Se connecter avec
S'enregistrer | Connectez-vous

resolu Virus sur pc- débutante merci de m'aider

Dernière réponse : dans Sécurité
Lassé par la pub ? Créez un compte

Bonjour,

  • Télécharge Random's System Information Tool (RSIT) (par random/random) sur ton Bureau.
  • Double-clique sur RSIT.exe afin de lancer le programme.
    (Sous Vista, il faut cliquer droit sur RSIT.exe et choisir Exécuter en tant qu'administrateur)
  • Clique sur Continue à l'écran Disclaimer.
  • Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.
  • Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront. Poste le contenu de log.txt (c'est celui qui apparaît à l'écran) ainsi que de info.txt (que tu verras dans la barre des tâches).

    Note : les rapports sont sauvegardés dans le dossier C:\rsit.

    Logfile of random's system information tool 1.06 (written by random/random)
    Run by sophie at 2009-05-07 15:30:02
    Microsoft Windows XP Édition familiale Service Pack 3
    System drive C: has 20 GB (38%) free of 53 GB
    Total RAM: 1023 MB (49% free)

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 15:30:03, on 07/05/2009
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16827)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
    C:\Program Files\Avira\AntiVir Desktop\sched.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\SOUNDMAN.EXE
    C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
    C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe
    C:\Program Files\ScanSoft\OmniPageSE\opware32.exe
    C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\Program Files\Orange\Systray\SystrayApp.exe
    C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
    C:\Program Files\Logitech\QuickCam\Quickcam.exe
    C:\Program Files\Java\jre6\bin\jusched.exe
    C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
    C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    C:\Documents and Settings\sophie\Application Data\advantage\AdVantage.exe
    C:\documents and settings\sophie\local settings\application data\gaigm.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    C:\Program Files\Fichiers communs\Nikon\Monitor\NkMonitor.exe
    C:\Program Files\Avira\AntiVir Desktop\avguard.exe
    C:\WINDOWS\System32\drivers\CDAC11BA.EXE
    C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
    C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
    C:\WINDOWS\System32\wbem\wmiapsrv.exe
    C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
    C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
    C:\Program Files\Windows Live\Contacts\wlcomm.exe
    C:\Program Files\bfgclient\bfggameservices.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Documents and Settings\sophie\Bureau\RSIT.exe
    C:\Program Files\trend micro\sophie.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.searchgateway.net/search/%s
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Packard Bell
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\Orange\SearchURLHook\SearchPageURL.dll
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\apps\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
    O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
    O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
    O4 - HKLM\..\Run: [ATIPTA] C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [VCSPlayer] "C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe"
    O4 - HKLM\..\Run: [TimeSink Ad Client] "C:\Program Files\TimeSink\AdGateway\TSAdBot.exe"
    O4 - HKLM\..\Run: [Omnipage] C:\Program Files\ScanSoft\OmniPageSE\opware32.exe
    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [SystrayORAHSS] "C:\Program Files\Orange\Systray\SystrayApp.exe"
    O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\Orange\SessionManager\SessionManager.exe
    O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
    O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    O4 - HKCU\..\Run: [AdVantage] C:\Documents and Settings\sophie\Application Data\advantage\AdVantage.exe
    O4 - HKCU\..\Run: [gaigm] "c:\documents and settings\sophie\local settings\application data\gaigm.exe" gaigm
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
    O4 - Startup: Nikon Monitor.lnk = C:\Program Files\Fichiers communs\Nikon\Monitor\NkMonitor.exe
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
    O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
    O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/pr01/resources/MSNPUpld...
    O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.ca...
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPACl...
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/fl...
    O18 - Protocol: bw+0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw+0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
    O18 - Protocol: bwg0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwg0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: offline-8876480 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
    O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\System32\drivers\CDAC11BA.EXE
    O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
    O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
    O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
    O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
    O23 - Service: Virtual CD v4 Security service (SDK - Version) (VCSSecS) - H+H Software GmbH - C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe

    --
    End of file - 22169 bytes

    ======Scheduled tasks folder======

    C:\WINDOWS\tasks\Rappel d'enregistrement 1.job
    C:\WINDOWS\tasks\Rappel d'enregistrement 2.job
    C:\WINDOWS\tasks\Rappel d'enregistrement 3.job
    C:\WINDOWS\tasks\Symantec NetDetect.job

    ======Registry dump======

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
    AcroIEHlprObj Class - C:\apps\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx [2001-04-16 37808]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
    Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll [2009-01-14 92504]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
    Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2009-01-20 320920]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
    Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
    Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-01-20 34816]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
    Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
    JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-01-20 73728]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
    {21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    "SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2003-04-24 54784]
    "ATIModeChange"=C:\WINDOWS\system32\Ati2mdxx.exe [2001-09-04 28672]
    "ATIPTA"=C:\ATI Technologies\ATI Control Panel\atiptaxx.exe [2003-06-19 335872]
    "TkBellExe"=C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe [2003-09-04 151597]
    "VCSPlayer"=C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe [2002-06-07 299008]
    "TimeSink Ad Client"=C:\Program Files\TimeSink\AdGateway\TSAdBot.exe []
    "Omnipage"=C:\Program Files\ScanSoft\OmniPageSE\opware32.exe [2002-06-03 49152]
    "HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2007-05-08 54840]
    "QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2007-04-27 282624]
    "SystrayORAHSS"=C:\Program Files\Orange\Systray\SystrayApp.exe [2007-09-25 94208]
    "ORAHSSSessionManager"=C:\Program Files\Orange\SessionManager\SessionManager.exe [2007-09-25 102400]
    "LogitechCommunicationsManager"=C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe [2007-10-25 563984]
    "LogitechQuickCamRibbon"=C:\Program Files\Logitech\QuickCam\Quickcam.exe [2007-10-25 2178832]
    "SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-01-20 136600]
    "avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    "MsnMsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-02-06 3885408]
    "ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
    "LDM"=C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [2008-07-07 36864]
    "AdVantage"=C:\Documents and Settings\sophie\Application Data\advantage\AdVantage.exe [2009-02-06 204208]
    "gaigm"=c:\documents and settings\sophie\local settings\application data\gaigm.exe [2009-04-25 327680]

    C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
    HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    Logitech Desktop Messenger.lnk - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe

    C:\Documents and Settings\sophie\Menu Démarrer\Programmes\Démarrage
    Nikon Monitor.lnk - C:\Program Files\Fichiers communs\Nikon\Monitor\NkMonitor.exe

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
    "dontdisplaylastusername"=0
    "legalnoticecaption"=
    "legalnoticetext"=
    "shutdownwithoutlogon"=1
    "undockwithoutlogon"=1

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
    "NoDriveTypeAutoRun"=145

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
    "NoDrives"=
    "NoDriveAutoRun"=
    "HonorAutoRunSetting"=

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
    "C:\Program Files\Orange\Connectivity\ConnectivityManager.exe"="C:\Program Files\Orange\Connectivity\ConnectivityManager.exe:*:enabled:CSS"
    "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
    "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
    "C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger"
    "C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule"
    "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
    "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
    "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
    "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
    "C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger"
    "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
    "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

    ======List of files/folders created in the last 1 months======

    2009-05-07 14:32:19 ----D---- C:\Program Files\trend micro
    2009-05-07 14:32:18 ----D---- C:\rsit
    2009-05-07 13:19:54 ----D---- C:\Program Files\Big City Adventure - Sydney Australia
    2009-05-06 20:44:00 ----D---- C:\Program Files\Avira
    2009-05-06 20:44:00 ----D---- C:\Documents and Settings\All Users\Application Data\Avira
    2009-05-05 22:05:08 ----D---- C:\Documents and Settings\sophie\Application Data\cerasus.media
    2009-05-05 19:59:07 ----D---- C:\Documents and Settings\sophie\Application Data\FloodLightGames
    2009-05-05 19:59:07 ----D---- C:\Documents and Settings\All Users\Application Data\FloodLightGames
    2009-05-05 15:05:23 ----D---- C:\Documents and Settings\sophie\Application Data\Abra Academy2
    2009-05-03 21:18:32 ----D---- C:\Documents and Settings\All Users\Application Data\Astar Games
    2009-05-03 18:22:38 ----A---- C:\gendel32.exe
    2009-05-03 17:52:43 ----D---- C:\Program Files\Conduit
    2009-05-03 17:52:25 ----D---- C:\Documents and Settings\sophie\Application Data\BSplayer Pro
    2009-05-03 17:52:25 ----D---- C:\Documents and Settings\sophie\Application Data\BSplayer
    2009-05-02 15:45:02 ----D---- C:\Documents and Settings\sophie\Application Data\SprillBermudeFr
    2009-05-01 22:13:45 ----D---- C:\Documents and Settings\sophie\Application Data\SecretIslandFraBF
    2009-05-01 20:56:34 ----D---- C:\Documents and Settings\sophie\Application Data\Dragon Altar Games
    2009-05-01 15:26:12 ----D---- C:\Documents and Settings\sophie\Application Data\blg
    2009-05-01 15:26:12 ----D---- C:\Documents and Settings\All Users\Application Data\blg
    2009-04-30 22:45:53 ----D---- C:\Documents and Settings\All Users\Application Data\Slapdash Games
    2009-04-29 22:35:01 ----HDC---- C:\WINDOWS\$NtUninstallKB961503$
    2009-04-29 13:58:13 ----D---- C:\Documents and Settings\sophie\Application Data\Gogii Games
    2009-04-29 13:58:13 ----D---- C:\Documents and Settings\All Users\Application Data\Gogii Games
    2009-04-28 18:21:43 ----D---- C:\Documents and Settings\All Users\Application Data\SpecialBit
    2009-04-28 14:50:49 ----D---- C:\Documents and Settings\sophie\Application Data\JoyBits
    2009-04-28 13:31:57 ----D---- C:\Documents and Settings\sophie\Application Data\BigFishv1002fr
    2009-04-28 09:22:52 ----D---- C:\Documents and Settings\All Users\Application Data\Mushroom Age
    2009-04-27 20:56:17 ----D---- C:\Documents and Settings\All Users\Application Data\AdventureChronicles1
    2009-04-27 15:44:18 ----D---- C:\Documents and Settings\sophie\Application Data\Artogon
    2009-04-27 09:38:26 ----D---- C:\Documents and Settings\All Users\Application Data\BigFishv1005fr
    2009-04-26 21:14:44 ----D---- C:\Documents and Settings\All Users\Application Data\DivoGames
    2009-04-24 19:58:14 ----D---- C:\Documents and Settings\sophie\Application Data\Anabel
    2009-04-23 13:28:38 ----D---- C:\Documents and Settings\sophie\Application Data\PoBros
    2009-04-23 13:28:38 ----D---- C:\Documents and Settings\All Users\Application Data\PoBros
    2009-04-21 18:49:10 ----D---- C:\WINDOWS\Minidump
    2009-04-21 14:53:21 ----D---- C:\Documents and Settings\sophie\Application Data\Big Fish Games
    2009-04-21 09:31:44 ----D---- C:\Documents and Settings\sophie\Application Data\RobinsonCrusoeBFGFR
    2009-04-21 09:29:48 ----D---- C:\Program Files\Les Aventures de Robinson Crusoe
    2009-04-20 21:50:31 ----D---- C:\Documents and Settings\All Users\Application Data\Alawar Stargaze
    2009-04-20 20:42:57 ----D---- C:\Documents and Settings\sophie\Application Data\Flood Light Games
    2009-04-20 20:42:57 ----D---- C:\Documents and Settings\All Users\Application Data\Flood Light Games
    2009-04-20 14:13:11 ----D---- C:\Documents and Settings\All Users\Application Data\Redrum
    2009-04-20 14:07:14 ----D---- C:\Program Files\bfgclient
    2009-04-20 14:05:52 ----D---- C:\Documents and Settings\All Users\Application Data\BigFishGamesCache
    2009-04-17 16:11:11 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
    2009-04-17 16:11:03 ----HDC---- C:\WINDOWS\$NtUninstallKB961373$
    2009-04-17 16:07:27 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
    2009-04-17 16:07:11 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
    2009-04-17 16:06:42 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
    2009-04-17 16:06:26 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
    2009-04-14 22:24:07 ----D---- C:\Documents and Settings\sophie\Application Data\Zylom DressUpRush
    2009-04-14 19:20:50 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
    2009-04-14 19:20:37 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$
    2009-04-14 11:43:15 ----HDC---- C:\WINDOWS\$NtUninstallKB938464-v2$
    2009-04-14 08:51:55 ----D---- C:\WINDOWS\Prefetch
    2009-04-14 08:46:47 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
    2009-04-14 08:46:38 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
    2009-04-14 08:46:31 ----HDC---- C:\WINDOWS\$NtUninstallKB958690$
    2009-04-14 08:46:15 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$
    2009-04-14 08:46:08 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
    2009-04-14 08:46:00 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
    2009-04-14 08:45:53 ----HDC---- C:\WINDOWS\$NtUninstallKB957095$
    2009-04-14 08:45:39 ----HDC---- C:\WINDOWS\$NtUninstallKB956841$
    2009-04-14 08:45:31 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
    2009-04-14 08:45:24 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
    2009-04-14 08:45:08 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
    2009-04-14 08:45:01 ----HDC---- C:\WINDOWS\$NtUninstallKB954600$
    2009-04-14 08:44:54 ----HDC---- C:\WINDOWS\$NtUninstallKB954211$
    2009-04-14 08:44:38 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
    2009-04-14 08:44:26 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
    2009-04-14 08:44:18 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
    2009-04-14 08:44:10 ----HDC---- C:\WINDOWS\$NtUninstallKB951698$
    2009-04-14 08:44:01 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
    2009-04-14 08:43:48 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
    2009-04-14 08:43:41 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
    2009-04-14 08:43:35 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
    2009-04-14 08:43:20 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
    2009-04-14 08:43:11 ----HDC---- C:\WINDOWS\$NtUninstallKB938464$
    2009-04-14 08:40:00 ----D---- C:\WINDOWS\system32\fr
    2009-04-14 08:40:00 ----D---- C:\WINDOWS\system32\bits
    2009-04-14 08:26:15 ----AT---- C:\WINDOWS\006533_.tmp
    2009-04-10 18:26:42 ----D---- C:\Program Files\The Adventure Company
    2009-04-09 16:53:01 ----D---- C:\Documents and Settings\sophie\Application Data\Pharaohs Secret

