote\bin\OrbTray.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - S-1-5-18 Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'SYSTEM')
O4 - .DEFAULT Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Mises à jour de HP.lnk = C:\Program Files\Updates from HP\9972322\Program\Updates from HP.exe
O8 - Extra context menu item: &Clean Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm
O8 - Extra context menu item: &Winamp Toolbar Search - C:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-ca\msntabres.dll.mui/229?1c74689548274a7aa62bb9ef6fdc4420
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-ca\msntabres.dll.mui/230?1c74689548274a7aa62bb9ef6fdc4420
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\ddemest.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\ddemest.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - c:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by106fd.bay106.hotmail.msn.com/resources/MsnPUpl...
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls...
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/fl...
O18 - Protocol: bw+0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: ddemest - C:\WINDOWS\SYSTEM32\ddemest.dll
O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
O23 - Service: Service de planification Media Center (ehSched) - Unknown owner - C:\WINDOWS\eHome\ehSched.exe
O23 - Service: Journal des événements (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Fax - Unknown owner - C:\WINDOWS\system32\fxssvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - SOFTWIN S.R.L. - C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
O23 - Service: Carte à puce (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - SOFTWIN S.R.L. - C:\Program Files\Softwin\BitDefender10\vsserv.exe
O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe
O23 - Service: Service Partage réseau du Lecteur Windows Media (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\WMPNetwk.exe
O23 - Service: BitDefender Communicator (XCOMM) - SOFTWIN S.R.L - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
--
End of file - 27117 bytes
Honnetement pour moi tout ca c'est du chinois
depuis quelque temps j ai de la difficulter avec mon ordi
il est lent et maintenant je ne suis plus capable de d'entré dans mon jeu de age of empire ca m'écrit erreur : le fichier MSXML4.0
est est mal installer bla bla bla mais je ne trouve pas ce fichier
et l'analyse de bitedefender me dit qu'il n'a pu supprimer ou déplacer Trojan.downloader.conhook.ai
Ce serais gentil de m'aider s'il vous plait
Voici le rapport de hijack this
Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 20:12:58, on 2007-10-19
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\arservice.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\HP DigitalMedia Archive\DMAScheduler.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\ARPWRMSG.EXE
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Softwin\BitDefender10\bdagent.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Shareaza\Shareaza.exe
C:\Program Files\BitTorrent\bittorrent.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Updates from HP\9972322\Program\Updates from HP.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\Skype\Plugin Manager\SkypePM.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
C:\Program Files\Softwin\BitDefender10\vsserv.exe
c:\program files\softwin\bitdefender10\bdmcon.exe
C:\Documents and Settings\HP_Administrateur\Bureau\HiJackThis_v2.exe
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe
C:\Program Files\Internet Explorer\iexplore.exe
c:\program files\winamp toolbar\WinampTbServer.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&lo...
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&lo...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&loca...
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Winamp Toolbar BHO - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {8d775d44-cf3f-45b7-9f17-b1fe89ee2870} - C:\WINDOWS\system32\ddemest.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
O4 - HKLM\..\Run: [ftutil2] rundll32.exe ftutil2.dll,SetWriteCacheMode
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe
O4 - HKLM\..\Run: [DMAScheduler] "c:\Program Files\HP DigitalMedia Archive\DMAScheduler.exe"
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [ALCMTR] ALCMTR.EXE
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe"
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [AlwaysReady Power Message APP] ARPWRMSG.EXE
O4 - HKLM\..\Run: [DownloadAccelerator] "C:\Program Files\DAP\DAP.EXE" /STARTUP
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\wianmpa.exe
O4 - HKLM\..\Run: [BDMCon] "C:\Program Files\Softwin\BitDefender10\bdmcon.exe" /reg
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\Softwin\BitDefender10\bdagent.exe"
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Shareaza] "C:\Program Files\Shareaza\Shareaza.exe" -tray
O4 - HKCU\..\Run: [Magentic] C:\PROGRA~1\Magentic\bin\Magentic.exe /c
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
O4 - HKCU\..\Run: [Orb] "C:\Program Files\Winamp Remote\bin\OrbTray.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - S-1-5-18 Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'SYSTEM')
O4 - .DEFAULT Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Mises à jour de HP.lnk = C:\Program Files\Updates from HP\9972322\Program\Updates from HP.exe
O8 - Extra context menu item: &Clean Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm
O8 - Extra context menu item: &Winamp Toolbar Search - C:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-ca\msntabres.dll.mui/229?1c74689548274a7aa62bb9ef6fdc4420
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-ca\msntabres.dll.mui/230?1c74689548274a7aa62bb9ef6fdc4420
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\ddemest.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\ddemest.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - c:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by106fd.bay106.hotmail.msn.com/resources/MsnPUpl...
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls...
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/fl...
O18 - Protocol: bw+0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: ddemest - C:\WINDOWS\SYSTEM32\ddemest.dll
O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
O23 - Service: Service de planification Media Center (ehSched) - Unknown owner - C:\WINDOWS\eHome\ehSched.exe
O23 - Service: Journal des événements (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Fax - Unknown owner - C:\WINDOWS\system32\fxssvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - SOFTWIN S.R.L. - C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
O23 - Service: Carte à puce (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - SOFTWIN S.R.L. - C:\Program Files\Softwin\BitDefender10\vsserv.exe
O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe
O23 - Service: Service Partage réseau du Lecteur Windows Media (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\WMPNetwk.exe
O23 - Service: BitDefender Communicator (XCOMM) - SOFTWIN S.R.L - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
--
End of file - 27117 bytes
Honnetement pour moi tout ca c'est du chinois
Autres pages sur : besoin aide trojan downloader conhook
Lassé par la pub ? Créez un compte
si ca peut aider voici le rapport de bitedefender
//-----------------------------------------------------------------
//
// Produit BitDefender Free Edition v10
// Produit 10.2
//
// Créé le: 19/10/2007 20:55:39
//
//-----------------------------------------------------------------
Statistiques
Chemin cible: C:\
D:\
Dossiers : 9108
Fichiers : 433935
Processus Mémoire analysés : 62
Archives : 17399
Fichiers enpaquetés : 37572
Virus trouvés : 6
Fichiers infectés : 100
Processus Mémoire infectés : 0
Fichiers suspects : 0
Alertes : 0
Fichiers désinfectés : 0
Fichiers effacés : 22
Fichiers déplacés : 78
Erreurs I/O : 107
Temps d'analyse :=01:23:21
Fichiers/seconde :86
Statistiques Spywares
Registres analysés : 1820
Registres infectés : 0
Cookies analysés : 906
Cookies infectés : 0
Fichiers spyware infectés : 0
Menaces Spyware détectées : 0
Définitions virus : 933229
Plugins d'analyse : 16
Plugins archives : 41
Plug-ins décompression : 7
Plug-ins messagerie : 6
Plug-ins système : 5
Options d'analyse
Détection
[X] Analyser le secteur de boot
[X] Processus mémoire
[X] Analyser les archives
[X] Analyser les fichiers enpaquetés
[X] Analyser la messagerie
Masque fichiers
[ ] Programmes
[X] Tous les fichiers
[ ] Extensions définies par l'utilisateur:
[ ] Exclure les extensions: ;
Action
Objets infectés
[ ] Ignorer
[X] Désinfecter
[ ] Effacer
[ ] Mettre en quarantaine
[ ] Demander l'action
Seconde action
[ ] Ignorer
[ ] Effacer
[X] Mettre en quarantaine
[ ] Demander l'action
Options d'analyse
[X] Activer les alertes
[X] Activer l'heuristique
[ ] Afficher tous les fichiers dans le journal
[X] Fichier journal: C:\Documents and Settings\All Users\Application Data\Bitdefender\Desktop\Profiles\Logs\deep_scan\1192841739.log
Options d'analyse Spyware
[X] Analyse contre les risques non-viraux
[ ] Ecarter de l'analyse les dialers et les applications
[X] Clés de registres
[X] Cookies
Résumé:
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\02303B69=>(Quarantine-2) Infecté: Trojan.LowZones.SA
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\02303B69=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\02303B69 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\02336566=>(Quarantine-2) Infecté: Trojan.LowZones.SA
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\02336566=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\02336566 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\031F28CF=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\031F28CF=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\031F28CF Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\03F05293=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\03F05293=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\03F05293 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\06477A05=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\06477A05=>(Quarantine-2) Effacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\06C848A7=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\06C848A7=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\06C848A7 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\07727068=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\07727068=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\07727068 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\08B61C85=>(Quarantine-2) Infecté: Trojan.PWS.Ldpinch.TAS
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\08B61C85=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\08B61C85 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\09EB5369=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\09EB5369=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\09EB5369 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\0A917E7C=>(Quarantine-2) Infecté: Trojan.PWS.Ldpinch.TAS
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\0A917E7C=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\0A917E7C Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\0AE75EE9=>(Quarantine-2) Infecté: Trojan.LowZones.SA
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\0AE75EE9=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\0AE75EE9 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\0BBD1BAF=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\0BBD1BAF=>(Quarantine-2) Effacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\0BCC0E9A=>(Quarantine-2) Infecté: Trojan.LowZones.SA
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\0BCC0E9A=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\0BCC0E9A Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\0C133AA1=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\0C133AA1=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\0C133AA1 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\0CBD173B=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\0CBD173B=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\0CBD173B Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\0CE062CA=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\0CE062CA=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\0CE062CA Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\13434E03=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\13434E03=>(Quarantine-2) Effacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\13CE08E0=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\13CE08E0=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\13CE08E0 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\1522790C=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\1522790C=>(Quarantine-2) Effacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\17C6363C=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\17C6363C=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\17C6363C Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\1D8A25D7=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\1D8A25D7=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\1D8A25D7 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\206975DE=>(Quarantine-2) Infecté: Trojan.PWS.Ldpinch.TAS
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\206975DE=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\206975DE Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\221D0484=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\221D0484=>(Quarantine-2) Effacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\23AA45FE=>(Quarantine-2) Infecté: Trojan.LowZones.SA
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\23AA45FE=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\23AA45FE Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\23C56EBC=>(Quarantine-2) Infecté: Trojan.LowZones.SA
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\23C56EBC=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\23C56EBC Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\26E4341D=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\26E4341D=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\26E4341D Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\2788016A=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\2788016A=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\2788016A Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\293C04D0=>(Quarantine-2) Infecté: Trojan.LowZones.SA
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\293C04D0=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\293C04D0 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\29FF6277=>(Quarantine-2) Infecté: Trojan.LowZones.SA
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\29FF6277=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\29FF6277 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\2C1C46F9=>(Quarantine-2) Infecté: Trojan.LowZones.SA
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\2C1C46F9=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\2C1C46F9 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\2C9C2C6C=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\2C9C2C6C=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\2C9C2C6C Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\2D176CFB=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\2D176CFB=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\2D176CFB Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\2D5B1629=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\2D5B1629=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\2D5B1629 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\2EFF0D8A=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\2EFF0D8A=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\2EFF0D8A Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\31E148DD=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\31E148DD=>(Quarantine-2) Effacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\31FD1FF6=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\31FD1FF6=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\31FD1FF6 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\343B4CD7=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\343B4CD7=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\343B4CD7 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\35AE7E2F=>(Quarantine-2) Infecté: Trojan.PWS.Ldpinch.TAS
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\35AE7E2F=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\35AE7E2F Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\36272273=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\36272273=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\36272273 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\36A46E3E=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\36A46E3E=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\36A46E3E Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\36A7183A=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\36A7183A=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\36A7183A Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\36CA1AC1=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\36CA1AC1=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\36CA1AC1 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\37885F16=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\37885F16=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\37885F16 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\39CF2BD1=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\39CF2BD1=>(Quarantine-2) Effacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\39F65C2E=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\39F65C2E=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\39F65C2E Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\3A1A2F1D=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\3A1A2F1D=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\3A1A2F1D Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\3B3C367A=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\3B3C367A=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\3B3C367A Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\3B92739F=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\3B92739F=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\3B92739F Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\3BE20C37=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\3BE20C37=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\3BE20C37 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\3CE54C41=>(Quarantine-2) Infecté: Trojan.LowZones.SA