    ======List of files/folders modified in the last 1 months======

    2009-05-07 15:29:10 ----D---- C:\Program Files\Mozilla Firefox
    2009-05-07 14:32:19 ----RD---- C:\Program Files
    2009-05-07 14:21:56 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP
    2009-05-07 06:41:10 ----D---- C:\WINDOWS\Temp
    2009-05-07 06:41:03 ----D---- C:\WINDOWS\system32\CatRoot2
    2009-05-07 06:40:57 ----D---- C:\WINDOWS
    2009-05-07 06:40:14 ----D---- C:\Documents and Settings\sophie\Application Data\advantage
    2009-05-07 06:39:51 ----HD---- C:\Config.Msi
    2009-05-06 22:52:37 ----A---- C:\WINDOWS\SchedLgU.Txt
    2009-05-06 20:44:26 ----D---- C:\WINDOWS\system32\drivers
    2009-05-06 20:44:24 ----HD---- C:\WINDOWS\inf
    2009-05-06 20:35:55 ----SHD---- C:\WINDOWS\Installer
    2009-05-06 20:35:54 ----D---- C:\WINDOWS\WinSxS
    2009-05-06 17:47:19 ----D---- C:\WINDOWS\system32
    2009-05-06 17:47:19 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
    2009-05-03 18:49:40 ----HD---- C:\Program Files\InstallShield Installation Information
    2009-05-03 18:47:45 ----D---- C:\Program Files\Virtual Ball Fighters
    2009-05-03 18:39:08 ----D---- C:\Program Files\Sony
    2009-05-03 18:35:27 ----D---- C:\Program Files\Microsoft
    2009-05-03 18:35:01 ----D---- C:\Program Files\Kings Mahjongg
    2009-05-03 18:34:37 ----D---- C:\Program Files\GJGames
    2009-05-03 18:34:32 ----D---- C:\Program Files\DynamicPlaygrounds
    2009-05-03 18:27:51 ----D---- C:\Program Files\Fichiers communs
    2009-05-03 18:25:38 ----D---- C:\Program Files\WordWars
    2009-05-03 18:24:33 ----D---- C:\Program Files\DivX
    2009-05-03 18:23:49 ----D---- C:\Program Files\Fichiers communs\ScanSoft Shared
    2009-05-03 18:23:13 ----D---- C:\Program Files\ArcSoft
    2009-05-03 18:22:38 ----A---- C:\WINDOWS\WININIT.INI
    2009-05-03 17:34:52 ----RSD---- C:\WINDOWS\assembly
    2009-05-03 17:34:31 ----RSD---- C:\WINDOWS\Fonts
    2009-05-03 17:33:33 ----D---- C:\Program Files\Fichiers communs\HP
    2009-05-03 17:30:25 ----SD---- C:\WINDOWS\Downloaded Program Files
    2009-05-03 14:34:31 ----D---- C:\Program Files\eMule
    2009-05-03 13:55:37 ----D---- C:\Program Files\Zylom Games
    2009-05-03 13:53:57 ----D---- C:\Program Files\EACOM
    2009-05-03 13:52:41 ----D---- C:\Program Files\BoontyGames
    2009-05-03 13:52:20 ----D---- C:\Program Files\Absolutist.com
    2009-05-03 13:50:08 ----D---- C:\Program Files\Vampire Software
    2009-05-02 23:04:04 ----D---- C:\Documents and Settings\All Users\Application Data\PlayPond
    2009-05-01 18:20:00 ----D---- C:\Documents and Settings\sophie\Application Data\Identities
    2009-04-29 22:35:04 ----RSHD---- C:\WINDOWS\system32\dllcache
    2009-04-29 06:53:55 ----HD---- C:\WINDOWS\$hf_mig$
    2009-04-23 15:38:44 ----D---- C:\Program Files\PopCap Games
    2009-04-23 14:46:55 ----D---- C:\Program Files\Ian Software
    2009-04-17 16:13:37 ----D---- C:\WINDOWS\system32\wbem
    2009-04-17 16:13:37 ----D---- C:\WINDOWS\AppPatch
    2009-04-17 16:11:19 ----A---- C:\WINDOWS\imsins.BAK
    2009-04-17 16:10:48 ----D---- C:\WINDOWS\system32\fr-fr
    2009-04-17 16:10:48 ----D---- C:\Program Files\Internet Explorer
    2009-04-16 13:12:28 ----D---- C:\Documents and Settings\sophie\Application Data\SpinTop Games
    2009-04-16 13:12:25 ----D---- C:\Documents and Settings\sophie\Application Data\Zylom
    2009-04-14 19:20:04 ----D---- C:\WINDOWS\system32\CatRoot
    2009-04-14 08:54:35 ----A---- C:\WINDOWS\OEWABLog.txt
    2009-04-14 08:53:11 ----A---- C:\WINDOWS\setuplog.txt
    2009-04-14 08:51:20 ----D---- C:\Program Files\Windows Media Player
    2009-04-14 08:51:19 ----D---- C:\WINDOWS\system32\Setup
    2009-04-14 08:51:19 ----D---- C:\Program Files\Outlook Express
    2009-04-14 08:50:26 ----D---- C:\WINDOWS\security
    2009-04-14 08:43:25 ----D---- C:\Program Files\Messenger
    2009-04-14 08:40:26 ----D---- C:\WINDOWS\Help
    2009-04-14 08:40:15 ----D---- C:\WINDOWS\network diagnostic
    2009-04-14 08:40:14 ----D---- C:\WINDOWS\ime
    2009-04-14 08:40:02 ----D---- C:\WINDOWS\system32\usmt
    2009-04-14 08:40:00 ----D---- C:\WINDOWS\peernet
    2009-04-14 08:39:59 ----D---- C:\Program Files\Movie Maker
    2009-04-14 08:36:53 ----D---- C:\WINDOWS\system32\Restore
    2009-04-14 08:36:53 ----D---- C:\WINDOWS\system32\npp
    2009-04-14 08:36:51 ----D---- C:\WINDOWS\msagent
    2009-04-14 08:36:50 ----D---- C:\WINDOWS\srchasst
    2009-04-14 08:36:49 ----D---- C:\Program Files\NetMeeting
    2009-04-14 08:36:48 ----D---- C:\WINDOWS\system32\Com
    2009-04-14 08:36:44 ----D---- C:\Program Files\Windows NT
    2009-04-14 08:36:40 ----D---- C:\Program Files\Fichiers communs\System
    2009-04-14 08:36:15 ----D---- C:\WINDOWS\system32\oobe
    2009-04-14 08:36:13 ----D---- C:\WINDOWS\system
    2009-04-14 08:32:32 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
    2009-04-14 08:27:40 ----D---- C:\WINDOWS\EHome
    2009-04-10 20:40:03 ----D---- C:\Documents and Settings\sophie\Application Data\Magic Academy
    2009-04-10 20:03:01 ----D---- C:\Program Files\Micro Application

    ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R1 AmdK7;Pilote de processeur AMD K7; C:\WINDOWS\System32\DRIVERS\amdk7.sys [2008-04-14 41856]
    R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys []
    R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
    R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-02-13 28376]
    R1 vcsmpdrv;vcsmpdrv; C:\WINDOWS\System32\DRIVERS\vcsmpdrv.sys [2002-06-07 49232]
    R2 CdaC15BA;CdaC15BA; \??\C:\WINDOWS\System32\drivers\CdaC15BA.SYS []
    R2 fssfltr;FssFltr; C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys [2009-02-06 55152]
    R2 SBKUPNT;SBKUPNT; \??\C:\WINDOWS\System32\Drivers\SBKUPNT.SYS []
    R2 usbhub;DSC Composite USB Device; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2008-04-13 59520]
    R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2003-04-24 730092]
    R3 ati2mtag;ati2mtag; C:\WINDOWS\System32\DRIVERS\ati2mtag.sys [2003-06-19 576512]
    R3 FETNDISB;VIA Rhine Family Fast Ethernet Adapter Driver Service; C:\WINDOWS\System32\DRIVERS\fetnd5b.sys [2003-04-24 41984]
    R3 LVcKap;Logitech AEC Driver; C:\WINDOWS\system32\DRIVERS\LVcKap.sys [2007-10-19 2109976]
    R3 LVPr2Mon;Logitech LVPr2Mon Driver; C:\WINDOWS\system32\DRIVERS\LVPr2Mon.sys [2007-10-11 25624]
    R3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\drivers\LVUSBSta.sys [2007-10-12 41752]
    R3 Mtlmnt5;Mtlmnt5; C:\WINDOWS\System32\DRIVERS\Mtlmnt5.sys [2003-01-21 210024]
    R3 pepifilter;Volume Adapter; C:\WINDOWS\system32\DRIVERS\lv302af.sys [2007-10-12 13848]
    R3 PID_PEPI;Logitech QuickCam IM(PID_PEPI); C:\WINDOWS\system32\DRIVERS\LV302V32.SYS [2007-10-12 1279000]
    R3 Slntamr;SmartLink AMR_PCI Driver; C:\WINDOWS\System32\DRIVERS\slntamr.sys [2003-01-17 507008]
    R3 SlWdmSup;SlWdmSup; C:\WINDOWS\System32\DRIVERS\SlWdmSup.sys [2003-01-17 39348]
    R3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
    R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [2008-04-13 32128]
    R3 usbehci;Pilote miniport de contrôleur hôte amélioré USB 2.0 Microsoft; C:\WINDOWS\System32\DRIVERS\usbehci.sys [2008-04-13 30208]
    R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
    R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2008-04-13 20608]
    S1 kbdhid;Pilote HID de clavier; C:\WINDOWS\System32\DRIVERS\kbdhid.sys [2008-04-14 14720]
    S2 Ca533av;Polaroid Digital Cam Video; C:\WINDOWS\System32\Drivers\Ca533av.sys []
    S3 CCDECODE;Closed Caption Decoder; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
    S3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\System32\DRIVERS\hidusb.sys [2008-04-13 10368]
    S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\System32\DRIVERS\HPZid412.sys [2005-03-08 51120]
    S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\System32\DRIVERS\HPZipr12.sys [2005-03-08 16496]
    S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\System32\DRIVERS\HPZius12.sys [2005-03-08 21744]
    S3 LVMVDrv;Logitech Machine Vision Engine Loader; C:\WINDOWS\system32\DRIVERS\LVMVDrv.sys [2007-10-11 2142488]
    S3 ms_mpu401;Pilote UART MIDI MPU-401 Microsoft; C:\WINDOWS\system32\drivers\msmpu401.sys [2001-08-17 2944]
    S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
    S3 Mtlstrm;Mtlstrm; C:\WINDOWS\System32\DRIVERS\Mtlstrm.sys [2003-01-21 1290312]
    S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\System32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
    S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [2008-04-13 10880]
    S3 NtMtlFax;NtMtlFax; C:\WINDOWS\System32\DRIVERS\NtMtlFax.sys [2003-01-17 162136]
    S3 nv;nv; C:\WINDOWS\System32\DRIVERS\nv4_mini.sys [2004-08-03 1897408]
    S3 PCAMPR5;PCAMPR5 NDIS Protocol Driver; \??\C:\WINDOWS\System32\PCAMPR5.SYS []
    S3 PCANDIS5;PCANDIS5 NDIS Protocol Driver; \??\C:\WINDOWS\System32\PCANDIS5.SYS []
    S3 RecAgent;recagent; \??\C:\WINDOWS\System32\DRIVERS\RecAgent.sys []
    S3 SG762_XP;SAGEM 802.11g XG762 1211B Driver; C:\WINDOWS\System32\DRIVERS\WlanBZXP.sys [2007-01-10 450560]
    S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\System32\DRIVERS\SLIP.sys [2008-04-13 11136]
    S3 SlNtHal;SlNtHal; C:\WINDOWS\System32\DRIVERS\Slnthal.sys [2003-01-21 84784]
    S3 streamip;BDA IPSink; C:\WINDOWS\System32\DRIVERS\StreamIP.sys [2008-04-13 15232]
    S3 usbbus;LGE Mobile Composite USB Device; C:\WINDOWS\system32\DRIVERS\lgusbbus.sys [2008-09-04 13056]
    S3 USBCamera;Icatch(IV) Still Camera Device; C:\WINDOWS\System32\Drivers\Bulk533.sys []
    S3 UsbDiag;LGE Mobile USB Serial Port; C:\WINDOWS\system32\DRIVERS\lgusbdiag.sys [2008-09-04 19968]
    S3 USBModem;LGE Mobile USB Modem; C:\WINDOWS\system32\DRIVERS\lgusbmodem.sys [2008-09-04 24832]
    S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbprint.sys [2008-04-13 25856]
    S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\System32\DRIVERS\usbscan.sys [2008-04-13 15104]
    S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\System32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
    S3 ZDCndis5;ZDCndis5 Protocol Driver; \??\C:\WINDOWS\System32\ZDCndis5.SYS []
    S3 ZDPSp50;ZDPSp50 NDIS Protocol Driver; C:\WINDOWS\System32\Drivers\ZDPSp50.sys []

    ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R2 AntiVirSchedulerService;Avira AntiVir Planificateur; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-04-01 108289]
    R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-03-02 185089]
    R2 C-DillaCdaC11BA;C-DillaCdaC11BA; C:\WINDOWS\System32\drivers\CDAC11BA.EXE [2004-04-04 54784]
    R2 FTRTSVC;France Telecom Routing Table Service; C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe [2007-09-25 65536]
    R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-01-20 152984]
    R2 LVCOMSer;LVCOMSer; C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe [2007-10-19 186904]
    R2 LVPrcSrv;Process Monitor; C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe [2007-10-19 141848]
    R2 MDM;Machine Debug Manager; C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe [2003-06-20 322120]
    R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-01-14 226656]
    R2 VCSSecS;Virtual CD v4 Security service (SDK - Version); C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe [2002-05-16 139264]
    S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2003-06-19 114688]
    S2 LVSrvLauncher;LVSrvLauncher; C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe [2007-10-19 141848]
    S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\HPZipm12.exe [2007-08-09 73728]
    S2 SLService;SmartLinkService; C:\WINDOWS\system32\slserv.exe [2003-01-17 45056]
    S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896]
    S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240]
    S3 fsssvc;Windows Live Contrôle parental; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2009-02-06 533360]
    S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]

    -----------------EOF-----------------

    Logfile of random's system information tool 1.06 (written by random/random)
    Run by sophie at 2009-05-07 15:30:02
    Microsoft Windows XP Édition familiale Service Pack 3
    System drive C: has 20 GB (38%) free of 53 GB
    Total RAM: 1023 MB (49% free)

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 15:30:03, on 07/05/2009
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16827)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
    C:\Program Files\Avira\AntiVir Desktop\sched.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\SOUNDMAN.EXE
    C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
    C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe
    C:\Program Files\ScanSoft\OmniPageSE\opware32.exe
    C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\Program Files\Orange\Systray\SystrayApp.exe
    C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
    C:\Program Files\Logitech\QuickCam\Quickcam.exe
    C:\Program Files\Java\jre6\bin\jusched.exe
    C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
    C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    C:\Documents and Settings\sophie\Application Data\advantage\AdVantage.exe
    C:\documents and settings\sophie\local settings\application data\gaigm.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    C:\Program Files\Fichiers communs\Nikon\Monitor\NkMonitor.exe
    C:\Program Files\Avira\AntiVir Desktop\avguard.exe
    C:\WINDOWS\System32\drivers\CDAC11BA.EXE
    C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
    C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
    C:\WINDOWS\System32\wbem\wmiapsrv.exe
    C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
    C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
    C:\Program Files\Windows Live\Contacts\wlcomm.exe
    C:\Program Files\bfgclient\bfggameservices.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Documents and Settings\sophie\Bureau\RSIT.exe
    C:\Program Files\trend micro\sophie.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.searchgateway.net/search/%s
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Packard Bell
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\Orange\SearchURLHook\SearchPageURL.dll
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\apps\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
    O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
    O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
    O4 - HKLM\..\Run: [ATIPTA] C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [VCSPlayer] "C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe"
    O4 - HKLM\..\Run: [TimeSink Ad Client] "C:\Program Files\TimeSink\AdGateway\TSAdBot.exe"
    O4 - HKLM\..\Run: [Omnipage] C:\Program Files\ScanSoft\OmniPageSE\opware32.exe
    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [SystrayORAHSS] "C:\Program Files\Orange\Systray\SystrayApp.exe"
    O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\Orange\SessionManager\SessionManager.exe
    O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
    O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    O4 - HKCU\..\Run: [AdVantage] C:\Documents and Settings\sophie\Application Data\advantage\AdVantage.exe
    O4 - HKCU\..\Run: [gaigm] "c:\documents and settings\sophie\local settings\application data\gaigm.exe" gaigm
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
    O4 - Startup: Nikon Monitor.lnk = C:\Program Files\Fichiers communs\Nikon\Monitor\NkMonitor.exe
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
    O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
    O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/pr01/resources/MSNPUpld...
    O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.ca...
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPACl...
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/fl...
    O18 - Protocol: bw+0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw+0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
    O18 - Protocol: bwg0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwg0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: offline-8876480 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
    O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\System32\drivers\CDAC11BA.EXE
    O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
    O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
    O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
    O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
    O23 - Service: Virtual CD v4 Security service (SDK - Version) (VCSSecS) - H+H Software GmbH - C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe

    --
    End of file - 22169 bytes

    ======Scheduled tasks folder======

    C:\WINDOWS\tasks\Rappel d'enregistrement 1.job
    C:\WINDOWS\tasks\Rappel d'enregistrement 2.job
    C:\WINDOWS\tasks\Rappel d'enregistrement 3.job
    C:\WINDOWS\tasks\Symantec NetDetect.job

    ======Registry dump======

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
    AcroIEHlprObj Class - C:\apps\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx [2001-04-16 37808]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
    Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll [2009-01-14 92504]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
    Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2009-01-20 320920]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
    Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
    Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-01-20 34816]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
    Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
    JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-01-20 73728]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
    {21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    "SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2003-04-24 54784]
    "ATIModeChange"=C:\WINDOWS\system32\Ati2mdxx.exe [2001-09-04 28672]
    "ATIPTA"=C:\ATI Technologies\ATI Control Panel\atiptaxx.exe [2003-06-19 335872]
    "TkBellExe"=C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe [2003-09-04 151597]
    "VCSPlayer"=C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe [2002-06-07 299008]
    "TimeSink Ad Client"=C:\Program Files\TimeSink\AdGateway\TSAdBot.exe []
    "Omnipage"=C:\Program Files\ScanSoft\OmniPageSE\opware32.exe [2002-06-03 49152]
    "HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2007-05-08 54840]
    "QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2007-04-27 282624]
    "SystrayORAHSS"=C:\Program Files\Orange\Systray\SystrayApp.exe [2007-09-25 94208]
    "ORAHSSSessionManager"=C:\Program Files\Orange\SessionManager\SessionManager.exe [2007-09-25 102400]
    "LogitechCommunicationsManager"=C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe [2007-10-25 563984]
    "LogitechQuickCamRibbon"=C:\Program Files\Logitech\QuickCam\Quickcam.exe [2007-10-25 2178832]
    "SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-01-20 136600]
    "avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    "MsnMsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-02-06 3885408]
    "ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
    "LDM"=C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [2008-07-07 36864]
    "AdVantage"=C:\Documents and Settings\sophie\Application Data\advantage\AdVantage.exe [2009-02-06 204208]
    "gaigm"=c:\documents and settings\sophie\local settings\application data\gaigm.exe [2009-04-25 327680]

    C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
    HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    Logitech Desktop Messenger.lnk - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe

    C:\Documents and Settings\sophie\Menu Démarrer\Programmes\Démarrage
    Nikon Monitor.lnk - C:\Program Files\Fichiers communs\Nikon\Monitor\NkMonitor.exe

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
    "dontdisplaylastusername"=0
    "legalnoticecaption"=
    "legalnoticetext"=
    "shutdownwithoutlogon"=1
    "undockwithoutlogon"=1

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
    "NoDriveTypeAutoRun"=145

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
    "NoDrives"=
    "NoDriveAutoRun"=
    "HonorAutoRunSetting"=

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
    "C:\Program Files\Orange\Connectivity\ConnectivityManager.exe"="C:\Program Files\Orange\Connectivity\ConnectivityManager.exe:*:enabled:CSS"
    "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
    "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
    "C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger"
    "C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule"
    "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
    "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
    "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
    "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
    "C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger"
    "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
    "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

    ======List of files/folders created in the last 1 months======

    2009-05-07 14:32:19 ----D---- C:\Program Files\trend micro
    2009-05-07 14:32:18 ----D---- C:\rsit
    2009-05-07 13:19:54 ----D---- C:\Program Files\Big City Adventure - Sydney Australia
    2009-05-06 20:44:00 ----D---- C:\Program Files\Avira
    2009-05-06 20:44:00 ----D---- C:\Documents and Settings\All Users\Application Data\Avira
    2009-05-05 22:05:08 ----D---- C:\Documents and Settings\sophie\Application Data\cerasus.media
    2009-05-05 19:59:07 ----D---- C:\Documents and Settings\sophie\Application Data\FloodLightGames
    2009-05-05 19:59:07 ----D---- C:\Documents and Settings\All Users\Application Data\FloodLightGames
    2009-05-05 15:05:23 ----D---- C:\Documents and Settings\sophie\Application Data\Abra Academy2
    2009-05-03 21:18:32 ----D---- C:\Documents and Settings\All Users\Application Data\Astar Games
    2009-05-03 18:22:38 ----A---- C:\gendel32.exe
    2009-05-03 17:52:43 ----D---- C:\Program Files\Conduit
    2009-05-03 17:52:25 ----D---- C:\Documents and Settings\sophie\Application Data\BSplayer Pro
    2009-05-03 17:52:25 ----D---- C:\Documents and Settings\sophie\Application Data\BSplayer
    2009-05-02 15:45:02 ----D---- C:\Documents and Settings\sophie\Application Data\SprillBermudeFr
    2009-05-01 22:13:45 ----D---- C:\Documents and Settings\sophie\Application Data\SecretIslandFraBF
    2009-05-01 20:56:34 ----D---- C:\Documents and Settings\sophie\Application Data\Dragon Altar Games
    2009-05-01 15:26:12 ----D---- C:\Documents and Settings\sophie\Application Data\blg
    2009-05-01 15:26:12 ----D---- C:\Documents and Settings\All Users\Application Data\blg
    2009-04-30 22:45:53 ----D---- C:\Documents and Settings\All Users\Application Data\Slapdash Games
    2009-04-29 22:35:01 ----HDC---- C:\WINDOWS\$NtUninstallKB961503$
    2009-04-29 13:58:13 ----D---- C:\Documents and Settings\sophie\Application Data\Gogii Games
    2009-04-29 13:58:13 ----D---- C:\Documents and Settings\All Users\Application Data\Gogii Games
    2009-04-28 18:21:43 ----D---- C:\Documents and Settings\All Users\Application Data\SpecialBit
    2009-04-28 14:50:49 ----D---- C:\Documents and Settings\sophie\Application Data\JoyBits
    2009-04-28 13:31:57 ----D---- C:\Documents and Settings\sophie\Application Data\BigFishv1002fr
    2009-04-28 09:22:52 ----D---- C:\Documents and Settings\All Users\Application Data\Mushroom Age
    2009-04-27 20:56:17 ----D---- C:\Documents and Settings\All Users\Application Data\AdventureChronicles1
    2009-04-27 15:44:18 ----D---- C:\Documents and Settings\sophie\Application Data\Artogon
    2009-04-27 09:38:26 ----D---- C:\Documents and Settings\All Users\Application Data\BigFishv1005fr
    2009-04-26 21:14:44 ----D---- C:\Documents and Settings\All Users\Application Data\DivoGames
    2009-04-24 19:58:14 ----D---- C:\Documents and Settings\sophie\Application Data\Anabel
    2009-04-23 13:28:38 ----D---- C:\Documents and Settings\sophie\Application Data\PoBros
    2009-04-23 13:28:38 ----D---- C:\Documents and Settings\All Users\Application Data\PoBros
    2009-04-21 18:49:10 ----D---- C:\WINDOWS\Minidump
    2009-04-21 14:53:21 ----D---- C:\Documents and Settings\sophie\Application Data\Big Fish Games
    2009-04-21 09:31:44 ----D---- C:\Documents and Settings\sophie\Application Data\RobinsonCrusoeBFGFR
    2009-04-21 09:29:48 ----D---- C:\Program Files\Les Aventures de Robinson Crusoe
    2009-04-20 21:50:31 ----D---- C:\Documents and Settings\All Users\Application Data\Alawar Stargaze
    2009-04-20 20:42:57 ----D---- C:\Documents and Settings\sophie\Application Data\Flood Light Games
    2009-04-20 20:42:57 ----D---- C:\Documents and Settings\All Users\Application Data\Flood Light Games
    2009-04-20 14:13:11 ----D---- C:\Documents and Settings\All Users\Application Data\Redrum
    2009-04-20 14:07:14 ----D---- C:\Program Files\bfgclient
    2009-04-20 14:05:52 ----D---- C:\Documents and Settings\All Users\Application Data\BigFishGamesCache
    2009-04-17 16:11:11 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
    2009-04-17 16:11:03 ----HDC---- C:\WINDOWS\$NtUninstallKB961373$
    2009-04-17 16:07:27 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
    2009-04-17 16:07:11 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
    2009-04-17 16:06:42 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
    2009-04-17 16:06:26 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
    2009-04-14 22:24:07 ----D---- C:\Documents and Settings\sophie\Application Data\Zylom DressUpRush
    2009-04-14 19:20:50 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
    2009-04-14 19:20:37 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$
    2009-04-14 11:43:15 ----HDC---- C:\WINDOWS\$NtUninstallKB938464-v2$
    2009-04-14 08:51:55 ----D---- C:\WINDOWS\Prefetch
    2009-04-14 08:46:47 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
    2009-04-14 08:46:38 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
    2009-04-14 08:46:31 ----HDC---- C:\WINDOWS\$NtUninstallKB958690$
    2009-04-14 08:46:15 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$
    2009-04-14 08:46:08 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
    2009-04-14 08:46:00 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
    2009-04-14 08:45:53 ----HDC---- C:\WINDOWS\$NtUninstallKB957095$
    2009-04-14 08:45:39 ----HDC---- C:\WINDOWS\$NtUninstallKB956841$
    2009-04-14 08:45:31 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
    2009-04-14 08:45:24 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
    2009-04-14 08:45:08 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
    2009-04-14 08:45:01 ----HDC---- C:\WINDOWS\$NtUninstallKB954600$
    2009-04-14 08:44:54 ----HDC---- C:\WINDOWS\$NtUninstallKB954211$
    2009-04-14 08:44:38 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
    2009-04-14 08:44:26 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
    2009-04-14 08:44:18 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
    2009-04-14 08:44:10 ----HDC---- C:\WINDOWS\$NtUninstallKB951698$
    2009-04-14 08:44:01 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
    2009-04-14 08:43:48 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
    2009-04-14 08:43:41 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
    2009-04-14 08:43:35 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
    2009-04-14 08:43:20 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
    2009-04-14 08:43:11 ----HDC---- C:\WINDOWS\$NtUninstallKB938464$
    2009-04-14 08:40:00 ----D---- C:\WINDOWS\system32\fr
    2009-04-14 08:40:00 ----D---- C:\WINDOWS\system32\bits
    2009-04-14 08:26:15 ----AT---- C:\WINDOWS\006533_.tmp
    2009-04-10 18:26:42 ----D---- C:\Program Files\The Adventure Company
    2009-04-09 16:53:01 ----D---- C:\Documents and Settings\sophie\Application Data\Pharaohs Secret

    ======List of files/folders modified in the last 1 months======

    2009-05-07 15:29:10 ----D---- C:\Program Files\Mozilla Firefox
    2009-05-07 14:32:19 ----RD---- C:\Program Files
    2009-05-07 14:21:56 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP
    2009-05-07 06:41:10 ----D---- C:\WINDOWS\Temp
    2009-05-07 06:41:03 ----D---- C:\WINDOWS\system32\CatRoot2
    2009-05-07 06:40:57 ----D---- C:\WINDOWS
    2009-05-07 06:40:14 ----D---- C:\Documents and Settings\sophie\Application Data\advantage
    2009-05-07 06:39:51 ----HD---- C:\Config.Msi
    2009-05-06 22:52:37 ----A---- C:\WINDOWS\SchedLgU.Txt
    2009-05-06 20:44:26 ----D---- C:\WINDOWS\system32\drivers
    2009-05-06 20:44:24 ----HD---- C:\WINDOWS\inf
    2009-05-06 20:35:55 ----SHD---- C:\WINDOWS\Installer
    2009-05-06 20:35:54 ----D---- C:\WINDOWS\WinSxS
    2009-05-06 17:47:19 ----D---- C:\WINDOWS\system32
    2009-05-06 17:47:19 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
    2009-05-03 18:49:40 ----HD---- C:\Program Files\InstallShield Installation Information
    2009-05-03 18:47:45 ----D---- C:\Program Files\Virtual Ball Fighters
    2009-05-03 18:39:08 ----D---- C:\Program Files\Sony
    2009-05-03 18:35:27 ----D---- C:\Program Files\Microsoft
    2009-05-03 18:35:01 ----D---- C:\Program Files\Kings Mahjongg
    2009-05-03 18:34:37 ----D---- C:\Program Files\GJGames
    2009-05-03 18:34:32 ----D---- C:\Program Files\DynamicPlaygrounds
    2009-05-03 18:27:51 ----D---- C:\Program Files\Fichiers communs
    2009-05-03 18:25:38 ----D---- C:\Program Files\WordWars
    2009-05-03 18:24:33 ----D---- C:\Program Files\DivX
    2009-05-03 18:23:49 ----D---- C:\Program Files\Fichiers communs\ScanSoft Shared
    2009-05-03 18:23:13 ----D---- C:\Program Files\ArcSoft
    2009-05-03 18:22:38 ----A---- C:\WINDOWS\WININIT.INI
    2009-05-03 17:34:52 ----RSD---- C:\WINDOWS\assembly
    2009-05-03 17:34:31 ----RSD---- C:\WINDOWS\Fonts
    2009-05-03 17:33:33 ----D---- C:\Program Files\Fichiers communs\HP
    2009-05-03 17:30:25 ----SD---- C:\WINDOWS\Downloaded Program Files
    2009-05-03 14:34:31 ----D---- C:\Program Files\eMule
    2009-05-03 13:55:37 ----D---- C:\Program Files\Zylom Games
    2009-05-03 13:53:57 ----D---- C:\Program Files\EACOM
    2009-05-03 13:52:41 ----D---- C:\Program Files\BoontyGames
    2009-05-03 13:52:20 ----D---- C:\Program Files\Absolutist.com
    2009-05-03 13:50:08 ----D---- C:\Program Files\Vampire Software
    2009-05-02 23:04:04 ----D---- C:\Documents and Settings\All Users\Application Data\PlayPond
    2009-05-01 18:20:00 ----D---- C:\Documents and Settings\sophie\Application Data\Identities
    2009-04-29 22:35:04 ----RSHD---- C:\WINDOWS\system32\dllcache
    2009-04-29 06:53:55 ----HD---- C:\WINDOWS\$hf_mig$
    2009-04-23 15:38:44 ----D---- C:\Program Files\PopCap Games
    2009-04-23 14:46:55 ----D---- C:\Program Files\Ian Software
    2009-04-17 16:13:37 ----D---- C:\WINDOWS\system32\wbem
    2009-04-17 16:13:37 ----D---- C:\WINDOWS\AppPatch
    2009-04-17 16:11:19 ----A---- C:\WINDOWS\imsins.BAK
    2009-04-17 16:10:48 ----D---- C:\WINDOWS\system32\fr-fr
    2009-04-17 16:10:48 ----D---- C:\Program Files\Internet Explorer
    2009-04-16 13:12:28 ----D---- C:\Documents and Settings\sophie\Application Data\SpinTop Games
    2009-04-16 13:12:25 ----D---- C:\Documents and Settings\sophie\Application Data\Zylom
    2009-04-14 19:20:04 ----D---- C:\WINDOWS\system32\CatRoot
    2009-04-14 08:54:35 ----A---- C:\WINDOWS\OEWABLog.txt
    2009-04-14 08:53:11 ----A---- C:\WINDOWS\setuplog.txt
    2009-04-14 08:51:20 ----D---- C:\Program Files\Windows Media Player
    2009-04-14 08:51:19 ----D---- C:\WINDOWS\system32\Setup
    2009-04-14 08:51:19 ----D---- C:\Program Files\Outlook Express
    2009-04-14 08:50:26 ----D---- C:\WINDOWS\security
    2009-04-14 08:43:25 ----D---- C:\Program Files\Messenger
    2009-04-14 08:40:26 ----D---- C:\WINDOWS\Help
    2009-04-14 08:40:15 ----D---- C:\WINDOWS\network diagnostic
    2009-04-14 08:40:14 ----D---- C:\WINDOWS\ime
    2009-04-14 08:40:02 ----D---- C:\WINDOWS\system32\usmt
    2009-04-14 08:40:00 ----D---- C:\WINDOWS\peernet
    2009-04-14 08:39:59 ----D---- C:\Program Files\Movie Maker
    2009-04-14 08:36:53 ----D---- C:\WINDOWS\system32\Restore
    2009-04-14 08:36:53 ----D---- C:\WINDOWS\system32\npp
    2009-04-14 08:36:51 ----D---- C:\WINDOWS\msagent
    2009-04-14 08:36:50 ----D---- C:\WINDOWS\srchasst
    2009-04-14 08:36:49 ----D---- C:\Program Files\NetMeeting
    2009-04-14 08:36:48 ----D---- C:\WINDOWS\system32\Com
    2009-04-14 08:36:44 ----D---- C:\Program Files\Windows NT
    2009-04-14 08:36:40 ----D---- C:\Program Files\Fichiers communs\System
    2009-04-14 08:36:15 ----D---- C:\WINDOWS\system32\oobe
    2009-04-14 08:36:13 ----D---- C:\WINDOWS\system
    2009-04-14 08:32:32 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
    2009-04-14 08:27:40 ----D---- C:\WINDOWS\EHome
    2009-04-10 20:40:03 ----D---- C:\Documents and Settings\sophie\Application Data\Magic Academy
    2009-04-10 20:03:01 ----D---- C:\Program Files\Micro Application

    ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R1 AmdK7;Pilote de processeur AMD K7; C:\WINDOWS\System32\DRIVERS\amdk7.sys [2008-04-14 41856]
    R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys []
    R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
    R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-02-13 28376]
    R1 vcsmpdrv;vcsmpdrv; C:\WINDOWS\System32\DRIVERS\vcsmpdrv.sys [2002-06-07 49232]
    R2 CdaC15BA;CdaC15BA; \??\C:\WINDOWS\System32\drivers\CdaC15BA.SYS []
    R2 fssfltr;FssFltr; C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys [2009-02-06 55152]
    R2 SBKUPNT;SBKUPNT; \??\C:\WINDOWS\System32\Drivers\SBKUPNT.SYS []
    R2 usbhub;DSC Composite USB Device; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2008-04-13 59520]
    R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2003-04-24 730092]
    R3 ati2mtag;ati2mtag; C:\WINDOWS\System32\DRIVERS\ati2mtag.sys [2003-06-19 576512]
    R3 FETNDISB;VIA Rhine Family Fast Ethernet Adapter Driver Service; C:\WINDOWS\System32\DRIVERS\fetnd5b.sys [2003-04-24 41984]
    R3 LVcKap;Logitech AEC Driver; C:\WINDOWS\system32\DRIVERS\LVcKap.sys [2007-10-19 2109976]
    R3 LVPr2Mon;Logitech LVPr2Mon Driver; C:\WINDOWS\system32\DRIVERS\LVPr2Mon.sys [2007-10-11 25624]
    R3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\drivers\LVUSBSta.sys [2007-10-12 41752]
    R3 Mtlmnt5;Mtlmnt5; C:\WINDOWS\System32\DRIVERS\Mtlmnt5.sys [2003-01-21 210024]
    R3 pepifilter;Volume Adapter; C:\WINDOWS\system32\DRIVERS\lv302af.sys [2007-10-12 13848]
    R3 PID_PEPI;Logitech QuickCam IM(PID_PEPI); C:\WINDOWS\system32\DRIVERS\LV302V32.SYS [2007-10-12 1279000]
    R3 Slntamr;SmartLink AMR_PCI Driver; C:\WINDOWS\System32\DRIVERS\slntamr.sys [2003-01-17 507008]
    R3 SlWdmSup;SlWdmSup; C:\WINDOWS\System32\DRIVERS\SlWdmSup.sys [2003-01-17 39348]
    R3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
    R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [2008-04-13 32128]
    R3 usbehci;Pilote miniport de contrôleur hôte amélioré USB 2.0 Microsoft; C:\WINDOWS\System32\DRIVERS\usbehci.sys [2008-04-13 30208]
    R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
    R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2008-04-13 20608]
    S1 kbdhid;Pilote HID de clavier; C:\WINDOWS\System32\DRIVERS\kbdhid.sys [2008-04-14 14720]
    S2 Ca533av;Polaroid Digital Cam Video; C:\WINDOWS\System32\Drivers\Ca533av.sys []
    S3 CCDECODE;Closed Caption Decoder; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
    S3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\System32\DRIVERS\hidusb.sys [2008-04-13 10368]
    S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\System32\DRIVERS\HPZid412.sys [2005-03-08 51120]
    S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\System32\DRIVERS\HPZipr12.sys [2005-03-08 16496]
    S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\System32\DRIVERS\HPZius12.sys [2005-03-08 21744]
    S3 LVMVDrv;Logitech Machine Vision Engine Loader; C:\WINDOWS\system32\DRIVERS\LVMVDrv.sys [2007-10-11 2142488]
    S3 ms_mpu401;Pilote UART MIDI MPU-401 Microsoft; C:\WINDOWS\system32\drivers\msmpu401.sys [2001-08-17 2944]
    S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
    S3 Mtlstrm;Mtlstrm; C:\WINDOWS\System32\DRIVERS\Mtlstrm.sys [2003-01-21 1290312]
    S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\System32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
    S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [2008-04-13 10880]
    S3 NtMtlFax;NtMtlFax; C:\WINDOWS\System32\DRIVERS\NtMtlFax.sys [2003-01-17 162136]
    S3 nv;nv; C:\WINDOWS\System32\DRIVERS\nv4_mini.sys [2004-08-03 1897408]
    S3 PCAMPR5;PCAMPR5 NDIS Protocol Driver; \??\C:\WINDOWS\System32\PCAMPR5.SYS []
    S3 PCANDIS5;PCANDIS5 NDIS Protocol Driver; \??\C:\WINDOWS\System32\PCANDIS5.SYS []
    S3 RecAgent;recagent; \??\C:\WINDOWS\System32\DRIVERS\RecAgent.sys []
    S3 SG762_XP;SAGEM 802.11g XG762 1211B Driver; C:\WINDOWS\System32\DRIVERS\WlanBZXP.sys [2007-01-10 450560]
    S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\System32\DRIVERS\SLIP.sys [2008-04-13 11136]
    S3 SlNtHal;SlNtHal; C:\WINDOWS\System32\DRIVERS\Slnthal.sys [2003-01-21 84784]
    S3 streamip;BDA IPSink; C:\WINDOWS\System32\DRIVERS\StreamIP.sys [2008-04-13 15232]
    S3 usbbus;LGE Mobile Composite USB Device; C:\WINDOWS\system32\DRIVERS\lgusbbus.sys [2008-09-04 13056]
    S3 USBCamera;Icatch(IV) Still Camera Device; C:\WINDOWS\System32\Drivers\Bulk533.sys []
    S3 UsbDiag;LGE Mobile USB Serial Port; C:\WINDOWS\system32\DRIVERS\lgusbdiag.sys [2008-09-04 19968]
    S3 USBModem;LGE Mobile USB Modem; C:\WINDOWS\system32\DRIVERS\lgusbmodem.sys [2008-09-04 24832]
    S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbprint.sys [2008-04-13 25856]
    S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\System32\DRIVERS\usbscan.sys [2008-04-13 15104]
    S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\System32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
    S3 ZDCndis5;ZDCndis5 Protocol Driver; \??\C:\WINDOWS\System32\ZDCndis5.SYS []
    S3 ZDPSp50;ZDPSp50 NDIS Protocol Driver; C:\WINDOWS\System32\Drivers\ZDPSp50.sys []

    ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R2 AntiVirSchedulerService;Avira AntiVir Planificateur; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-04-01 108289]
    R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-03-02 185089]
    R2 C-DillaCdaC11BA;C-DillaCdaC11BA; C:\WINDOWS\System32\drivers\CDAC11BA.EXE [2004-04-04 54784]
    R2 FTRTSVC;France Telecom Routing Table Service; C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe [2007-09-25 65536]
    R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-01-20 152984]
    R2 LVCOMSer;LVCOMSer; C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe [2007-10-19 186904]
    R2 LVPrcSrv;Process Monitor; C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe [2007-10-19 141848]
    R2 MDM;Machine Debug Manager; C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe [2003-06-20 322120]
    R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-01-14 226656]
    R2 VCSSecS;Virtual CD v4 Security service (SDK - Version); C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe [2002-05-16 139264]
    S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2003-06-19 114688]
    S2 LVSrvLauncher;LVSrvLauncher; C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe [2007-10-19 141848]
    S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\HPZipm12.exe [2007-08-09 73728]
    S2 SLService;SmartLinkService; C:\WINDOWS\system32\slserv.exe [2003-01-17 45056]
    S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896]
    S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240]
    S3 fsssvc;Windows Live Contrôle parental; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2009-02-06 533360]
    S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]

    -----------------EOF-----------------

    Tu m'as posté deux fois le rapport log.

    Citation :
    O4 - HKCU\..\Run: [gaigm] "c:\documents and settings\sophie\local settings\application data\gaigm.exe" gaigm

    ---> Infection Navipromo.

  • Télécharge Navilog1 (de IL-MAFIOSO) sur ton Bureau.
  • Double-clique sur Navilog1.exe afin de lancer l'installation.
  • Si le fix ne lance pas automatiquement après son installation, double-clique sur Navilog1 présent sur le Bureau.
    (Sous Vista, clique droit sur le raccourci de Navilog1 et choisis Exécuter en tant qu'administrateur)
  • Appuie sur F ou f puis valide par Entrée.
  • Appuie sur une touche de ton clavier à chaque fois que cela est demandé, tu arriveras au menu des options.
  • Choisis l'option 1 et appuie sur la touche Entrée pour valider ton choix.
  • Patiente jusqu'au message : *** Analyse terminée le ..... ***
  • Le scan fini, le Bloc-notes contenant le rapport sera affiché, poste le contenu de ce rapport dans ta prochaine réponse.
  • Si le résultat du scan ne s'affiche pas, tu le trouveras dans C:\fixnavi.txt

    N'utilise pas l'option 2, 3 et 4 sans notre accord, des fichiers légitimes peuvent être inclus dans ce scan.

    Search Navipromo version 3.7.6 commencé le 07/05/2009 à 16:12:54,21

    !!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
    !!! Postez ce rapport sur le forum pour le faire analyser !!!
    !!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

    Outil exécuté depuis C:\Program Files\navilog1

    Mise à jour le 14.03.2009 à 18h00 par IL-MAFIOSO

    Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
    X86-based PC ( Uniprocessor Free : AMD Athlon(tm) XP 2400+ )
    BIOS : Phoenix - AwardBIOS v6.00PG
    USER : sophie ( Administrator )
    BOOT : Normal boot

    Antivirus : AntiVir Desktop 9.0.1.26 (Activated)


    C:\ (Local Disk) - NTFS - Total:51 Go (Free:19 Go)
    F:\ (Local Disk) - FAT32 - Total:149 Go (Free:144 Go)
    I:\ (USB)
    J:\ (USB)


    Recherche executé en mode normal


    *** Recherche dossiers dans "C:\WINDOWS" ***


    *** Recherche dossiers dans "C:\Program Files" ***


    *** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1\progra~1" ***


    *** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1" ***


    *** Recherche dossiers dans "c:\docume~1\alluse~1\applic~1" ***


    *** Recherche dossiers dans "C:\Documents and Settings\sophie\applic~1" ***


    *** Recherche dossiers dans "C:\Documents and Settings\sophie\locals~1\applic~1" ***


    *** Recherche dossiers dans "C:\Documents and Settings\sophie\menudm~1\progra~1" ***


    *** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
    pour + d'infos : http://www.gmer.net



    *** Recherche avec GenericNaviSearch ***
    !!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
    !!! A vérifier impérativement avant toute suppression manuelle !!!

    * Recherche dans "C:\WINDOWS\system32" *

    * Recherche dans "C:\Documents and Settings\sophie\locals~1\applic~1" *



    *** Recherche fichiers ***



    *** Recherche clés spécifiques dans le Registre ***
    !! Les clés trouvées ne sont pas forcément infectées !!

    HKEY_CURRENT_USER\Software\Lanconfig

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "gaigm"="\"c:\\documents and settings\\sophie\\local settings\\application data\\gaigm.exe\" gaigm"


    *** Module de Recherche complémentaire ***
    (Recherche fichiers spécifiques)

    1)Recherche nouveaux fichiers Instant Access :


    2)Recherche Heuristique :

    * Dans "C:\WINDOWS\system32" :


    * Dans "C:\Documents and Settings\sophie\locals~1\applic~1" :

    gaigm.exe trouvé !
    gaigm.dat trouvé !
    gaigm_nav.dat trouvé !
    gaigm_navps.dat trouvé !

    3)Recherche Certificats :

    Certificat Egroup trouvé !
    Certificat Electronic-Group trouvé !
    Certificat Montorgueil absent !
    Certificat OOO-Favorit trouvé !
    Certificat Sunny-Day-Design-Ltd absent !

    4)Recherche autres dossiers et fichiers connus :



    *** Analyse terminée le 07/05/2009 à 16:49:21,68 ***

  • Relance Navilog1, fais l'option 2 et poste le rapport (C:\cleannavi.txt).