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\3CE54C41=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\3CE54C41 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\3D2721AD=>(Quarantine-2) Infecté: Trojan.PWS.Ldpinch.TAS
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\3D2721AD=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\3D2721AD Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\3D7E7145=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\3D7E7145=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\3D7E7145 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\40240373=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\40240373=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\40240373 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\413A4455=>(Quarantine-2) Infecté: Trojan.PWS.Ldpinch.TAS
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\413A4455=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\413A4455 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\44B14A60=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\44B14A60=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\44B14A60 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4A3F1BC7=>(Quarantine-2) Infecté: Trojan.LowZones.SA
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4A3F1BC7=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4A3F1BC7 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4B503FA7=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4B503FA7=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4B503FA7 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4C2835AB=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4C2835AB=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4C2835AB Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4C4D44A9=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4C4D44A9=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4C4D44A9 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4E852769=>(Quarantine-2) Infecté: Trojan.LowZones.SA
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4E852769=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4E852769 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4FA01466=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4FA01466=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4FA01466 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4FF84D58=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4FF84D58=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4FF84D58 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\51023A63=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\51023A63=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\51023A63 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5467685A=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5467685A=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5467685A Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\551828EB=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\551828EB=>(Quarantine-2) Effacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\555D133D=>(Quarantine-2) Infecté: Trojan.LowZones.SA
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\555D133D=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\555D133D Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\559F6607=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\559F6607=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\559F6607 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\598A654C=>(Quarantine-2) Infecté: Trojan.PWS.Ldpinch.TAS
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\598A654C=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\598A654C Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5BF16DC3=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5BF16DC3=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5BF16DC3 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5C415C05=>(Quarantine-2) Infecté: Trojan.LowZones.SA
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5C415C05=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5C415C05 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\611014FF=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\611014FF=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\611014FF Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\631C5B5A=>(Quarantine-2) Infecté: Trojan.LowZones.SA
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\631C5B5A=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\631C5B5A Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6A3E2DAF=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6A3E2DAF=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6A3E2DAF Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6B0C452E=>(Quarantine-2) Infecté: Trojan.PWS.Ldpinch.TAS
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6B0C452E=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6B0C452E Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6C3F701C=>(Quarantine-2) Infecté: Trojan.LowZones.SA
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6C3F701C=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6C3F701C Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6C48112F=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6C48112F=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6C48112F Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6CF250FE=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6CF250FE=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6CF250FE Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6D8D45E9=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6D8D45E9=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6D8D45E9 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6D9A31A0=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6D9A31A0=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6D9A31A0 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\710972CD=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\710972CD=>(Quarantine-2) Effacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\734C225A=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\734C225A=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\734C225A Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\742139B6=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\742139B6=>(Quarantine-2) Effacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\74486662=>(Quarantine-2) Infecté: Trojan.LowZones.SA
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\74486662=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\74486662 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\78CD7F42=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\78CD7F42=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\78CD7F42 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\78D0293E=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\78D0293E=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\78D0293E Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\7949604C=>(Quarantine-2) Infecté: Trojan.LowZones.SA
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\7949604C=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\7949604C Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\7AC21CEC=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\7AC21CEC=>(Quarantine-2) Effacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\7B774518=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\7B774518=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\7B774518 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\7CEA7182=>(Quarantine-2) Infecté: Trojan.LowZones.SA
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\7CEA7182=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\7CEA7182 Déplacé
C:\Program Files\Microsoft NetService\shared\Advanced_Installer_Professional_crack_serial_keygen.rar=>Crack.exe Infecté: Trojan.Dropper.RGZ
C:\Program Files\Microsoft NetService\shared\Advanced_Installer_Professional_crack_serial_keygen.rar=>Crack.exe Désinfection impossible
C:\Program Files\Microsoft NetService\shared\Advanced_Installer_Professional_crack_serial_keygen.rar=>Crack.exe Déplacement impossible
C:\Program Files\Microsoft NetService\shared\Advanced_Instant_Messengers_Password_Recovery_crack_serial_keygen.rar=>Advanced Instant Messengers Password Recovery v2.90 crack by TFT-TEAM.exe Infecté: Trojan.Dropper.RGZ
C:\Program Files\Microsoft NetService\shared\Advanced_Instant_Messengers_Password_Recovery_crack_serial_keygen.rar=>Advanced Instant Messengers Password Recovery v2.90 crack by TFT-TEAM.exe Désinfection impossible
C:\Program Files\Microsoft NetService\shared\Advanced_Instant_Messengers_Password_Recovery_crack_serial_keygen.rar=>Advanced Instant Messengers Password Recovery v2.90 crack by TFT-TEAM.exe Déplacement impossible
C:\Program Files\Microsoft NetService\shared\Advanced_PDF_Password_RecoveryPro_crack_serial_keygen.rar=>apdfprp_CRACK.exe Infecté: Trojan.Dropper.RGZ
C:\Program Files\Microsoft NetService\shared\Advanced_PDF_Password_RecoveryPro_crack_serial_keygen.rar=>apdfprp_CRACK.exe Désinfection impossible
C:\Program Files\Microsoft NetService\shared\Advanced_PDF_Password_RecoveryPro_crack_serial_keygen.rar=>apdfprp_CRACK.exe Déplacement impossible
C:\Program Files\Microsoft NetService\shared\Advanced_Spyware_Remover_crack_serial_keygen.rar=>keygen.exe Infecté: Trojan.Dropper.RGZ
C:\Program Files\Microsoft NetService\shared\Advanced_Spyware_Remover_crack_serial_keygen.rar=>keygen.exe Désinfection impossible
C:\Program Files\Microsoft NetService\shared\Advanced_Spyware_Remover_crack_serial_keygen.rar=>keygen.exe Déplacement impossible
C:\Program Files\Microsoft NetService\shared\Advanced_Woman_Calendar_crack_serial_keygen.rar=>crack.exe Infecté: Trojan.Dropper.RGZ
C:\Program Files\Microsoft NetService\shared\Advanced_Woman_Calendar_crack_serial_keygen.rar=>crack.exe Désinfection impossible
C:\Program Files\Microsoft NetService\shared\Advanced_Woman_Calendar_crack_serial_keygen.rar=>crack.exe Déplacement impossible
C:\Program Files\Microsoft NetService\shared\Advance_demailer_crack_serial_keygen.rar=>KeyGen.exe Infecté: Trojan.Dropper.RGZ
C:\Program Files\Microsoft NetService\shared\Advance_demailer_crack_serial_keygen.rar=>KeyGen.exe Désinfection impossible
C:\Program Files\Microsoft NetService\shared\Advance_demailer_crack_serial_keygen.rar=>KeyGen.exe Déplacement impossible
C:\Program Files\Microsoft NetService\shared\Adventure_Inlay_-_Safari_Edition_crack_serial_keygen.rar=>Adventure Inlay - Safari Edition (GameHouse) by Knetus.exe Infecté: Trojan.Dropper.RGZ
C:\Program Files\Microsoft NetService\shared\Adventure_Inlay_-_Safari_Edition_crack_serial_keygen.rar=>Adventure Inlay - Safari Edition (GameHouse) by Knetus.exe Désinfection impossible
C:\Program Files\Microsoft NetService\shared\Adventure_Inlay_-_Safari_Edition_crack_serial_keygen.rar=>Adventure Inlay - Safari Edition (GameHouse) by Knetus.exe Déplacement impossible
C:\Program Files\Microsoft NetService\shared\Adware_and_Spyware_Firewall_crack_serial_keygen.rar=>patch.exe Infecté: Trojan.Dropper.RGZ
C:\Program Files\Microsoft NetService\shared\Adware_and_Spyware_Firewall_crack_serial_keygen.rar=>patch.exe Désinfection impossible
C:\Program Files\Microsoft NetService\shared\Adware_and_Spyware_Firewall_crack_serial_keygen.rar=>patch.exe Déplacement impossible
C:\Program Files\Microsoft NetService\shared\AF_Material_Correct__for_3DS_Max_crack_serial_keygen.rar=>AF.Video.Systems.MultiKeygen.v1.2.exe Infecté: Trojan.Dropper.RGZ
C:\Program Files\Microsoft NetService\shared\AF_Material_Correct__for_3DS_Max_crack_serial_keygen.rar=>AF.Video.Systems.MultiKeygen.v1.2.exe Désinfection impossible
C:\Program Files\Microsoft NetService\shared\AF_Material_Correct__for_3DS_Max_crack_serial_keygen.rar=>AF.Video.Systems.MultiKeygen.v1.2.exe Déplacement impossible
C:\Program Files\Microsoft NetService\shared\Agent_Toolkitc_Edition_v6.0.0_crack_serial_keygen.rar=>Keymaker.exe Infecté: Trojan.Dropper.RGZ
C:\Program Files\Microsoft NetService\shared\Agent_Toolkitc_Edition_v6.0.0_crack_serial_keygen.rar=>Keymaker.exe Désinfection impossible
C:\Program Files\Microsoft NetService\shared\Agent_Toolkitc_Edition_v6.0.0_crack_serial_keygen.rar=>Keymaker.exe Déplacement impossible
C:\WINDOWS\system32\ddemest.dll Infecté: Trojan.Downloader.ConHook.AI
C:\WINDOWS\system32\ddemest.dll Désinfection impossible
C:\WINDOWS\system32\ddemest.dll Déplacement impossible
//-----------------------------------------------------------------
//
// Produit BitDefender Free Edition v10
// Produit 10.2
//
// Créé le: 19/10/2007 20:55:39
//
//-----------------------------------------------------------------
Statistiques
Chemin cible: C:\
D:\
Dossiers : 9108
Fichiers : 433935
Processus Mémoire analysés : 62
Archives : 17399
Fichiers enpaquetés : 37572
Virus trouvés : 6
Fichiers infectés : 100
Processus Mémoire infectés : 0
Fichiers suspects : 0
Alertes : 0
Fichiers désinfectés : 0
Fichiers effacés : 22
Fichiers déplacés : 78
Erreurs I/O : 107
Temps d'analyse :=01:23:21
Fichiers/seconde :86
Statistiques Spywares
Registres analysés : 1820
Registres infectés : 0
Cookies analysés : 906
Cookies infectés : 0
Fichiers spyware infectés : 0
Menaces Spyware détectées : 0
Définitions virus : 933229
Plugins d'analyse : 16
Plugins archives : 41
Plug-ins décompression : 7
Plug-ins messagerie : 6
Plug-ins système : 5
Options d'analyse
Détection
[X] Analyser le secteur de boot
[X] Processus mémoire
[X] Analyser les archives
[X] Analyser les fichiers enpaquetés
[X] Analyser la messagerie
Masque fichiers
[ ] Programmes
[X] Tous les fichiers
[ ] Extensions définies par l'utilisateur:
[ ] Exclure les extensions: ;
Action
Objets infectés
[ ] Ignorer
[X] Désinfecter
[ ] Effacer
[ ] Mettre en quarantaine
[ ] Demander l'action
Seconde action
[ ] Ignorer
[ ] Effacer
[X] Mettre en quarantaine
[ ] Demander l'action
Options d'analyse
[X] Activer les alertes
[X] Activer l'heuristique
[ ] Afficher tous les fichiers dans le journal
[X] Fichier journal: C:\Documents and Settings\All Users\Application Data\Bitdefender\Desktop\Profiles\Logs\deep_scan\1192841739.log
Options d'analyse Spyware
[X] Analyse contre les risques non-viraux
[ ] Ecarter de l'analyse les dialers et les applications
[X] Clés de registres
[X] Cookies
Résumé:
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\02303B69=>(Quarantine-2) Infecté: Trojan.LowZones.SA
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\02303B69=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\02303B69 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\02336566=>(Quarantine-2) Infecté: Trojan.LowZones.SA
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\02336566=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\02336566 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\031F28CF=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\031F28CF=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\031F28CF Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\03F05293=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\03F05293=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\03F05293 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\06477A05=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\06477A05=>(Quarantine-2) Effacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\06C848A7=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\06C848A7=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\06C848A7 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\07727068=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\07727068=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\07727068 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\08B61C85=>(Quarantine-2) Infecté: Trojan.PWS.Ldpinch.TAS
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\08B61C85=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\08B61C85 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\09EB5369=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\09EB5369=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\09EB5369 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\0A917E7C=>(Quarantine-2) Infecté: Trojan.PWS.Ldpinch.TAS
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\0A917E7C=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\0A917E7C Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\0AE75EE9=>(Quarantine-2) Infecté: Trojan.LowZones.SA
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\0AE75EE9=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\0AE75EE9 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\0BBD1BAF=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\0BBD1BAF=>(Quarantine-2) Effacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\0BCC0E9A=>(Quarantine-2) Infecté: Trojan.LowZones.SA
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\0BCC0E9A=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\0BCC0E9A Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\0C133AA1=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\0C133AA1=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\0C133AA1 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\0CBD173B=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\0CBD173B=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\0CBD173B Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\0CE062CA=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\0CE062CA=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\0CE062CA Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\13434E03=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\13434E03=>(Quarantine-2) Effacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\13CE08E0=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\13CE08E0=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\13CE08E0 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\1522790C=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\1522790C=>(Quarantine-2) Effacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\17C6363C=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\17C6363C=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\17C6363C Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\1D8A25D7=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\1D8A25D7=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\1D8A25D7 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\206975DE=>(Quarantine-2) Infecté: Trojan.PWS.Ldpinch.TAS
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\206975DE=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\206975DE Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\221D0484=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\221D0484=>(Quarantine-2) Effacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\23AA45FE=>(Quarantine-2) Infecté: Trojan.LowZones.SA
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\23AA45FE=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\23AA45FE Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\23C56EBC=>(Quarantine-2) Infecté: Trojan.LowZones.SA
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\23C56EBC=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\23C56EBC Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\26E4341D=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\26E4341D=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\26E4341D Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\2788016A=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\2788016A=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\2788016A Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\293C04D0=>(Quarantine-2) Infecté: Trojan.LowZones.SA
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\293C04D0=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\293C04D0 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\29FF6277=>(Quarantine-2) Infecté: Trojan.LowZones.SA
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\29FF6277=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\29FF6277 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\2C1C46F9=>(Quarantine-2) Infecté: Trojan.LowZones.SA
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\2C1C46F9=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\2C1C46F9 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\2C9C2C6C=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\2C9C2C6C=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\2C9C2C6C Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\2D176CFB=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\2D176CFB=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\2D176CFB Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\2D5B1629=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\2D5B1629=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\2D5B1629 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\2EFF0D8A=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\2EFF0D8A=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\2EFF0D8A Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\31E148DD=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\31E148DD=>(Quarantine-2) Effacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\31FD1FF6=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\31FD1FF6=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\31FD1FF6 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\343B4CD7=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\343B4CD7=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\343B4CD7 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\35AE7E2F=>(Quarantine-2) Infecté: Trojan.PWS.Ldpinch.TAS
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\35AE7E2F=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\35AE7E2F Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\36272273=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\36272273=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\36272273 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\36A46E3E=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\36A46E3E=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\36A46E3E Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\36A7183A=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\36A7183A=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\36A7183A Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\36CA1AC1=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\36CA1AC1=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\36CA1AC1 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\37885F16=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\37885F16=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\37885F16 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\39CF2BD1=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\39CF2BD1=>(Quarantine-2) Effacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\39F65C2E=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\39F65C2E=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\39F65C2E Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\3A1A2F1D=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\3A1A2F1D=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\3A1A2F1D Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\3B3C367A=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\3B3C367A=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\3B3C367A Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\3B92739F=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\3B92739F=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\3B92739F Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\3BE20C37=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\3BE20C37=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\3BE20C37 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\3CE54C41=>(Quarantine-2) Infecté: Trojan.LowZones.SA
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\3CE54C41=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\3CE54C41 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\3D2721AD=>(Quarantine-2) Infecté: Trojan.PWS.Ldpinch.TAS
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\3D2721AD=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\3D2721AD Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\3D7E7145=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\3D7E7145=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\3D7E7145 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\40240373=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\40240373=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\40240373 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\413A4455=>(Quarantine-2) Infecté: Trojan.PWS.Ldpinch.TAS
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\413A4455=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\413A4455 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\44B14A60=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\44B14A60=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\44B14A60 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4A3F1BC7=>(Quarantine-2) Infecté: Trojan.LowZones.SA
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4A3F1BC7=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4A3F1BC7 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4B503FA7=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4B503FA7=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4B503FA7 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4C2835AB=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4C2835AB=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4C2835AB Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4C4D44A9=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4C4D44A9=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4C4D44A9 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4E852769=>(Quarantine-2) Infecté: Trojan.LowZones.SA
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4E852769=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4E852769 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4FA01466=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4FA01466=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4FA01466 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4FF84D58=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4FF84D58=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4FF84D58 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\51023A63=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\51023A63=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\51023A63 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5467685A=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5467685A=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5467685A Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\551828EB=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\551828EB=>(Quarantine-2) Effacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\555D133D=>(Quarantine-2) Infecté: Trojan.LowZones.SA
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\555D133D=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\555D133D Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\559F6607=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\559F6607=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\559F6607 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\598A654C=>(Quarantine-2) Infecté: Trojan.PWS.Ldpinch.TAS
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\598A654C=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\598A654C Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5BF16DC3=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5BF16DC3=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5BF16DC3 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5C415C05=>(Quarantine-2) Infecté: Trojan.LowZones.SA
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5C415C05=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5C415C05 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\611014FF=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\611014FF=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\611014FF Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\631C5B5A=>(Quarantine-2) Infecté: Trojan.LowZones.SA
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\631C5B5A=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\631C5B5A Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6A3E2DAF=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6A3E2DAF=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6A3E2DAF Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6B0C452E=>(Quarantine-2) Infecté: Trojan.PWS.Ldpinch.TAS
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6B0C452E=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6B0C452E Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6C3F701C=>(Quarantine-2) Infecté: Trojan.LowZones.SA
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6C3F701C=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6C3F701C Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6C48112F=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6C48112F=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6C48112F Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6CF250FE=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6CF250FE=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6CF250FE Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6D8D45E9=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6D8D45E9=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6D8D45E9 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6D9A31A0=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6D9A31A0=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6D9A31A0 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\710972CD=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\710972CD=>(Quarantine-2) Effacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\734C225A=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\734C225A=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\734C225A Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\742139B6=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\742139B6=>(Quarantine-2) Effacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\74486662=>(Quarantine-2) Infecté: Trojan.LowZones.SA
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\74486662=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\74486662 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\78CD7F42=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\78CD7F42=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\78CD7F42 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\78D0293E=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\78D0293E=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\78D0293E Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\7949604C=>(Quarantine-2) Infecté: Trojan.LowZones.SA
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\7949604C=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\7949604C Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\7AC21CEC=>(Quarantine-2) Infecté: Trojan.Fotomoto.A
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\7AC21CEC=>(Quarantine-2) Effacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\7B774518=>(Quarantine-2) Infecté: Trojan.Clicker.MNB
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\7B774518=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\7B774518 Déplacé
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\7CEA7182=>(Quarantine-2) Infecté: Trojan.LowZones.SA
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\7CEA7182=>(Quarantine-2) Désinfection impossible
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\7CEA7182 Déplacé
C:\Program Files\Microsoft NetService\shared\Advanced_Installer_Professional_crack_serial_keygen.rar=>Crack.exe Infecté: Trojan.Dropper.RGZ
C:\Program Files\Microsoft NetService\shared\Advanced_Installer_Professional_crack_serial_keygen.rar=>Crack.exe Désinfection impossible
C:\Program Files\Microsoft NetService\shared\Advanced_Installer_Professional_crack_serial_keygen.rar=>Crack.exe Déplacement impossible
C:\Program Files\Microsoft NetService\shared\Advanced_Instant_Messengers_Password_Recovery_crack_serial_keygen.rar=>Advanced Instant Messengers Password Recovery v2.90 crack by TFT-TEAM.exe Infecté: Trojan.Dropper.RGZ
C:\Program Files\Microsoft NetService\shared\Advanced_Instant_Messengers_Password_Recovery_crack_serial_keygen.rar=>Advanced Instant Messengers Password Recovery v2.90 crack by TFT-TEAM.exe Désinfection impossible
C:\Program Files\Microsoft NetService\shared\Advanced_Instant_Messengers_Password_Recovery_crack_serial_keygen.rar=>Advanced Instant Messengers Password Recovery v2.90 crack by TFT-TEAM.exe Déplacement impossible
C:\Program Files\Microsoft NetService\shared\Advanced_PDF_Password_RecoveryPro_crack_serial_keygen.rar=>apdfprp_CRACK.exe Infecté: Trojan.Dropper.RGZ
C:\Program Files\Microsoft NetService\shared\Advanced_PDF_Password_RecoveryPro_crack_serial_keygen.rar=>apdfprp_CRACK.exe Désinfection impossible
C:\Program Files\Microsoft NetService\shared\Advanced_PDF_Password_RecoveryPro_crack_serial_keygen.rar=>apdfprp_CRACK.exe Déplacement impossible
C:\Program Files\Microsoft NetService\shared\Advanced_Spyware_Remover_crack_serial_keygen.rar=>keygen.exe Infecté: Trojan.Dropper.RGZ
C:\Program Files\Microsoft NetService\shared\Advanced_Spyware_Remover_crack_serial_keygen.rar=>keygen.exe Désinfection impossible
C:\Program Files\Microsoft NetService\shared\Advanced_Spyware_Remover_crack_serial_keygen.rar=>keygen.exe Déplacement impossible
C:\Program Files\Microsoft NetService\shared\Advanced_Woman_Calendar_crack_serial_keygen.rar=>crack.exe Infecté: Trojan.Dropper.RGZ
C:\Program Files\Microsoft NetService\shared\Advanced_Woman_Calendar_crack_serial_keygen.rar=>crack.exe Désinfection impossible
C:\Program Files\Microsoft NetService\shared\Advanced_Woman_Calendar_crack_serial_keygen.rar=>crack.exe Déplacement impossible
C:\Program Files\Microsoft NetService\shared\Advance_demailer_crack_serial_keygen.rar=>KeyGen.exe Infecté: Trojan.Dropper.RGZ
C:\Program Files\Microsoft NetService\shared\Advance_demailer_crack_serial_keygen.rar=>KeyGen.exe Désinfection impossible
C:\Program Files\Microsoft NetService\shared\Advance_demailer_crack_serial_keygen.rar=>KeyGen.exe Déplacement impossible
C:\Program Files\Microsoft NetService\shared\Adventure_Inlay_-_Safari_Edition_crack_serial_keygen.rar=>Adventure Inlay - Safari Edition (GameHouse) by Knetus.exe Infecté: Trojan.Dropper.RGZ
C:\Program Files\Microsoft NetService\shared\Adventure_Inlay_-_Safari_Edition_crack_serial_keygen.rar=>Adventure Inlay - Safari Edition (GameHouse) by Knetus.exe Désinfection impossible
C:\Program Files\Microsoft NetService\shared\Adventure_Inlay_-_Safari_Edition_crack_serial_keygen.rar=>Adventure Inlay - Safari Edition (GameHouse) by Knetus.exe Déplacement impossible
C:\Program Files\Microsoft NetService\shared\Adware_and_Spyware_Firewall_crack_serial_keygen.rar=>patch.exe Infecté: Trojan.Dropper.RGZ
C:\Program Files\Microsoft NetService\shared\Adware_and_Spyware_Firewall_crack_serial_keygen.rar=>patch.exe Désinfection impossible
C:\Program Files\Microsoft NetService\shared\Adware_and_Spyware_Firewall_crack_serial_keygen.rar=>patch.exe Déplacement impossible
C:\Program Files\Microsoft NetService\shared\AF_Material_Correct__for_3DS_Max_crack_serial_keygen.rar=>AF.Video.Systems.MultiKeygen.v1.2.exe Infecté: Trojan.Dropper.RGZ
C:\Program Files\Microsoft NetService\shared\AF_Material_Correct__for_3DS_Max_crack_serial_keygen.rar=>AF.Video.Systems.MultiKeygen.v1.2.exe Désinfection impossible
C:\Program Files\Microsoft NetService\shared\AF_Material_Correct__for_3DS_Max_crack_serial_keygen.rar=>AF.Video.Systems.MultiKeygen.v1.2.exe Déplacement impossible
C:\Program Files\Microsoft NetService\shared\Agent_Toolkitc_Edition_v6.0.0_crack_serial_keygen.rar=>Keymaker.exe Infecté: Trojan.Dropper.RGZ
C:\Program Files\Microsoft NetService\shared\Agent_Toolkitc_Edition_v6.0.0_crack_serial_keygen.rar=>Keymaker.exe Désinfection impossible
C:\Program Files\Microsoft NetService\shared\Agent_Toolkitc_Edition_v6.0.0_crack_serial_keygen.rar=>Keymaker.exe Déplacement impossible
C:\WINDOWS\system32\ddemest.dll Infecté: Trojan.Downloader.ConHook.AI
C:\WINDOWS\system32\ddemest.dll Désinfection impossible
C:\WINDOWS\system32\ddemest.dll Déplacement impossible
Merci de me répondre je crois que mon ordi est infesté
voici le rapport Hilack this
Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 08:44:54, on 2007-10-20
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\arservice.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
C:\Program Files\HP DigitalMedia Archive\DMAScheduler.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\ARPWRMSG.EXE
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Softwin\BitDefender10\bdmcon.exe
C:\Program Files\Softwin\BitDefender10\bdagent.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Shareaza\Shareaza.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Updates from HP\9972322\Program\Updates from HP.exe
C:\Program Files\Softwin\BitDefender10\vsserv.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
c:\program files\winamp toolbar\WinampTbServer.exe
C:\Documents and Settings\HP_Administrateur\Bureau\HiJackThis_v2.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&lo...