    ---> Les programmes suivants installent cette infection :
  • Funky Emoticons
  • Games Attack
  • Go-Astro
  • GoRecord
  • HotTVPlayer
  • Live-Player
  • MailSkinner
  • Messenger Skinner
  • Instant Access
  • InternetGameBox
  • Sudoplanet
  • WebMediaPlayer : sauf celui provenant du site suivant > http://www.azertysite.new.fr/

    Clean Navipromo version 3.7.6 commencé le 07/05/2009 à 18:48:39,53

    Outil exécuté depuis C:\Program Files\navilog1

    Mise à jour le 14.03.2009 à 18h00 par IL-MAFIOSO

    Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
    X86-based PC ( Uniprocessor Free : AMD Athlon(tm) XP 2400+ )
    BIOS : Phoenix - AwardBIOS v6.00PG
    USER : sophie ( Administrator )
    BOOT : Normal boot

    Antivirus : AntiVir Desktop 9.0.1.26 (Activated)


    C:\ (Local Disk) - NTFS - Total:51 Go (Free:19 Go)
    F:\ (Local Disk) - FAT32 - Total:149 Go (Free:144 Go)
    I:\ (USB)
    J:\ (USB)


    Mode suppression automatique
    avec prise en charge résultats Catchme et GNS


    Nettoyage exécuté au redémarrage de l'ordinateur


    *** fsbl1.txt non trouvé ***
    (Assurez-vous que Catchme n'avait rien trouvé lors de la recherche)


    *** Suppression avec sauvegardes résultats GenericNaviSearch ***

    * Suppression dans "C:\WINDOWS\System32" *


    * Suppression dans "C:\Documents and Settings\sophie\locals~1\applic~1" *



    *** Suppression dossiers dans "C:\WINDOWS" ***


    *** Suppression dossiers dans "C:\Program Files" ***


    *** Suppression dossiers dans "C:\Documents and Settings\All Users\menudm~1\progra~1" ***


    *** Suppression dossiers dans "C:\Documents and Settings\All Users\menudm~1" ***


    *** Suppression dossiers dans "c:\docume~1\alluse~1\applic~1" ***


    *** Suppression dossiers dans "C:\Documents and Settings\sophie\applic~1" ***


    *** Suppression dossiers dans "C:\Documents and Settings\sophie\locals~1\applic~1" ***


    *** Suppression dossiers dans "C:\Documents and Settings\sophie\menudm~1\progra~1" ***



    *** Suppression fichiers ***


    *** Suppression fichiers temporaires ***

    Nettoyage contenu C:\WINDOWS\Temp effectué !
    Nettoyage contenu C:\Documents and Settings\sophie\locals~1\Temp effectué !

    *** Traitement Recherche complémentaire ***
    (Recherche fichiers spécifiques)

    1)Suppression avec sauvegardes nouveaux fichiers Instant Access :

    2)Recherche, création sauvegardes et suppression Heuristique :


    * Dans "C:\WINDOWS\system32" *



    * Dans "C:\Documents and Settings\sophie\locals~1\applic~1" *


    gaigm.exe trouvé !
    Copie gaigm.exe réalisée avec succès !
    gaigm.exe supprimé !

    gaigm.dat trouvé !
    Copie gaigm.dat réalisée avec succès !
    gaigm.dat supprimé !

    gaigm_nav.dat trouvé !
    Copie gaigm_nav.dat réalisée avec succès !
    gaigm_nav.dat supprimé !

    gaigm_navps.dat trouvé !
    Copie gaigm_navps.dat réalisée avec succès !
    gaigm_navps.dat supprimé !


    *** Sauvegarde du Registre vers dossier Safebackup ***

    sauvegarde du Registre réalisée avec succès !

    *** Nettoyage Registre ***

    Nettoyage Registre Ok


    *** Certificats ***

    Certificat Egroup supprimé !
    Certificat Electronic-Group supprimé !
    Certificat Montorgueil absent !
    Certificat OOO-Favorit supprimé !
    Certificat Sunny-Day-Design-Ltdt absent !

    *** Recherche autres dossiers et fichiers connus ***



    *** Nettoyage terminé le 07/05/2009 à 18:56:05,50 ***

    info.txt logfile of random's system information tool 1.06 2009-05-07 14:32:54

    ======Uninstall list======

    -->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{09B44E78-A988-4BC0-962F-63ECD3333708} /l1036
    -->C:\Program Files\Fichiers communs\Real\Update_OB\rnuninst.exe RealNetworks|RealPlayer|6.0
    -->C:\Program Files\Fichiers communs\Real\Update_OB\rnuninst.exe RealNetworks|RealPlayer|6.0
    -->C:\WINDOWS\ISUN040C.EXE -f"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.isu" -c"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.dll"
    -->C:\WINDOWS\IsUn040c.exe -fC:\WINDOWS\orun32.isu
    -->C:\WINDOWS\Modio\SLAMR2KO\Setup.exe /Remove
    -->C:\WINDOWS\System32\\MSIEXEC.EXE /x {8855FF30-19CE-4CB1-A654-87B38369CCE1}
    -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe"
    -->rundll32 C:\WINDOWS\System32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:D ISPLAY -clean
    -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
    Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
    Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
    ArcSoft PhotoBase 3-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C1D14C0D-FDAA-4DF2-8441-A902805CCE8C}\setup.exe" -l0x40c -uninst
    Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
    Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir Desktop\setup.exe /REMOVE
    Big City Adventure: Sydney, Australia-->"C:\Program Files\Big City Adventure - Sydney Australia\Uninstall.exe"
    Big Fish Games Client-->C:\Program Files\bfgclient\Uninstall.exe
    BigMosaic-->C:\WINDOWS\unvise.exe C:\Program Files\BigMosaic\uninstal.log
    BomberMan version 1.8-->C:\WINDOWS\iun3404.exe c:\bombman
    BS.Player FREE-->"C:\Program Files\Webteh\BSplayer\uninstall.exe"
    Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}
    Coffret de pilotes Logitech Legacy USB Camera-->"C:\Program Files\Fichiers communs\LogiShrd\LogiDriverStore\legacyqcam\10.40.1235\LgDrvInst.exe" -remove -instdir"C:\Program Files\Fichiers communs\LogiShrd\LogiDriverStore\legacyqcam\" -enumdelay=2000 -enabledifx -forcedelete -usbhubsfirst -forceremove -cumulativeremove -promptuninstall -arpregkey"legacyqcam_10.40" /clone_wait /hide_progress
    Coffret de pilotes Logitech QuickCam-->"C:\Program Files\Fichiers communs\LogiShrd\LogiDriverStore\lvdrivers\11.50.1145\LgDrvInst.exe" -remove -instdir"C:\Program Files\Fichiers communs\LogiShrd\LogiDriverStore\lvdrivers\" -enumdelay=2000 -enabledifx -forcedelete -usbhubsfirst -forceremove -cumulativeremove -promptuninstall -arpregkey"lvdrivers_11.50" /clone_wait /hide_progress
    CompuApps SwissKnife V3-->C:\WINDOWS\ISUNINST.EXE -fC:\SWISNIFE\SKUninst.ISU -cC:\SWISNIFE\SKUNINST.DLL
    Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
    EA.com Update-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9AB97F52-512B-43EF-AAEC-4825C17B32ED}\setup.exe" -l0x0 Uninstall
    EAX Unified-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Creative\EAX Unified\Uninst.isu"
    eMule-->"C:\Program Files\eMule\Uninstall.exe"
    Favorit-->"c:\documents and settings\sophie\local settings\application data\gaigm.exe" -uninstall
    Focus It for Kids v1.0-->"C:\JBSgames\focusit kids\unins000.exe"
    Galerie de photos Windows Live-->MsiExec.exe /X{44E54A81-9D91-4AA1-9417-80AFF134F5FF}
    HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
    HP Extended Capabilities 5.3-->C:\Program Files\HP\Digital Imaging\ExtCapUninstall\hpzscr01.exe -datfile hpqhsc01.dat
    HP Image Zone Express-->MsiExec.exe /X{FE64AE29-0883-4C70-8388-DC026019C900}
    HP Imaging Device Functions 5.3-->C:\Program Files\HP\Digital Imaging\DigitalImagingMonitor\hpzscr01.exe -datfile hpqbud01.dat
    HP Product Assistant-->MsiExec.exe /I{36FDBE6E-6684-462B-AE98-9A39A1B200CC}
    HP PSC & OfficeJet 5.3.B-->"C:\Program Files\HP\Digital Imaging\{5B79CFD1-6845-4158-9D7D-6BE89DF2C135}\setup\hpzscr01.exe" -datfile hposcr07.dat
    HP Solution Center & Imaging Support Tools 5.3-->C:\Program Files\HP\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat
    HP Update-->MsiExec.exe /X{FE57DE70-95DE-4B64-9266-84DA811053DB}
    Hypertron-2 Shareware-->"C:\Program Files\Hypertron2_shareware\unins000.exe"
    IL-2 Sturmovik-->C:\WINDOWS\UbiSoft\SetupUbi.exe -uninstall IL-2 Sturmovik
    Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
    Installation Windows Live-->MsiExec.exe /I{7370DF47-B4F9-4279-BFC3-3F09919F720D}
    Java Runtime Environment 1.1-->C:\WINDOWS\uninst.exe -f"C:\Program Files\JavaSoft\JRE\1.1\lib\DeIsL1.isu"
    Java(TM) 6 Update 11-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
    Junk Mail filter update-->MsiExec.exe /I{4DE3E3D9-AE81-45DE-9195-3015F7B1DBF3}
    K-Lite Codec Pack 2.75 Full-->"C:\Program Files\K-Lite Codec Pack\unins000.exe"
    LG USB Modem driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C3ABE126-2BB2-4246-BFE1-6797679B3579}\setup.exe" -l0x40c LG -removeonly
    livebox-->C:\Program Files\InstallShield Installation Information\{17342E3B-0818-4A6F-BFF8-99476605ADD6}\Setup.exe -runfromtemp -l0x040c -removeonly
    LiveReg (Symantec Corporation)-->C:\Program Files\Fichiers communs\Symantec Shared\LiveReg\VcSetup.exe /REMOVE
    LiveUpdate 1.80 (Symantec Corporation)-->C:\Program Files\Symantec\LiveUpdate\LSETUP.EXE /U
    Logitech Audio Echo Cancellation Component-->MsiExec.exe /X{BEF726DD-4037-4214-8C6A-E625C02D2870}
    Logitech Desktop Messenger-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{900B1197-53F5-4F46-A882-2CFFFE2EEDCB}\Setup.exe" -l0x40c UNINSTALL
    Logitech QuickCam-->MsiExec.exe /X{945AC98B-3DC8-45BE-BAE0-22CEEE37A103}
    Logitech Video Enumerator-->MsiExec.exe /X{EA516024-D84D-41F1-814F-83175A6188F2}
    Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
    Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
    Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
    Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
    Microsoft .NET Framework 2.0-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe
    Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
    Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
    Microsoft Search Enhancement Pack-->MsiExec.exe /I{9C9CEB9D-53FD-49A7-85D2-FE674F72F24E}
    Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
    Microsoft Sync Framework Runtime Native v1.0 (x86)-->MsiExec.exe /I{8A74E887-8F0F-4017-AF53-CBA42211AAA5}
    Microsoft Sync Framework Services Native v1.0 (x86)-->MsiExec.exe /I{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
    Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
    Microsoft Word 2002-->MsiExec.exe /I{911B040C-6000-11D3-8CFE-0050048383C9}
    Microsoft Works-->MsiExec.exe /I{A059DE09-1B49-4450-B340-7AE097EC3F04}
    Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Lecteur Windows Media 9 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP9$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Step by Step Interactive Training (KB898458)-->"C:\WINDOWS\$NtUninstallKB898458$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Step by Step Interactive Training (KB923723)-->"C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB963027)-->"C:\WINDOWS\ie7updates\KB963027-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB938464-v2)-->"C:\WINDOWS\$NtUninstallKB938464-v2$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB950759)-->"C:\WINDOWS\$NtUninstallKB950759$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB942763)-->"C:\WINDOWS\$NtUninstallKB942763$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB961503)-->"C:\WINDOWS\$NtUninstallKB961503$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
    Mozilla Firefox (3.0.10)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
    MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
    MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
    MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
    MVision-->MsiExec.exe /I{35725FBC-A136-4A46-9F29-091759D9BB93}
    Nikon Message Center-->MsiExec.exe /X{D2FCC1AE-6311-47C5-8130-C6C66D77DD71}
    Nikon Transfer-->MsiExec.exe /X{E9757890-7EC5-46C8-99AB-B00F07B6525C}
    OmniPage SE-->MsiExec.exe /I{6249C22D-E6A8-407B-BA8B-40298848ED94}
    Orange - Logiciels Internet-->C:\Program Files\Orange\installation\core\Installgui.exe -u
    Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
    Packard Bell InfoCentre-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{07A1C2E1-76DD-11D6-9922-009027E9C183}\setup.exe"
    Petits Débrouillards - Autour des planètes-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Montparnasse Multimedia - France Télécom\Petits Débrouillards\Uninst.isu"
    PowerDVD-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\SETUP.EXE" -uninstall
    QuickTime-->MsiExec.exe /I{08094E03-AFE4-4853-9D31-6D0743DF5328}
    SafeCast Shared Components-->C:\Program Files\Fichiers communs\Macrovision Shared\SafeCast\Install\CDAC13BA.EXE /uninstall
    Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
    Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
    Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
    Sonic RecordNow DX-->MsiExec.exe /I{8855FF30-19CE-4CB1-A654-87B38369CCE1}
    Sony USB Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5C29CB8B-AC1E-4114-8D68-9CD080140D4A}\setup.exe" -l0x40c UNINSTALL -removeonly
    Windows Imaging Component-->"C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
    Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
    Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
    Windows Live Contrôle parental-->MsiExec.exe /X{D6A2DDE3-9D7C-412C-932A-756580D29919}
    Windows Live Mail-->MsiExec.exe /I{63DC2DA0-2A6C-4C38-9249-B75395458657}
    Windows Live Messenger-->MsiExec.exe /X{059C042E-796A-4ACC-A81A-ECC2010BB78C}
    Windows Live Sync-->MsiExec.exe /X{9C5EB781-0D37-44B8-9A58-77B3E4BF5F5E}
    Windows Live Toolbar-->MsiExec.exe /X{F7D27C70-90F5-49B9-B188-0A133C0CE353}
    Windows Live Writer-->MsiExec.exe /X{2231CE39-B963-4B9D-823A-F412ECA637B1}
    Windows XP Service Pack 2-->C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe
    Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
    WinRAR archiver-->C:\Program Files\WinRAR\uninstall.exe
    WinSPuzzle 1.0-->"C:\Program Files\WinSPuzzle\unins000.exe"
    Word Finder-->C:\Program Files\Camtech\Word Finder\Uninstal.exe