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&lo...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&loca...
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Winamp Toolbar BHO - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {8d775d44-cf3f-45b7-9f17-b1fe89ee2870} - C:\WINDOWS\system32\ddemest.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
O4 - HKLM\..\Run: [ftutil2] rundll32.exe ftutil2.dll,SetWriteCacheMode
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe
O4 - HKLM\..\Run: [DMAScheduler] "c:\Program Files\HP DigitalMedia Archive\DMAScheduler.exe"
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [ALCMTR] ALCMTR.EXE
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe"
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [AlwaysReady Power Message APP] ARPWRMSG.EXE
O4 - HKLM\..\Run: [DownloadAccelerator] "C:\Program Files\DAP\DAP.EXE" /STARTUP
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\wianmpa.exe
O4 - HKLM\..\Run: [BDMCon] "C:\Program Files\Softwin\BitDefender10\bdmcon.exe" /reg
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\Softwin\BitDefender10\bdagent.exe"
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Shareaza] "C:\Program Files\Shareaza\Shareaza.exe" -tray
O4 - HKCU\..\Run: [Magentic] C:\PROGRA~1\Magentic\bin\Magentic.exe /c
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
O4 - HKCU\..\Run: [Orb] "C:\Program Files\Winamp Remote\bin\OrbTray.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - S-1-5-18 Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'SYSTEM')
O4 - .DEFAULT Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Mises à jour de HP.lnk = C:\Program Files\Updates from HP\9972322\Program\Updates from HP.exe
O8 - Extra context menu item: &Clean Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm
O8 - Extra context menu item: &Winamp Toolbar Search - C:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-ca\msntabres.dll.mui/229?1c74689548274a7aa62bb9ef6fdc4420
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-ca\msntabres.dll.mui/230?1c74689548274a7aa62bb9ef6fdc4420
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\ddemest.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\ddemest.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - c:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by106fd.bay106.hotmail.msn.com/resources/MsnPUpl...
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls...
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/fl...
O18 - Protocol: bw+0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: ddemest - C:\WINDOWS\SYSTEM32\ddemest.dll
O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
O23 - Service: Service de planification Media Center (ehSched) - Unknown owner - C:\WINDOWS\eHome\ehSched.exe
O23 - Service: Journal des événements (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Fax - Unknown owner - C:\WINDOWS\system32\fxssvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - SOFTWIN S.R.L. - C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
O23 - Service: Carte à puce (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - SOFTWIN S.R.L. - C:\Program Files\Softwin\BitDefender10\vsserv.exe
O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe
O23 - Service: Service Partage réseau du Lecteur Windows Media (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\WMPNetwk.exe
O23 - Service: BitDefender Communicator (XCOMM) - SOFTWIN S.R.L - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
--
End of file - 26982 bytes
voici le rapport Hilack this
Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 08:44:54, on 2007-10-20
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\arservice.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
C:\Program Files\HP DigitalMedia Archive\DMAScheduler.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\ARPWRMSG.EXE
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Softwin\BitDefender10\bdmcon.exe
C:\Program Files\Softwin\BitDefender10\bdagent.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Shareaza\Shareaza.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Updates from HP\9972322\Program\Updates from HP.exe
C:\Program Files\Softwin\BitDefender10\vsserv.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
c:\program files\winamp toolbar\WinampTbServer.exe
C:\Documents and Settings\HP_Administrateur\Bureau\HiJackThis_v2.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&lo...
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&lo...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&loca...
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Winamp Toolbar BHO - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {8d775d44-cf3f-45b7-9f17-b1fe89ee2870} - C:\WINDOWS\system32\ddemest.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
O4 - HKLM\..\Run: [ftutil2] rundll32.exe ftutil2.dll,SetWriteCacheMode
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe
O4 - HKLM\..\Run: [DMAScheduler] "c:\Program Files\HP DigitalMedia Archive\DMAScheduler.exe"
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [ALCMTR] ALCMTR.EXE
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe"
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [AlwaysReady Power Message APP] ARPWRMSG.EXE
O4 - HKLM\..\Run: [DownloadAccelerator] "C:\Program Files\DAP\DAP.EXE" /STARTUP
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\wianmpa.exe
O4 - HKLM\..\Run: [BDMCon] "C:\Program Files\Softwin\BitDefender10\bdmcon.exe" /reg
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\Softwin\BitDefender10\bdagent.exe"
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Shareaza] "C:\Program Files\Shareaza\Shareaza.exe" -tray
O4 - HKCU\..\Run: [Magentic] C:\PROGRA~1\Magentic\bin\Magentic.exe /c
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
O4 - HKCU\..\Run: [Orb] "C:\Program Files\Winamp Remote\bin\OrbTray.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - S-1-5-18 Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'SYSTEM')
O4 - .DEFAULT Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Mises à jour de HP.lnk = C:\Program Files\Updates from HP\9972322\Program\Updates from HP.exe
O8 - Extra context menu item: &Clean Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm
O8 - Extra context menu item: &Winamp Toolbar Search - C:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-ca\msntabres.dll.mui/229?1c74689548274a7aa62bb9ef6fdc4420
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-ca\msntabres.dll.mui/230?1c74689548274a7aa62bb9ef6fdc4420
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\ddemest.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\ddemest.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - c:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by106fd.bay106.hotmail.msn.com/resources/MsnPUpl...
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls...
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/fl...
O18 - Protocol: bw+0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: ddemest - C:\WINDOWS\SYSTEM32\ddemest.dll
O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
O23 - Service: Service de planification Media Center (ehSched) - Unknown owner - C:\WINDOWS\eHome\ehSched.exe
O23 - Service: Journal des événements (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Fax - Unknown owner - C:\WINDOWS\system32\fxssvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - SOFTWIN S.R.L. - C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
O23 - Service: Carte à puce (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - SOFTWIN S.R.L. - C:\Program Files\Softwin\BitDefender10\vsserv.exe
O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe
O23 - Service: Service Partage réseau du Lecteur Windows Media (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\WMPNetwk.exe
O23 - Service: BitDefender Communicator (XCOMM) - SOFTWIN S.R.L - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
--
End of file - 26982 bytes
Re,
Télécharge combofix.exe (par sUBs) sur ton Bureau.
Double clique combofix.exe.
Tape sur la touche 1 (Yes) pour démarrer le scan.
Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.
NOTE : Le rapport se trouve également ici : C:\Combofix.txt
NOTE : Le rapport se trouve également ici : C:\Combofix.txt
Bon je l'est
le voici ..merci
ComboFix 07-10-20.6 - HP_Administrateur 2007-10-20 11:06:55.1 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.1435 [GMT -4:00]
Running from: C:\Documents and Settings\HP_Administrateur\Bureau\ComboFix.exe
* Created a new restore point
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\Documents and Settings\All Users\Application Data\Starware358
C:\Documents and Settings\All Users\Application Data\Starware358\buttons\celebrity_news.bmp
C:\Documents and Settings\All Users\Application Data\Starware358\buttons\celebrity_news.bmp
C:\Documents and Settings\All Users\Application Data\Starware358\buttons\celebrity_search.bmp
C:\Documents and Settings\All Users\Application Data\Starware358\buttons\celebrity_search.bmp
C:\Documents and Settings\All Users\Application Data\Starware358\buttons\FindIt.bmp
C:\Documents and Settings\All Users\Application Data\Starware358\buttons\FindIt.bmp
C:\Documents and Settings\All Users\Application Data\Starware358\buttons\FindItHot.bmp
C:\Documents and Settings\All Users\Application Data\Starware358\buttons\FindItHot.bmp
C:\Documents and Settings\All Users\Application Data\Starware358\buttons\findithotxp.png
C:\Documents and Settings\All Users\Application Data\Starware358\buttons\findithotxp.png
C:\Documents and Settings\All Users\Application Data\Starware358\buttons\finditxp.png
C:\Documents and Settings\All Users\Application Data\Starware358\buttons\finditxp.png
C:\Documents and Settings\All Users\Application Data\Starware358\buttons\Highlight.bmp
C:\Documents and Settings\All Users\Application Data\Starware358\buttons\Highlight.bmp
C:\Documents and Settings\All Users\Application Data\Starware358\buttons\HighlightHot.bmp
C:\Documents and Settings\All Users\Application Data\Starware358\buttons\HighlightHot.bmp
C:\Documents and Settings\All Users\Application Data\Starware358\buttons\highlighthotxp.png
C:\Documents and Settings\All Users\Application Data\Starware358\buttons\highlighthotxp.png
C:\Documents and Settings\All Users\Application Data\Starware358\buttons\highlightxp.png
C:\Documents and Settings\All Users\Application Data\Starware358\buttons\highlightxp.png
C:\Documents and Settings\All Users\Application Data\Starware358\buttons\starware_toolbar_icon.bmp
C:\Documents and Settings\All Users\Application Data\Starware358\buttons\starware_toolbar_icon.bmp
C:\Documents and Settings\All Users\Application Data\Starware358\contexts\error.xml
C:\Documents and Settings\All Users\Application Data\Starware358\contexts\error.xml
C:\Documents and Settings\All Users\Application Data\Starware358\contexts\Related.xml
C:\Documents and Settings\All Users\Application Data\Starware358\contexts\Related.xml
C:\Documents and Settings\All Users\Application Data\Starware358\contexts\Travel.xml
C:\Documents and Settings\All Users\Application Data\Starware358\contexts\Travel.xml
C:\Documents and Settings\All Users\Application Data\Starware358\SimpleUpdate\ProductMessagingConfig.xml
C:\Documents and Settings\All Users\Application Data\Starware358\SimpleUpdate\ProductMessagingConfig.xml
C:\Documents and Settings\All Users\Application Data\Starware358\SimpleUpdate\ProductMessagingConfig.xml.backup
C:\Documents and Settings\All Users\Application Data\Starware358\SimpleUpdate\ProductMessagingConfig.xml.backup
C:\Documents and Settings\All Users\Application Data\Starware358\SimpleUpdate\SimpleUpdateConfig.xml
C:\Documents and Settings\All Users\Application Data\Starware358\SimpleUpdate\SimpleUpdateConfig.xml
C:\Documents and Settings\All Users\Application Data\Starware358\SimpleUpdate\SimpleUpdateConfig.xml.backup
C:\Documents and Settings\All Users\Application Data\Starware358\SimpleUpdate\SimpleUpdateConfig.xml.backup
C:\Documents and Settings\All Users\Application Data\Starware358\SimpleUpdate\TimerManagerConfig.xml
C:\Documents and Settings\All Users\Application Data\Starware358\SimpleUpdate\TimerManagerConfig.xml
C:\Documents and Settings\All Users\Application Data\Starware358\SimpleUpdate\TimerManagerConfig.xml.backup
C:\Documents and Settings\All Users\Application Data\Starware358\SimpleUpdate\TimerManagerConfig.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\BrowserSearch\BrowserSearch.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\BrowserSearch\BrowserSearch.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\BrowserSearch\BrowserSearch.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\BrowserSearch\BrowserSearch.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\CelebrityNews\CelebrityNewsOptions.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\CelebrityNews\CelebrityNewsOptions.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\CelebrityNews\CelebrityNewsOptions.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\CelebrityNews\CelebrityNewsOptions.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\CelebritySearch\CelebritySearchOptions.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\CelebritySearch\CelebritySearchOptions.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\CelebritySearch\CelebritySearchOptions.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\CelebritySearch\CelebritySearchOptions.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Configurator\Configurator.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Configurator\Configurator.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Configurator\Configurator.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Configurator\Configurator.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\EntertainmentMarketingSP\EntertainmentMarketingSPOptions.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\EntertainmentMarketingSP\EntertainmentMarketingSPOptions.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\EntertainmentMarketingSP\EntertainmentMarketingSPOptions.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\EntertainmentMarketingSP\EntertainmentMarketingSPOptions.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\EntertainmentMarketingSP\images\active\EntertainmentMarketingSP0.bmp
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\EntertainmentMarketingSP\images\active\EntertainmentMarketingSP0.bmp
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\ErrorSearch\ErrorSearchOptions.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\ErrorSearch\ErrorSearchOptions.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\ErrorSearch\ErrorSearchOptions.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\ErrorSearch\ErrorSearchOptions.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Games\GamesOptions.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Games\GamesOptions.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Games\GamesOptions.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Games\GamesOptions.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Games\images\active\Games0.bmp
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Games\images\active\Games0.bmp
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Layouts\ToolbarLayout.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Layouts\ToolbarLayout.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Layouts\ToolbarLayout.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Layouts\ToolbarLayout.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Manager\ManagerOptions.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Manager\ManagerOptions.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Manager\ManagerOptions.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Manager\ManagerOptions.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Movies\images\active\Movies0.bmp
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Movies\images\active\Movies0.bmp
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Movies\MoviesOptions.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Movies\MoviesOptions.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Movies\MoviesOptions.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Movies\MoviesOptions.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\RelatedSearch\RelatedSearchOptions.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\RelatedSearch\RelatedSearchOptions.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\RelatedSearch\RelatedSearchOptions.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\RelatedSearch\RelatedSearchOptions.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\ScreensaversMarketingSitePager\images\active\ScreensaversMarketingSitePager0.bmp
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\ScreensaversMarketingSitePager\images\active\ScreensaversMarketingSitePager0.bmp
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\ScreensaversMarketingSitePager\ScreensaversMarketingSitePagerOptions.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\ScreensaversMarketingSitePager\ScreensaversMarketingSitePagerOptions.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\ScreensaversMarketingSitePager\ScreensaversMarketingSitePagerOptions.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\ScreensaversMarketingSitePager\ScreensaversMarketingSitePagerOptions.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Toolbar\TBProductsOptions.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Toolbar\TBProductsOptions.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Toolbar\TBProductsOptions.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Toolbar\TBProductsOptions.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\ToolbarLogo\ToolbarLogoOptions.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\ToolbarLogo\ToolbarLogoOptions.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\ToolbarLogo\ToolbarLogoOptions.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\ToolbarLogo\ToolbarLogoOptions.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\ToolbarSearch\ToolbarSearchOptions.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\ToolbarSearch\ToolbarSearchOptions.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\ToolbarSearch\ToolbarSearchOptions.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\ToolbarSearch\ToolbarSearchOptions.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\TravelSearch\TravelSearchOptions.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\TravelSearch\TravelSearchOptions.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\TravelSearch\TravelSearchOptions.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\TravelSearch\TravelSearchOptions.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358
C:\Documents and Settings\mely 2\Application Data\Starware358\BrowserSearch\BrowserSearch.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\BrowserSearch\BrowserSearch.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\BrowserSearch\BrowserSearch.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\BrowserSearch\BrowserSearch.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\CelebrityNews\CelebrityNewsOptions.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\CelebrityNews\CelebrityNewsOptions.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\CelebrityNews\CelebrityNewsOptions.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\CelebrityNews\CelebrityNewsOptions.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\CelebritySearch\CelebritySearchOptions.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\CelebritySearch\CelebritySearchOptions.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\CelebritySearch\CelebritySearchOptions.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\CelebritySearch\CelebritySearchOptions.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\Configurator\Configurator.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\Configurator\Configurator.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\Configurator\Configurator.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\Configurator\Configurator.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\EntertainmentMarketingSP\EntertainmentMarketingSPOptions.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\EntertainmentMarketingSP\EntertainmentMarketingSPOptions.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\EntertainmentMarketingSP\EntertainmentMarketingSPOptions.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\EntertainmentMarketingSP\EntertainmentMarketingSPOptions.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\EntertainmentMarketingSP\images\active\EntertainmentMarketingSP0.bmp
C:\Documents and Settings\mely 2\Application Data\Starware358\EntertainmentMarketingSP\images\active\EntertainmentMarketingSP0.bmp
C:\Documents and Settings\mely 2\Application Data\Starware358\ErrorSearch\ErrorSearchOptions.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\ErrorSearch\ErrorSearchOptions.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\ErrorSearch\ErrorSearchOptions.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\ErrorSearch\ErrorSearchOptions.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\Games\GamesOptions.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\Games\GamesOptions.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\Games\GamesOptions.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\Games\GamesOptions.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\Games\images\active\Games0.bmp
C:\Documents and Settings\mely 2\Application Data\Starware358\Games\images\active\Games0.bmp
C:\Documents and Settings\mely 2\Application Data\Starware358\Layouts\ToolbarLayout.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\Layouts\ToolbarLayout.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\Layouts\ToolbarLayout.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\Layouts\ToolbarLayout.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\Manager\ManagerOptions.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\Manager\ManagerOptions.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\Manager\ManagerOptions.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\Manager\ManagerOptions.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\Movies\images\active\Movies0.bmp
C:\Documents and Settings\mely 2\Application Data\Starware358\Movies\images\active\Movies0.bmp
C:\Documents and Settings\mely 2\Application Data\Starware358\Movies\MoviesOptions.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\Movies\MoviesOptions.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\Movies\MoviesOptions.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\Movies\MoviesOptions.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\RelatedSearch\RelatedSearchOptions.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\RelatedSearch\RelatedSearchOptions.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\RelatedSearch\RelatedSearchOptions.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\RelatedSearch\RelatedSearchOptions.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\ScreensaversMarketingSitePager\images\active\ScreensaversMarketingSitePager0.bmp
C:\Documents and Settings\mely 2\Application Data\Starware358\ScreensaversMarketingSitePager\images\active\ScreensaversMarketingSitePager0.bmp
C:\Documents and Settings\mely 2\Application Data\Starware358\ScreensaversMarketingSitePager\ScreensaversMarketingSitePagerOptions.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\ScreensaversMarketingSitePager\ScreensaversMarketingSitePagerOptions.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\ScreensaversMarketingSitePager\ScreensaversMarketingSitePagerOptions.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\ScreensaversMarketingSitePager\ScreensaversMarketingSitePagerOptions.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\Toolbar\TBProductsOptions.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\Toolbar\TBProductsOptions.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\Toolbar\TBProductsOptions.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\Toolbar\TBProductsOptions.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\ToolbarLogo\ToolbarLogoOptions.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\ToolbarLogo\ToolbarLogoOptions.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\ToolbarLogo\ToolbarLogoOptions.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\ToolbarLogo\ToolbarLogoOptions.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\ToolbarSearch\ToolbarSearchOptions.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\ToolbarSearch\ToolbarSearchOptions.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\ToolbarSearch\ToolbarSearchOptions.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\ToolbarSearch\ToolbarSearchOptions.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\TravelSearch\TravelSearchOptions.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\TravelSearch\TravelSearchOptions.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\TravelSearch\TravelSearchOptions.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\TravelSearch\TravelSearchOptions.xml.backup
C:\WINDOWS\rsutut.ini
C:\WINDOWS\system32\_000005_.tmp.dll
C:\WINDOWS\system32\ddemest.dll
C:\WINDOWS\system32\ddemest.dll
C:\WINDOWS\tutusr.dll
D:\Autorun.inf
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
-------\LEGACY_DOMAINSERVICE
((((((((((((((((((((((((((((( Fichiers créés 2007-09-20 to 2007-10-20 ))))))))))))))))))))))))))))))))))))
.
2007-10-19 22:42 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Lavasoft
2007-10-19 19:32 <REP> d-------- C:\Documents and Settings\HP_Administrateur\Application Data\Bitdefender
2007-10-19 19:03 <REP> d-------- C:\Documents and Settings\All Users\Application Data\BitDefender
2007-10-19 15:59 <REP> d-------- C:\Program Files\Winamp Toolbar
2007-10-19 15:59 <REP> d-------- C:\Program Files\Winamp Remote
2007-10-19 15:59 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Winamp Toolbar
2007-10-19 15:59 <REP> d-------- C:\Documents and Settings\All Users\Application Data\OrbNetworks
2007-10-17 20:15 <REP> d-------- C:\Program Files\Symantec
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-10-20 03:26 --------- d-----w C:\Documents and Settings\HP_Administrateur\Application Data\Skype
2007-10-20 03:24 --------- d-----w C:\Program Files\BitTorrent
2007-10-20 02:42 --------- d-----w C:\Program Files\Lavasoft
2007-10-20 02:42 --------- d-----w C:\Program Files\Fichiers communs\Wise Installation Wizard
2007-10-19 22:54 --------- d--h--w C:\Program Files\InstallShield Installation Information
2007-10-19 19:59 --------- d-----w C:\Program Files\Winamp
2007-10-18 17:23 --------- d-----w C:\Program Files\Fichiers communs\Symantec Shared
2007-10-18 17:23 --------- d-----w C:\Documents and Settings\All Users\Application Data\Symantec
2007-10-08 23:56 --------- d-----w C:\Program Files\Java
2007-09-24 21:45 --------- d-----w C:\Program Files\eMule
2007-09-17 03:07 --------- d-----w C:\Program Files\VIRTUALSOFT
2007-09-17 03:07 --------- d-----w C:\Documents and Settings\HP_Administrateur\Application Data\{6E42B2F3-641F-4025-AACF-D39D0D9324DA}
2007-09-08 02:09 --------- d-----w C:\Documents and Settings\HP_Administrateur\Application Data\DivX
2007-09-01 01:08 --------- d-----w C:\Program Files\Google
2007-08-23 23:48 --------- d-----w C:\Program Files\Micro Application
2007-08-10 16:57 152 ----a-w C:\Documents and Settings\HP_Administrateur\Application Data\wklnhst.dat
2006-07-15 04:03 251 ----a-w C:\Program Files\wt3d.ini
.