    ======Security center information======

    AV: AntiVir Desktop

    ======System event log======

    Computer Name: SN200341280004
    Event Code: 7036
    Message: Le service Pml Driver HPZ12 est entré dans l'état : arrêté.

    Record Number: 354982
    Source Name: Service Control Manager
    Time Written: 20090505192246.000000+120
    Event Type: Informations
    User:

    Computer Name: SN200341280004
    Event Code: 7036
    Message: Le service Pml Driver HPZ12 est entré dans l'état : en cours d'exécution.

    Record Number: 354981
    Source Name: Service Control Manager
    Time Written: 20090505192246.000000+120
    Event Type: Informations
    User:

    Computer Name: SN200341280004
    Event Code: 7035
    Message: Un contrôle Démarrer a correctement été envoyé au service Pml Driver HPZ12.

    Record Number: 354980
    Source Name: Service Control Manager
    Time Written: 20090505192246.000000+120
    Event Type: Informations
    User: SN200341280004\sophie

    Computer Name: SN200341280004
    Event Code: 7036
    Message: Le service Pml Driver HPZ12 est entré dans l'état : arrêté.

    Record Number: 354979
    Source Name: Service Control Manager
    Time Written: 20090505192046.000000+120
    Event Type: Informations
    User:

    Computer Name: SN200341280004
    Event Code: 7036
    Message: Le service Pml Driver HPZ12 est entré dans l'état : en cours d'exécution.

    Record Number: 354978
    Source Name: Service Control Manager
    Time Written: 20090505192046.000000+120
    Event Type: Informations
    User:

    =====Application event log=====

    Computer Name: SN200341280004
    Event Code: 1004
    Message: Échec de détection du produit '{945AC98B-3DC8-45BE-BAE0-22CEEE37A103}', fonctionnalité 'QuickCam', composant '{B52C7B4D-F46F-438C-ADF2-05A138C57757}. La ressource 'HKEY_CURRENT_USER\Software\Logitech\InstallerKeys\QCDesktopShortcutKey' n'existe pas

    Record Number: 9917
    Source Name: MsiInstaller
    Time Written: 20090402181454.000000+120
    Event Type: Avertissement
    User: AUTORITE NT\SERVICE RÉSEAU

    Computer Name: SN200341280004
    Event Code: 1001
    Message: Échec de détection du produit '{945AC98B-3DC8-45BE-BAE0-22CEEE37A103}', fonctionnalité 'QuickCam' lors de la demande du composant '{62BA7C13-20BB-41F7-A6A4-482632CE53D4}'

    Record Number: 9916
    Source Name: MsiInstaller
    Time Written: 20090402181453.000000+120
    Event Type: Avertissement
    User: SN200341280004\sophie

    Computer Name: SN200341280004
    Event Code: 1004
    Message: Échec de détection du produit '{945AC98B-3DC8-45BE-BAE0-22CEEE37A103}', fonctionnalité 'QuickCam', composant '{B52C7B4D-F46F-438C-ADF2-05A138C57757}. La ressource 'HKEY_CURRENT_USER\Software\Logitech\InstallerKeys\QCDesktopShortcutKey' n'existe pas

    Record Number: 9915
    Source Name: MsiInstaller
    Time Written: 20090402181453.000000+120
    Event Type: Avertissement
    User: SN200341280004\sophie

    Computer Name: SN200341280004
    Event Code: 1001
    Message: Échec de détection du produit '{945AC98B-3DC8-45BE-BAE0-22CEEE37A103}', fonctionnalité 'QuickCam' lors de la demande du composant '{62BA7C13-20BB-41F7-A6A4-482632CE53D4}'

    Record Number: 9914
    Source Name: MsiInstaller
    Time Written: 20090402181453.000000+120
    Event Type: Avertissement
    User: AUTORITE NT\SERVICE RÉSEAU

    Computer Name: SN200341280004
    Event Code: 1004
    Message: Échec de détection du produit '{945AC98B-3DC8-45BE-BAE0-22CEEE37A103}', fonctionnalité 'QuickCam', composant '{B52C7B4D-F46F-438C-ADF2-05A138C57757}. La ressource 'HKEY_CURRENT_USER\Software\Logitech\InstallerKeys\QCDesktopShortcutKey' n'existe pas

    Record Number: 9913
    Source Name: MsiInstaller
    Time Written: 20090402181453.000000+120
    Event Type: Avertissement
    User: AUTORITE NT\SERVICE RÉSEAU

    ======Environment variables======

    "ComSpec"=%SystemRoot%\system32\cmd.exe
    "Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\ATI Technologies\ATI Control Panel;C:\PROGRA~1\FICHIE~1\TVNAVI~1;C:\Program Files\QuickTime\QTSystem\
    "windir"=%SystemRoot%
    "OS"=Windows_NT
    "PROCESSOR_ARCHITECTURE"=x86
    "PROCESSOR_LEVEL"=6
    "PROCESSOR_IDENTIFIER"=x86 Family 6 Model 8 Stepping 1, AuthenticAMD
    "PROCESSOR_REVISION"=0801
    "NUMBER_OF_PROCESSORS"=1
    "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
    "TEMP"=%SystemRoot%\TEMP
    "TMP"=%SystemRoot%\TEMP
    "QTJAVA"=C:\WINDOWS\System32\QTJava.zip
    "CLASSPATH"=.;C:\WINDOWS\System32\QTJava.zip
    "FP_NO_HOST_CHECK"=NO

    -----------------EOF-----------------

  • Désinstalle les programmes suivants :
    - Java Runtime Environment 1.1
    - Java 6 Update 11

  • Mets à jour Java.

  • Télécharge Malwarebytes' Anti-Malware (MBAM) sur ton Bureau.
  • Double-clique sur le fichier téléchargé pour lancer le processus d'installation.
  • Dans l'onglet Mise à jour, clique sur le bouton Recherche de mise à jour : si le pare-feu demande l'autorisation à MBAM de se connecter à Internet, accepte.
  • Une fois la mise à jour terminée, rends-toi dans l'onglet Recherche.
  • Sélectionne Exécuter un examen rapide.
  • Clique sur Rechercher. L'analyse démarre.
  • A la fin de l'analyse, un message s'affiche :
    Citation :
    L'examen s'est terminé normalement. Cliquez sur 'Afficher les résultats' pour afficher tous les objets trouvés.

  • Clique sur OK pour poursuivre. Si MBAM n'a rien trouvé, il te le dira aussi.
  • Ferme tes navigateurs.
  • Si des malwares ont été détectés, clique sur Afficher les résultats.
  • Sélectionne tout (ou laisse coché) et clique sur Supprimer la sélection, MBAM va détruire les fichiers et clés de registre infectés et en mettre une copie dans la quarantaine.
  • MBAM va ouvrir le Bloc-notes et y copier le rapport d'analyse. Copie-colle ce rapport dans ta prochaine réponse.

    Malwarebytes' Anti-Malware 1.36
    Version de la base de données: 2089
    Windows 5.1.2600 Service Pack 3

    07/05/2009 21:03:25
    mbam-log-2009-05-07 (21-03-25).txt

    Type de recherche: Examen rapide
    Eléments examinés: 81662
    Temps écoulé: 5 minute(s), 34 second(s)

    Processus mémoire infecté(s): 1
    Module(s) mémoire infecté(s): 0
    Clé(s) du Registre infectée(s): 2
    Valeur(s) du Registre infectée(s): 1
    Elément(s) de données du Registre infecté(s): 0
    Dossier(s) infecté(s): 2
    Fichier(s) infecté(s): 7

    Processus mémoire infecté(s):
    C:\Documents and Settings\sophie\Application Data\advantage\AdVantage.exe (Adware.Vomba) -> Unloaded process successfully.

    Module(s) mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Clé(s) du Registre infectée(s):
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{7d5dd829-6c90-42c5-b54c-2afa82f988ba} (Rogue.Installer) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\advantage (Adware.Vomba) -> Quarantined and deleted successfully.

    Valeur(s) du Registre infectée(s):
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\advantage (Adware.Vomba) -> Quarantined and deleted successfully.

    Elément(s) de données du Registre infecté(s):
    (Aucun élément nuisible détecté)

    Dossier(s) infecté(s):
    C:\Program Files\Advantage (Adware.Advantage) -> Quarantined and deleted successfully.
    C:\Documents and Settings\sophie\Application Data\advantage (Adware.Vomba) -> Quarantined and deleted successfully.

    Fichier(s) infecté(s):
    C:\Program Files\Advantage\AdVantageupdate.exe (Adware.Advantage) -> Quarantined and deleted successfully.
    C:\Program Files\Advantage\AdVUninst.exe (Adware.Advantage) -> Quarantined and deleted successfully.
    C:\Documents and Settings\sophie\Application Data\advantage\about_AdVantage.mht (Adware.Vomba) -> Quarantined and deleted successfully.
    C:\Documents and Settings\sophie\Application Data\advantage\advantage.cfg (Adware.Vomba) -> Quarantined and deleted successfully.
    C:\Documents and Settings\sophie\Application Data\advantage\AdVantage.exe (Adware.Vomba) -> Quarantined and deleted successfully.
    C:\Documents and Settings\sophie\Application Data\advantage\advantage.mht (Adware.Vomba) -> Quarantined and deleted successfully.
    C:\Documents and Settings\sophie\Application Data\advantage\AdVUninst.exe (Adware.Vomba) -> Quarantined and deleted successfully.