((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{25CEE8EC-5730-41bc-8B58-22DDC8AB8C20}]
2007-10-04 16:06 1135968 --a------ C:\Program Files\Winamp Toolbar\winamptb.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{EBF2BA02-9094-4c5a-858B-BB198F3D8DE2}"= C:\Program Files\Winamp Toolbar\winamptb.dll [2007-10-04 16:06 1135968]
[HKEY_CLASSES_ROOT\CLSID\{EBF2BA02-9094-4c5a-858B-BB198F3D8DE2}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand.1]
[HKEY_CLASSES_ROOT\TypeLib\{538CD77C-BFDD-49b0-9562-77419CAB89D1}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}"= C:\Program Files\Winamp Toolbar\winamptb.dll [2007-10-04 16:06 1135968]
[HKEY_CLASSES_ROOT\CLSID\{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand.1]
[HKEY_CLASSES_ROOT\TypeLib\{538CD77C-BFDD-49b0-9562-77419CAB89D1}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ftutil2"="ftutil2.dll" [2004-06-07 21:05 C:\WINDOWS\system32\ftutil2.dll]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2006-02-13 23:05]
"nwiz"="nwiz.exe" [2006-02-13 23:05 C:\WINDOWS\system32\nwiz.exe]
"HPHUPD08"="c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe" [2005-06-02 09:35]
"DMAScheduler"="c:\Program Files\HP DigitalMedia Archive\DMAScheduler.exe" [2006-03-20 09:05]
"Recguard"="C:\WINDOWS\SMINST\RECGUARD.EXE" [2005-07-22 22:14]
"LVCOMSX"="C:\WINDOWS\system32\LVCOMSX.EXE" [2005-07-19 17:32]
"LogitechVideoRepair"="C:\Program Files\Logitech\Video\ISStart.exe" [2005-06-08 15:24]
"LogitechVideoTray"="C:\Program Files\Logitech\Video\LogiTray.exe" [2005-06-08 15:14]
"KBD"="C:\HP\KBD\KBD.EXE" [2005-02-02 16:44]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 11:50]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11]
"hpsysdrv"="c:\windows\system\hpsysdrv.exe" [1998-05-07 19:04]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2006-10-30 10:36]
"RTHDCPL"="RTHDCPL.EXE" [2006-03-08 14:54 C:\WINDOWS\RTHDCPL.EXE]
"Reminder"="C:\Windows\Creator\Remind_XP.exe" [2004-12-14 02:23]
"ehTray"="C:\WINDOWS\ehome\ehtray.exe" [2005-08-05 20:34]
"AlwaysReady Power Message APP"="ARPWRMSG.EXE" [2005-08-03 02:15 C:\WINDOWS\arpwrmsg.exe]
"DownloadAccelerator"="C:\Program Files\DAP\DAP.exe" []
"TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2006-07-14 22:01]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2006-10-25 19:58]
"PCDrProfiler"="" []
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2006-02-13 23:05]
"HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2006-02-19 02:41]
"WinampAgent"="C:\Program Files\Winamp\wianmpa.exe" []
"BDMCon"="C:\Program Files\Softwin\BitDefender10\bdmcon.exe" [2007-04-02 16:48]
"BDAgent"="C:\Program Files\Softwin\BitDefender10\bdagent.exe" [2007-03-26 15:49]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LDM"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe" [2006-09-22 08:09]
"LogitechSoftwareUpdate"="C:\Program Files\Logitech\Video\ManifestEngine.exe" [2005-06-08 14:44]
"IncrediMail"="C:\Program Files\IncrediMail\bin\IncMail.exe" [2006-10-31 15:06]
"MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.exe" [2007-01-19 12:55]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-05-17 23:21]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-10 14:00]
"Shareaza"="C:\Program Files\Shareaza\Shareaza.exe" [2007-02-05 04:05]
"Magentic"="C:\PROGRA~1\Magentic\bin\Magentic.exe" []
"BitTorrent"="C:\Program Files\BitTorrent\bittorrent.exe" []
"Orb"="C:\Program Files\Winamp Remote\bin\OrbTray.exe" [2007-10-07 20:18]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"InstallVisualStyle"=C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"=C:\WINDOWS\Resources\Themes\Royale.theme
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"appinit_dlls"=sockspy.dll
R3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys
R3 usbstor;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
S3 adxapie;adxapie;\??\C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\adxapie.sys
S3 EraserUtilDrvI2;EraserUtilDrvI2;\??\C:\Program Files\Fichiers communs\Symantec Shared\EENGINE\EraserUtilDrvI2.sys
.
Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
"2007-10-16 19:37:00 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
"2007-10-20 14:27:00 C:\WINDOWS\Tasks\Vérifier les mises à jour de Windows Live Toolbar.job"
.
**************************************************************************
catchme 0.3.1232 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-10-20 11:12:26
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
Completion time: 2007-10-20 11:14:23 - machine was rebooted
.
--- E O F ---
le voici ..merci
ComboFix 07-10-20.6 - HP_Administrateur 2007-10-20 11:06:55.1 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.1435 [GMT -4:00]
Running from: C:\Documents and Settings\HP_Administrateur\Bureau\ComboFix.exe
* Created a new restore point
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\Documents and Settings\All Users\Application Data\Starware358
C:\Documents and Settings\All Users\Application Data\Starware358\buttons\celebrity_news.bmp
C:\Documents and Settings\All Users\Application Data\Starware358\buttons\celebrity_news.bmp
C:\Documents and Settings\All Users\Application Data\Starware358\buttons\celebrity_search.bmp
C:\Documents and Settings\All Users\Application Data\Starware358\buttons\celebrity_search.bmp
C:\Documents and Settings\All Users\Application Data\Starware358\buttons\FindIt.bmp
C:\Documents and Settings\All Users\Application Data\Starware358\buttons\FindIt.bmp
C:\Documents and Settings\All Users\Application Data\Starware358\buttons\FindItHot.bmp
C:\Documents and Settings\All Users\Application Data\Starware358\buttons\FindItHot.bmp
C:\Documents and Settings\All Users\Application Data\Starware358\buttons\findithotxp.png
C:\Documents and Settings\All Users\Application Data\Starware358\buttons\findithotxp.png
C:\Documents and Settings\All Users\Application Data\Starware358\buttons\finditxp.png
C:\Documents and Settings\All Users\Application Data\Starware358\buttons\finditxp.png
C:\Documents and Settings\All Users\Application Data\Starware358\buttons\Highlight.bmp
C:\Documents and Settings\All Users\Application Data\Starware358\buttons\Highlight.bmp
C:\Documents and Settings\All Users\Application Data\Starware358\buttons\HighlightHot.bmp
C:\Documents and Settings\All Users\Application Data\Starware358\buttons\HighlightHot.bmp
C:\Documents and Settings\All Users\Application Data\Starware358\buttons\highlighthotxp.png
C:\Documents and Settings\All Users\Application Data\Starware358\buttons\highlighthotxp.png
C:\Documents and Settings\All Users\Application Data\Starware358\buttons\highlightxp.png
C:\Documents and Settings\All Users\Application Data\Starware358\buttons\highlightxp.png
C:\Documents and Settings\All Users\Application Data\Starware358\buttons\starware_toolbar_icon.bmp
C:\Documents and Settings\All Users\Application Data\Starware358\buttons\starware_toolbar_icon.bmp
C:\Documents and Settings\All Users\Application Data\Starware358\contexts\error.xml
C:\Documents and Settings\All Users\Application Data\Starware358\contexts\error.xml
C:\Documents and Settings\All Users\Application Data\Starware358\contexts\Related.xml
C:\Documents and Settings\All Users\Application Data\Starware358\contexts\Related.xml
C:\Documents and Settings\All Users\Application Data\Starware358\contexts\Travel.xml
C:\Documents and Settings\All Users\Application Data\Starware358\contexts\Travel.xml
C:\Documents and Settings\All Users\Application Data\Starware358\SimpleUpdate\ProductMessagingConfig.xml
C:\Documents and Settings\All Users\Application Data\Starware358\SimpleUpdate\ProductMessagingConfig.xml
C:\Documents and Settings\All Users\Application Data\Starware358\SimpleUpdate\ProductMessagingConfig.xml.backup
C:\Documents and Settings\All Users\Application Data\Starware358\SimpleUpdate\ProductMessagingConfig.xml.backup
C:\Documents and Settings\All Users\Application Data\Starware358\SimpleUpdate\SimpleUpdateConfig.xml
C:\Documents and Settings\All Users\Application Data\Starware358\SimpleUpdate\SimpleUpdateConfig.xml
C:\Documents and Settings\All Users\Application Data\Starware358\SimpleUpdate\SimpleUpdateConfig.xml.backup
C:\Documents and Settings\All Users\Application Data\Starware358\SimpleUpdate\SimpleUpdateConfig.xml.backup
C:\Documents and Settings\All Users\Application Data\Starware358\SimpleUpdate\TimerManagerConfig.xml
C:\Documents and Settings\All Users\Application Data\Starware358\SimpleUpdate\TimerManagerConfig.xml
C:\Documents and Settings\All Users\Application Data\Starware358\SimpleUpdate\TimerManagerConfig.xml.backup
C:\Documents and Settings\All Users\Application Data\Starware358\SimpleUpdate\TimerManagerConfig.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\BrowserSearch\BrowserSearch.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\BrowserSearch\BrowserSearch.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\BrowserSearch\BrowserSearch.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\BrowserSearch\BrowserSearch.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\CelebrityNews\CelebrityNewsOptions.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\CelebrityNews\CelebrityNewsOptions.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\CelebrityNews\CelebrityNewsOptions.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\CelebrityNews\CelebrityNewsOptions.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\CelebritySearch\CelebritySearchOptions.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\CelebritySearch\CelebritySearchOptions.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\CelebritySearch\CelebritySearchOptions.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\CelebritySearch\CelebritySearchOptions.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Configurator\Configurator.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Configurator\Configurator.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Configurator\Configurator.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Configurator\Configurator.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\EntertainmentMarketingSP\EntertainmentMarketingSPOptions.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\EntertainmentMarketingSP\EntertainmentMarketingSPOptions.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\EntertainmentMarketingSP\EntertainmentMarketingSPOptions.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\EntertainmentMarketingSP\EntertainmentMarketingSPOptions.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\EntertainmentMarketingSP\images\active\EntertainmentMarketingSP0.bmp
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\EntertainmentMarketingSP\images\active\EntertainmentMarketingSP0.bmp
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\ErrorSearch\ErrorSearchOptions.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\ErrorSearch\ErrorSearchOptions.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\ErrorSearch\ErrorSearchOptions.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\ErrorSearch\ErrorSearchOptions.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Games\GamesOptions.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Games\GamesOptions.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Games\GamesOptions.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Games\GamesOptions.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Games\images\active\Games0.bmp
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Games\images\active\Games0.bmp
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Layouts\ToolbarLayout.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Layouts\ToolbarLayout.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Layouts\ToolbarLayout.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Layouts\ToolbarLayout.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Manager\ManagerOptions.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Manager\ManagerOptions.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Manager\ManagerOptions.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Manager\ManagerOptions.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Movies\images\active\Movies0.bmp
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Movies\images\active\Movies0.bmp
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Movies\MoviesOptions.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Movies\MoviesOptions.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Movies\MoviesOptions.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Movies\MoviesOptions.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\RelatedSearch\RelatedSearchOptions.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\RelatedSearch\RelatedSearchOptions.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\RelatedSearch\RelatedSearchOptions.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\RelatedSearch\RelatedSearchOptions.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\ScreensaversMarketingSitePager\images\active\ScreensaversMarketingSitePager0.bmp
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\ScreensaversMarketingSitePager\images\active\ScreensaversMarketingSitePager0.bmp
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\ScreensaversMarketingSitePager\ScreensaversMarketingSitePagerOptions.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\ScreensaversMarketingSitePager\ScreensaversMarketingSitePagerOptions.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\ScreensaversMarketingSitePager\ScreensaversMarketingSitePagerOptions.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\ScreensaversMarketingSitePager\ScreensaversMarketingSitePagerOptions.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Toolbar\TBProductsOptions.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Toolbar\TBProductsOptions.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Toolbar\TBProductsOptions.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\Toolbar\TBProductsOptions.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\ToolbarLogo\ToolbarLogoOptions.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\ToolbarLogo\ToolbarLogoOptions.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\ToolbarLogo\ToolbarLogoOptions.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\ToolbarLogo\ToolbarLogoOptions.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\ToolbarSearch\ToolbarSearchOptions.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\ToolbarSearch\ToolbarSearchOptions.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\ToolbarSearch\ToolbarSearchOptions.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\ToolbarSearch\ToolbarSearchOptions.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\TravelSearch\TravelSearchOptions.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\TravelSearch\TravelSearchOptions.xml
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\TravelSearch\TravelSearchOptions.xml.backup
C:\Documents and Settings\HP_Administrateur\Application Data\Starware358\TravelSearch\TravelSearchOptions.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358
C:\Documents and Settings\mely 2\Application Data\Starware358\BrowserSearch\BrowserSearch.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\BrowserSearch\BrowserSearch.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\BrowserSearch\BrowserSearch.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\BrowserSearch\BrowserSearch.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\CelebrityNews\CelebrityNewsOptions.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\CelebrityNews\CelebrityNewsOptions.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\CelebrityNews\CelebrityNewsOptions.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\CelebrityNews\CelebrityNewsOptions.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\CelebritySearch\CelebritySearchOptions.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\CelebritySearch\CelebritySearchOptions.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\CelebritySearch\CelebritySearchOptions.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\CelebritySearch\CelebritySearchOptions.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\Configurator\Configurator.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\Configurator\Configurator.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\Configurator\Configurator.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\Configurator\Configurator.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\EntertainmentMarketingSP\EntertainmentMarketingSPOptions.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\EntertainmentMarketingSP\EntertainmentMarketingSPOptions.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\EntertainmentMarketingSP\EntertainmentMarketingSPOptions.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\EntertainmentMarketingSP\EntertainmentMarketingSPOptions.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\EntertainmentMarketingSP\images\active\EntertainmentMarketingSP0.bmp
C:\Documents and Settings\mely 2\Application Data\Starware358\EntertainmentMarketingSP\images\active\EntertainmentMarketingSP0.bmp
C:\Documents and Settings\mely 2\Application Data\Starware358\ErrorSearch\ErrorSearchOptions.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\ErrorSearch\ErrorSearchOptions.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\ErrorSearch\ErrorSearchOptions.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\ErrorSearch\ErrorSearchOptions.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\Games\GamesOptions.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\Games\GamesOptions.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\Games\GamesOptions.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\Games\GamesOptions.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\Games\images\active\Games0.bmp
C:\Documents and Settings\mely 2\Application Data\Starware358\Games\images\active\Games0.bmp
C:\Documents and Settings\mely 2\Application Data\Starware358\Layouts\ToolbarLayout.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\Layouts\ToolbarLayout.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\Layouts\ToolbarLayout.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\Layouts\ToolbarLayout.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\Manager\ManagerOptions.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\Manager\ManagerOptions.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\Manager\ManagerOptions.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\Manager\ManagerOptions.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\Movies\images\active\Movies0.bmp
C:\Documents and Settings\mely 2\Application Data\Starware358\Movies\images\active\Movies0.bmp
C:\Documents and Settings\mely 2\Application Data\Starware358\Movies\MoviesOptions.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\Movies\MoviesOptions.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\Movies\MoviesOptions.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\Movies\MoviesOptions.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\RelatedSearch\RelatedSearchOptions.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\RelatedSearch\RelatedSearchOptions.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\RelatedSearch\RelatedSearchOptions.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\RelatedSearch\RelatedSearchOptions.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\ScreensaversMarketingSitePager\images\active\ScreensaversMarketingSitePager0.bmp
C:\Documents and Settings\mely 2\Application Data\Starware358\ScreensaversMarketingSitePager\images\active\ScreensaversMarketingSitePager0.bmp
C:\Documents and Settings\mely 2\Application Data\Starware358\ScreensaversMarketingSitePager\ScreensaversMarketingSitePagerOptions.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\ScreensaversMarketingSitePager\ScreensaversMarketingSitePagerOptions.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\ScreensaversMarketingSitePager\ScreensaversMarketingSitePagerOptions.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\ScreensaversMarketingSitePager\ScreensaversMarketingSitePagerOptions.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\Toolbar\TBProductsOptions.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\Toolbar\TBProductsOptions.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\Toolbar\TBProductsOptions.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\Toolbar\TBProductsOptions.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\ToolbarLogo\ToolbarLogoOptions.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\ToolbarLogo\ToolbarLogoOptions.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\ToolbarLogo\ToolbarLogoOptions.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\ToolbarLogo\ToolbarLogoOptions.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\ToolbarSearch\ToolbarSearchOptions.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\ToolbarSearch\ToolbarSearchOptions.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\ToolbarSearch\ToolbarSearchOptions.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\ToolbarSearch\ToolbarSearchOptions.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\TravelSearch\TravelSearchOptions.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\TravelSearch\TravelSearchOptions.xml
C:\Documents and Settings\mely 2\Application Data\Starware358\TravelSearch\TravelSearchOptions.xml.backup
C:\Documents and Settings\mely 2\Application Data\Starware358\TravelSearch\TravelSearchOptions.xml.backup
C:\WINDOWS\rsutut.ini
C:\WINDOWS\system32\_000005_.tmp.dll
C:\WINDOWS\system32\ddemest.dll
C:\WINDOWS\system32\ddemest.dll
C:\WINDOWS\tutusr.dll
D:\Autorun.inf
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
-------\LEGACY_DOMAINSERVICE
((((((((((((((((((((((((((((( Fichiers créés 2007-09-20 to 2007-10-20 ))))))))))))))))))))))))))))))))))))
.
2007-10-19 22:42 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Lavasoft
2007-10-19 19:32 <REP> d-------- C:\Documents and Settings\HP_Administrateur\Application Data\Bitdefender
2007-10-19 19:03 <REP> d-------- C:\Documents and Settings\All Users\Application Data\BitDefender
2007-10-19 15:59 <REP> d-------- C:\Program Files\Winamp Toolbar
2007-10-19 15:59 <REP> d-------- C:\Program Files\Winamp Remote
2007-10-19 15:59 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Winamp Toolbar
2007-10-19 15:59 <REP> d-------- C:\Documents and Settings\All Users\Application Data\OrbNetworks
2007-10-17 20:15 <REP> d-------- C:\Program Files\Symantec
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-10-20 03:26 --------- d-----w C:\Documents and Settings\HP_Administrateur\Application Data\Skype
2007-10-20 03:24 --------- d-----w C:\Program Files\BitTorrent
2007-10-20 02:42 --------- d-----w C:\Program Files\Lavasoft
2007-10-20 02:42 --------- d-----w C:\Program Files\Fichiers communs\Wise Installation Wizard
2007-10-19 22:54 --------- d--h--w C:\Program Files\InstallShield Installation Information
2007-10-19 19:59 --------- d-----w C:\Program Files\Winamp
2007-10-18 17:23 --------- d-----w C:\Program Files\Fichiers communs\Symantec Shared
2007-10-18 17:23 --------- d-----w C:\Documents and Settings\All Users\Application Data\Symantec
2007-10-08 23:56 --------- d-----w C:\Program Files\Java
2007-09-24 21:45 --------- d-----w C:\Program Files\eMule
2007-09-17 03:07 --------- d-----w C:\Program Files\VIRTUALSOFT
2007-09-17 03:07 --------- d-----w C:\Documents and Settings\HP_Administrateur\Application Data\{6E42B2F3-641F-4025-AACF-D39D0D9324DA}
2007-09-08 02:09 --------- d-----w C:\Documents and Settings\HP_Administrateur\Application Data\DivX
2007-09-01 01:08 --------- d-----w C:\Program Files\Google
2007-08-23 23:48 --------- d-----w C:\Program Files\Micro Application
2007-08-10 16:57 152 ----a-w C:\Documents and Settings\HP_Administrateur\Application Data\wklnhst.dat
2006-07-15 04:03 251 ----a-w C:\Program Files\wt3d.ini
.
((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{25CEE8EC-5730-41bc-8B58-22DDC8AB8C20}]
2007-10-04 16:06 1135968 --a------ C:\Program Files\Winamp Toolbar\winamptb.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{EBF2BA02-9094-4c5a-858B-BB198F3D8DE2}"= C:\Program Files\Winamp Toolbar\winamptb.dll [2007-10-04 16:06 1135968]
[HKEY_CLASSES_ROOT\CLSID\{EBF2BA02-9094-4c5a-858B-BB198F3D8DE2}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand.1]
[HKEY_CLASSES_ROOT\TypeLib\{538CD77C-BFDD-49b0-9562-77419CAB89D1}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}"= C:\Program Files\Winamp Toolbar\winamptb.dll [2007-10-04 16:06 1135968]
[HKEY_CLASSES_ROOT\CLSID\{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand.1]
[HKEY_CLASSES_ROOT\TypeLib\{538CD77C-BFDD-49b0-9562-77419CAB89D1}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ftutil2"="ftutil2.dll" [2004-06-07 21:05 C:\WINDOWS\system32\ftutil2.dll]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2006-02-13 23:05]
"nwiz"="nwiz.exe" [2006-02-13 23:05 C:\WINDOWS\system32\nwiz.exe]
"HPHUPD08"="c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe" [2005-06-02 09:35]
"DMAScheduler"="c:\Program Files\HP DigitalMedia Archive\DMAScheduler.exe" [2006-03-20 09:05]
"Recguard"="C:\WINDOWS\SMINST\RECGUARD.EXE" [2005-07-22 22:14]
"LVCOMSX"="C:\WINDOWS\system32\LVCOMSX.EXE" [2005-07-19 17:32]
"LogitechVideoRepair"="C:\Program Files\Logitech\Video\ISStart.exe" [2005-06-08 15:24]
"LogitechVideoTray"="C:\Program Files\Logitech\Video\LogiTray.exe" [2005-06-08 15:14]
"KBD"="C:\HP\KBD\KBD.EXE" [2005-02-02 16:44]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 11:50]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11]
"hpsysdrv"="c:\windows\system\hpsysdrv.exe" [1998-05-07 19:04]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2006-10-30 10:36]
"RTHDCPL"="RTHDCPL.EXE" [2006-03-08 14:54 C:\WINDOWS\RTHDCPL.EXE]
"Reminder"="C:\Windows\Creator\Remind_XP.exe" [2004-12-14 02:23]
"ehTray"="C:\WINDOWS\ehome\ehtray.exe" [2005-08-05 20:34]
"AlwaysReady Power Message APP"="ARPWRMSG.EXE" [2005-08-03 02:15 C:\WINDOWS\arpwrmsg.exe]
"DownloadAccelerator"="C:\Program Files\DAP\DAP.exe" []
"TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2006-07-14 22:01]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2006-10-25 19:58]
"PCDrProfiler"="" []
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2006-02-13 23:05]
"HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2006-02-19 02:41]
"WinampAgent"="C:\Program Files\Winamp\wianmpa.exe" []
"BDMCon"="C:\Program Files\Softwin\BitDefender10\bdmcon.exe" [2007-04-02 16:48]
"BDAgent"="C:\Program Files\Softwin\BitDefender10\bdagent.exe" [2007-03-26 15:49]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LDM"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe" [2006-09-22 08:09]
"LogitechSoftwareUpdate"="C:\Program Files\Logitech\Video\ManifestEngine.exe" [2005-06-08 14:44]
"IncrediMail"="C:\Program Files\IncrediMail\bin\IncMail.exe" [2006-10-31 15:06]
"MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.exe" [2007-01-19 12:55]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-05-17 23:21]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-10 14:00]
"Shareaza"="C:\Program Files\Shareaza\Shareaza.exe" [2007-02-05 04:05]
"Magentic"="C:\PROGRA~1\Magentic\bin\Magentic.exe" []
"BitTorrent"="C:\Program Files\BitTorrent\bittorrent.exe" []
"Orb"="C:\Program Files\Winamp Remote\bin\OrbTray.exe" [2007-10-07 20:18]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"InstallVisualStyle"=C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"=C:\WINDOWS\Resources\Themes\Royale.theme
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"appinit_dlls"=sockspy.dll
R3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys
R3 usbstor;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
S3 adxapie;adxapie;\??\C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\adxapie.sys
S3 EraserUtilDrvI2;EraserUtilDrvI2;\??\C:\Program Files\Fichiers communs\Symantec Shared\EENGINE\EraserUtilDrvI2.sys
.
Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
"2007-10-16 19:37:00 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
"2007-10-20 14:27:00 C:\WINDOWS\Tasks\Vérifier les mises à jour de Windows Live Toolbar.job"
.
**************************************************************************
catchme 0.3.1232 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-10-20 11:12:26
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
Completion time: 2007-10-20 11:14:23 - machine was rebooted
.
--- E O F ---
oui biensure
Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 12:08:59, on 2007-10-20
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\arservice.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
C:\Program Files\HP DigitalMedia Archive\DMAScheduler.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\ARPWRMSG.EXE
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\Program Files\Softwin\BitDefender10\bdagent.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Shareaza\Shareaza.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Updates from HP\9972322\Program\Updates from HP.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\internet explorer\iexplore.exe
c:\program files\winamp toolbar\WinampTbServer.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
C:\Program Files\Softwin\BitDefender10\vsserv.exe
C:\Documents and Settings\HP_Administrateur\Bureau\HiJackThis_v2.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&lo...
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&lo...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&loca...
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Winamp Toolbar BHO - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
O4 - HKLM\..\Run: [ftutil2] rundll32.exe ftutil2.dll,SetWriteCacheMode
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe
O4 - HKLM\..\Run: [DMAScheduler] "c:\Program Files\HP DigitalMedia Archive\DMAScheduler.exe"
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe"
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [AlwaysReady Power Message APP] ARPWRMSG.EXE
O4 - HKLM\..\Run: [DownloadAccelerator] "C:\Program Files\DAP\DAP.EXE" /STARTUP
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\wianmpa.exe
O4 - HKLM\..\Run: [BDMCon] "C:\Program Files\Softwin\BitDefender10\bdmcon.exe" /reg
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\Softwin\BitDefender10\bdagent.exe"
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Shareaza] "C:\Program Files\Shareaza\Shareaza.exe" -tray
O4 - HKCU\..\Run: [Magentic] C:\PROGRA~1\Magentic\bin\Magentic.exe /c
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
O4 - HKCU\..\Run: [Orb] "C:\Program Files\Winamp Remote\bin\OrbTray.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - S-1-5-18 Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'SYSTEM')
O4 - .DEFAULT Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Mises à jour de HP.lnk = C:\Program Files\Updates from HP\9972322\Program\Updates from HP.exe
O8 - Extra context menu item: &Clean Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm
O8 - Extra context menu item: &Winamp Toolbar Search - C:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-ca\msntabres.dll.mui/229?1c74689548274a7aa62bb9ef6fdc4420
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-ca\msntabres.dll.mui/230?1c74689548274a7aa62bb9ef6fdc4420
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - c:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by106fd.bay106.hotmail.msn.com/resources/MsnPUpl...
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls...
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/fl...
O18 - Protocol: bw+0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
O23 - Service: Service de planification Media Center (ehSched) - Unknown owner - C:\WINDOWS\eHome\ehSched.exe
O23 - Service: Journal des événements (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Fax - Unknown owner - C:\WINDOWS\system32\fxssvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - SOFTWIN S.R.L. - C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
O23 - Service: Carte à puce (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - SOFTWIN S.R.L. - C:\Program Files\Softwin\BitDefender10\vsserv.exe
O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe
O23 - Service: Service Partage réseau du Lecteur Windows Media (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\WMPNetwk.exe
O23 - Service: BitDefender Communicator (XCOMM) - SOFTWIN S.R.L - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
--
End of file - 26710 bytes
Merci
Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 12:08:59, on 2007-10-20
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\arservice.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
C:\Program Files\HP DigitalMedia Archive\DMAScheduler.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\ARPWRMSG.EXE
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\Program Files\Softwin\BitDefender10\bdagent.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Shareaza\Shareaza.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Updates from HP\9972322\Program\Updates from HP.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\internet explorer\iexplore.exe
c:\program files\winamp toolbar\WinampTbServer.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
C:\Program Files\Softwin\BitDefender10\vsserv.exe
C:\Documents and Settings\HP_Administrateur\Bureau\HiJackThis_v2.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&lo...
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&lo...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&loca...
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Winamp Toolbar BHO - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
O4 - HKLM\..\Run: [ftutil2] rundll32.exe ftutil2.dll,SetWriteCacheMode
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe
O4 - HKLM\..\Run: [DMAScheduler] "c:\Program Files\HP DigitalMedia Archive\DMAScheduler.exe"
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe"
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [AlwaysReady Power Message APP] ARPWRMSG.EXE
O4 - HKLM\..\Run: [DownloadAccelerator] "C:\Program Files\DAP\DAP.EXE" /STARTUP
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\wianmpa.exe
O4 - HKLM\..\Run: [BDMCon] "C:\Program Files\Softwin\BitDefender10\bdmcon.exe" /reg
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\Softwin\BitDefender10\bdagent.exe"
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Shareaza] "C:\Program Files\Shareaza\Shareaza.exe" -tray
O4 - HKCU\..\Run: [Magentic] C:\PROGRA~1\Magentic\bin\Magentic.exe /c
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
O4 - HKCU\..\Run: [Orb] "C:\Program Files\Winamp Remote\bin\OrbTray.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - S-1-5-18 Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'SYSTEM')
O4 - .DEFAULT Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Mises à jour de HP.lnk = C:\Program Files\Updates from HP\9972322\Program\Updates from HP.exe
O8 - Extra context menu item: &Clean Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm
O8 - Extra context menu item: &Winamp Toolbar Search - C:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-ca\msntabres.dll.mui/229?1c74689548274a7aa62bb9ef6fdc4420
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-ca\msntabres.dll.mui/230?1c74689548274a7aa62bb9ef6fdc4420
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - c:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by106fd.bay106.hotmail.msn.com/resources/MsnPUpl...
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls...
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/fl...
O18 - Protocol: bw+0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
O23 - Service: Service de planification Media Center (ehSched) - Unknown owner - C:\WINDOWS\eHome\ehSched.exe
O23 - Service: Journal des événements (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Fax - Unknown owner - C:\WINDOWS\system32\fxssvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - SOFTWIN S.R.L. - C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
O23 - Service: Carte à puce (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - SOFTWIN S.R.L. - C:\Program Files\Softwin\BitDefender10\vsserv.exe
O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe
O23 - Service: Service Partage réseau du Lecteur Windows Media (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\WMPNetwk.exe
O23 - Service: BitDefender Communicator (XCOMM) - SOFTWIN S.R.L - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
--
End of file - 26710 bytes
Merci
ok j avais la version 2.0 et j ai télécharger la version 2.0.2
Voici ce que a donne :
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:46:35, on 2007-10-20
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\arservice.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
C:\Program Files\HP DigitalMedia Archive\DMAScheduler.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\ARPWRMSG.EXE
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\Program Files\Softwin\BitDefender10\bdagent.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Shareaza\Shareaza.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Updates from HP\9972322\Program\Updates from HP.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\MSN Messenger\usnsvc.exe
c:\program files\winamp toolbar\WinampTbServer.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
C:\Program Files\Softwin\BitDefender10\vsserv.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&lo...
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&lo...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&loca...
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Winamp Toolbar BHO - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
O4 - HKLM\..\Run: [ftutil2] rundll32.exe ftutil2.dll,SetWriteCacheMode
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe
O4 - HKLM\..\Run: [DMAScheduler] "c:\Program Files\HP DigitalMedia Archive\DMAScheduler.exe"
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe"
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [AlwaysReady Power Message APP] ARPWRMSG.EXE
O4 - HKLM\..\Run: [DownloadAccelerator] "C:\Program Files\DAP\DAP.EXE" /STARTUP
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\wianmpa.exe
O4 - HKLM\..\Run: [BDMCon] "C:\Program Files\Softwin\BitDefender10\bdmcon.exe" /reg
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\Softwin\BitDefender10\bdagent.exe"
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Shareaza] "C:\Program Files\Shareaza\Shareaza.exe" -tray
O4 - HKCU\..\Run: [Magentic] C:\PROGRA~1\Magentic\bin\Magentic.exe /c
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
O4 - HKCU\..\Run: [Orb] "C:\Program Files\Winamp Remote\bin\OrbTray.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - S-1-5-18 Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'SYSTEM')
O4 - .DEFAULT Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Mises à jour de HP.lnk = C:\Program Files\Updates from HP\9972322\Program\Updates from HP.exe
O8 - Extra context menu item: &Clean Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm
O8 - Extra context menu item: &Winamp Toolbar Search - C:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-ca\msntabres.dll.mui/229?1c74689548274a7aa62bb9ef6fdc4420
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-ca\msntabres.dll.mui/230?1c74689548274a7aa62bb9ef6fdc4420
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - c:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by106fd.bay106.hotmail.msn.com/resources/MsnPUpl...
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls...
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/fl...
O18 - Protocol: bw+0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - SOFTWIN S.R.L. - C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - SOFTWIN S.R.L. - C:\Program Files\Softwin\BitDefender10\vsserv.exe
O23 - Service: BitDefender Communicator (XCOMM) - SOFTWIN S.R.L - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
--
End of file - 25082 bytes
Merci
Voici ce que a donne :
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:46:35, on 2007-10-20
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\arservice.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
C:\Program Files\HP DigitalMedia Archive\DMAScheduler.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\ARPWRMSG.EXE
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\Program Files\Softwin\BitDefender10\bdagent.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Shareaza\Shareaza.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Updates from HP\9972322\Program\Updates from HP.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\MSN Messenger\usnsvc.exe
c:\program files\winamp toolbar\WinampTbServer.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
C:\Program Files\Softwin\BitDefender10\vsserv.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&lo...
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&lo...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&loca...
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Winamp Toolbar BHO - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
O4 - HKLM\..\Run: [ftutil2] rundll32.exe ftutil2.dll,SetWriteCacheMode
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe
O4 - HKLM\..\Run: [DMAScheduler] "c:\Program Files\HP DigitalMedia Archive\DMAScheduler.exe"
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe"
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [AlwaysReady Power Message APP] ARPWRMSG.EXE
O4 - HKLM\..\Run: [DownloadAccelerator] "C:\Program Files\DAP\DAP.EXE" /STARTUP
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\wianmpa.exe
O4 - HKLM\..\Run: [BDMCon] "C:\Program Files\Softwin\BitDefender10\bdmcon.exe" /reg
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\Softwin\BitDefender10\bdagent.exe"
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Shareaza] "C:\Program Files\Shareaza\Shareaza.exe" -tray
O4 - HKCU\..\Run: [Magentic] C:\PROGRA~1\Magentic\bin\Magentic.exe /c
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
O4 - HKCU\..\Run: [Orb] "C:\Program Files\Winamp Remote\bin\OrbTray.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - S-1-5-18 Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'SYSTEM')
O4 - .DEFAULT Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Mises à jour de HP.lnk = C:\Program Files\Updates from HP\9972322\Program\Updates from HP.exe
O8 - Extra context menu item: &Clean Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm
O8 - Extra context menu item: &Winamp Toolbar Search - C:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-ca\msntabres.dll.mui/229?1c74689548274a7aa62bb9ef6fdc4420
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-ca\msntabres.dll.mui/230?1c74689548274a7aa62bb9ef6fdc4420
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - c:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by106fd.bay106.hotmail.msn.com/resources/MsnPUpl...
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls...
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/fl...
O18 - Protocol: bw+0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {6EFC1691-3FC4-4ABA-AB67-1006F18E13F0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - SOFTWIN S.R.L. - C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - SOFTWIN S.R.L. - C:\Program Files\Softwin\BitDefender10\vsserv.exe
O23 - Service: BitDefender Communicator (XCOMM) - SOFTWIN S.R.L - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
--
End of file - 25082 bytes
Merci
J'aurais une petite question ...sais tu ce qu'est le fichier MSXML4.0
lorsque je veux entrer dans mon jeu une fenetre aparait et ca me dit que le fichier msxml4.0 est mal installer et qu il est necessair pour l exécution du jeu ..j'ai trouver ce fichier ds le lecteur c: program files mais il est vide j'ai désinstaller mon jeu et réinstaller par la suite mais toujours la meme chose je ne sais vraiment pas ce qui c'est passer
pourquoi ce foutu fichier est vide alors qu'il y a une semaine il fonctionnait a merveille (mon jeu age of empire III)
lorsque je veux entrer dans mon jeu une fenetre aparait et ca me dit que le fichier msxml4.0 est mal installer et qu il est necessair pour l exécution du jeu ..j'ai trouver ce fichier ds le lecteur c: program files mais il est vide j'ai désinstaller mon jeu et réinstaller par la suite mais toujours la meme chose je ne sais vraiment pas ce qui c'est passer
pourquoi ce foutu fichier est vide alors qu'il y a une semaine il fonctionnait a merveille (mon jeu age of empire III)
Lassé par la pub ? Créez un compte
- Contenus similaires :
Tags :
personne ne peut m'aider !!!