    Logfile of random's system information tool 1.06 (written by random/random)
    Run by sophie at 2009-05-07 21:52:47
    Microsoft Windows XP Édition familiale Service Pack 3
    System drive C: has 34 GB (64%) free of 53 GB
    Total RAM: 1023 MB (50% free)

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 21:52:51, on 07/05/2009
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16827)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
    C:\Program Files\Avira\AntiVir Desktop\sched.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\SOUNDMAN.EXE
    C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
    C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe
    C:\Program Files\ScanSoft\OmniPageSE\opware32.exe
    C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\Program Files\Orange\Systray\SystrayApp.exe
    C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
    C:\Program Files\Logitech\QuickCam\Quickcam.exe
    C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
    C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    C:\Program Files\Fichiers communs\Nikon\Monitor\NkMonitor.exe
    C:\Program Files\Avira\AntiVir Desktop\avguard.exe
    C:\WINDOWS\System32\drivers\CDAC11BA.EXE
    C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
    C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
    C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
    C:\WINDOWS\system32\slserv.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
    C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
    C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
    C:\Program Files\Windows Live\Contacts\wlcomm.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
    C:\Documents and Settings\sophie\Bureau\RSIT.exe
    C:\Program Files\trend micro\sophie.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.searchgateway.net/search/%s
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Packard Bell
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\Orange\SearchURLHook\SearchPageURL.dll
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\apps\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
    O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
    O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (file missing)
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (file missing)
    O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
    O4 - HKLM\..\Run: [ATIPTA] C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [VCSPlayer] "C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe"
    O4 - HKLM\..\Run: [TimeSink Ad Client] "C:\Program Files\TimeSink\AdGateway\TSAdBot.exe"
    O4 - HKLM\..\Run: [Omnipage] C:\Program Files\ScanSoft\OmniPageSE\opware32.exe
    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [SystrayORAHSS] "C:\Program Files\Orange\Systray\SystrayApp.exe"
    O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\Orange\SessionManager\SessionManager.exe
    O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
    O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
    O4 - Startup: Nikon Monitor.lnk = C:\Program Files\Fichiers communs\Nikon\Monitor\NkMonitor.exe
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
    O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
    O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/pr01/resources/MSNPUpld...
    O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.ca...
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPACl...
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/fl...
    O18 - Protocol: bw+0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw+0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
    O18 - Protocol: bwg0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwg0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0s - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: offline-8876480 - {43C7103A-1398-4A6B-8A38-CF4EEC811912} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
    O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\System32\drivers\CDAC11BA.EXE
    O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
    O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
    O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
    O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
    O23 - Service: Virtual CD v4 Security service (SDK - Version) (VCSSecS) - H+H Software GmbH - C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe

    --
    End of file - 21663 bytes

    ======Scheduled tasks folder======

    C:\WINDOWS\tasks\Rappel d'enregistrement 1.job
    C:\WINDOWS\tasks\Rappel d'enregistrement 2.job
    C:\WINDOWS\tasks\Rappel d'enregistrement 3.job
    C:\WINDOWS\tasks\Symantec NetDetect.job

    ======Registry dump======

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
    AcroIEHlprObj Class - C:\apps\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx [2001-04-16 37808]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
    Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll [2009-01-14 92504]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
    Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll []

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
    Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
    Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-05-07 35840]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
    Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
    JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll []

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
    {21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    "SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2003-04-24 54784]
    "ATIModeChange"=C:\WINDOWS\system32\Ati2mdxx.exe [2001-09-04 28672]
    "ATIPTA"=C:\ATI Technologies\ATI Control Panel\atiptaxx.exe [2003-06-19 335872]
    "TkBellExe"=C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe [2003-09-04 151597]
    "VCSPlayer"=C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe [2002-06-07 299008]
    "TimeSink Ad Client"=C:\Program Files\TimeSink\AdGateway\TSAdBot.exe []
    "Omnipage"=C:\Program Files\ScanSoft\OmniPageSE\opware32.exe [2002-06-03 49152]
    "HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2007-05-08 54840]
    "QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2007-04-27 282624]
    "SystrayORAHSS"=C:\Program Files\Orange\Systray\SystrayApp.exe [2007-09-25 94208]
    "ORAHSSSessionManager"=C:\Program Files\Orange\SessionManager\SessionManager.exe [2007-09-25 102400]
    "LogitechCommunicationsManager"=C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe [2007-10-25 563984]
    "LogitechQuickCamRibbon"=C:\Program Files\Logitech\QuickCam\Quickcam.exe [2007-10-25 2178832]
    "avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    "MsnMsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-02-06 3885408]
    "ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
    "LDM"=C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [2008-07-07 36864]

    C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
    HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    Logitech Desktop Messenger.lnk - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe

    C:\Documents and Settings\sophie\Menu Démarrer\Programmes\Démarrage
    Nikon Monitor.lnk - C:\Program Files\Fichiers communs\Nikon\Monitor\NkMonitor.exe

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
    "dontdisplaylastusername"=0
    "legalnoticecaption"=
    "legalnoticetext"=
    "shutdownwithoutlogon"=1
    "undockwithoutlogon"=1

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
    "NoDriveTypeAutoRun"=145

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
    "NoDrives"=
    "NoDriveAutoRun"=
    "HonorAutoRunSetting"=

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
    "C:\Program Files\Orange\Connectivity\ConnectivityManager.exe"="C:\Program Files\Orange\Connectivity\ConnectivityManager.exe:*:enabled:CSS"
    "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
    "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
    "C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger"
    "C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule"
    "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
    "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
    "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
    "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
    "C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger"
    "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
    "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

    ======List of files/folders created in the last 1 months======

    2009-05-07 20:54:53 ----D---- C:\Documents and Settings\sophie\Application Data\Malwarebytes
    2009-05-07 20:54:48 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
    2009-05-07 20:54:47 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
    2009-05-07 18:48:39 ----A---- C:\cleannavi.txt
    2009-05-07 16:12:54 ----A---- C:\fixnavi.txt
    2009-05-07 16:10:24 ----D---- C:\Program Files\Navilog1
    2009-05-07 14:32:19 ----D---- C:\Program Files\trend micro
    2009-05-07 14:32:18 ----D---- C:\rsit
    2009-05-06 20:44:00 ----D---- C:\Program Files\Avira
    2009-05-06 20:44:00 ----D---- C:\Documents and Settings\All Users\Application Data\Avira
    2009-05-05 22:05:08 ----D---- C:\Documents and Settings\sophie\Application Data\cerasus.media
    2009-05-05 19:59:07 ----D---- C:\Documents and Settings\sophie\Application Data\FloodLightGames
    2009-05-05 19:59:07 ----D---- C:\Documents and Settings\All Users\Application Data\FloodLightGames
    2009-05-05 15:05:23 ----D---- C:\Documents and Settings\sophie\Application Data\Abra Academy2
    2009-05-03 21:18:32 ----D---- C:\Documents and Settings\All Users\Application Data\Astar Games
    2009-05-03 18:22:38 ----A---- C:\gendel32.exe
    2009-05-03 17:52:43 ----D---- C:\Program Files\Conduit
    2009-05-03 17:52:25 ----D---- C:\Documents and Settings\sophie\Application Data\BSplayer Pro
    2009-05-03 17:52:25 ----D---- C:\Documents and Settings\sophie\Application Data\BSplayer
    2009-05-02 15:45:02 ----D---- C:\Documents and Settings\sophie\Application Data\SprillBermudeFr
    2009-05-01 22:13:45 ----D---- C:\Documents and Settings\sophie\Application Data\SecretIslandFraBF
    2009-05-01 20:56:34 ----D---- C:\Documents and Settings\sophie\Application Data\Dragon Altar Games
    2009-05-01 15:26:12 ----D---- C:\Documents and Settings\sophie\Application Data\blg
    2009-05-01 15:26:12 ----D---- C:\Documents and Settings\All Users\Application Data\blg
    2009-04-30 22:45:53 ----D---- C:\Documents and Settings\All Users\Application Data\Slapdash Games
    2009-04-29 22:35:01 ----HDC---- C:\WINDOWS\$NtUninstallKB961503$
    2009-04-29 13:58:13 ----D---- C:\Documents and Settings\sophie\Application Data\Gogii Games
    2009-04-29 13:58:13 ----D---- C:\Documents and Settings\All Users\Application Data\Gogii Games
    2009-04-28 18:21:43 ----D---- C:\Documents and Settings\All Users\Application Data\SpecialBit
    2009-04-28 14:50:49 ----D---- C:\Documents and Settings\sophie\Application Data\JoyBits
    2009-04-28 13:31:57 ----D---- C:\Documents and Settings\sophie\Application Data\BigFishv1002fr
    2009-04-28 09:22:52 ----D---- C:\Documents and Settings\All Users\Application Data\Mushroom Age
    2009-04-27 20:56:17 ----D---- C:\Documents and Settings\All Users\Application Data\AdventureChronicles1
    2009-04-27 15:44:18 ----D---- C:\Documents and Settings\sophie\Application Data\Artogon
    2009-04-27 09:38:26 ----D---- C:\Documents and Settings\All Users\Application Data\BigFishv1005fr
    2009-04-26 21:14:44 ----D---- C:\Documents and Settings\All Users\Application Data\DivoGames
    2009-04-24 19:58:14 ----D---- C:\Documents and Settings\sophie\Application Data\Anabel
    2009-04-23 13:28:38 ----D---- C:\Documents and Settings\sophie\Application Data\PoBros
    2009-04-23 13:28:38 ----D---- C:\Documents and Settings\All Users\Application Data\PoBros
    2009-04-21 18:49:10 ----D---- C:\WINDOWS\Minidump
    2009-04-21 14:53:21 ----D---- C:\Documents and Settings\sophie\Application Data\Big Fish Games
    2009-04-21 09:31:44 ----D---- C:\Documents and Settings\sophie\Application Data\RobinsonCrusoeBFGFR
    2009-04-21 09:29:48 ----D---- C:\Program Files\Les Aventures de Robinson Crusoe
    2009-04-20 21:50:31 ----D---- C:\Documents and Settings\All Users\Application Data\Alawar Stargaze
    2009-04-20 20:42:57 ----D---- C:\Documents and Settings\sophie\Application Data\Flood Light Games
    2009-04-20 20:42:57 ----D---- C:\Documents and Settings\All Users\Application Data\Flood Light Games
    2009-04-20 14:13:11 ----D---- C:\Documents and Settings\All Users\Application Data\Redrum
    2009-04-20 14:07:14 ----D---- C:\Program Files\bfgclient
    2009-04-20 14:05:52 ----D---- C:\Documents and Settings\All Users\Application Data\BigFishGamesCache
    2009-04-17 16:11:11 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
    2009-04-17 16:11:03 ----HDC---- C:\WINDOWS\$NtUninstallKB961373$
    2009-04-17 16:07:27 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
    2009-04-17 16:07:11 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
    2009-04-17 16:06:42 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
    2009-04-17 16:06:26 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
    2009-04-14 22:24:07 ----D---- C:\Documents and Settings\sophie\Application Data\Zylom DressUpRush
    2009-04-14 19:20:50 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
    2009-04-14 19:20:37 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$
    2009-04-14 11:43:15 ----HDC---- C:\WINDOWS\$NtUninstallKB938464-v2$
    2009-04-14 08:51:55 ----D---- C:\WINDOWS\Prefetch
    2009-04-14 08:46:47 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
    2009-04-14 08:46:38 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
    2009-04-14 08:46:31 ----HDC---- C:\WINDOWS\$NtUninstallKB958690$
    2009-04-14 08:46:15 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$
    2009-04-14 08:46:08 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
    2009-04-14 08:46:00 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
    2009-04-14 08:45:53 ----HDC---- C:\WINDOWS\$NtUninstallKB957095$
    2009-04-14 08:45:39 ----HDC---- C:\WINDOWS\$NtUninstallKB956841$
    2009-04-14 08:45:31 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
    2009-04-14 08:45:24 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
    2009-04-14 08:45:08 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
    2009-04-14 08:45:01 ----HDC---- C:\WINDOWS\$NtUninstallKB954600$
    2009-04-14 08:44:54 ----HDC---- C:\WINDOWS\$NtUninstallKB954211$
    2009-04-14 08:44:38 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
    2009-04-14 08:44:26 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
    2009-04-14 08:44:18 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
    2009-04-14 08:44:10 ----HDC---- C:\WINDOWS\$NtUninstallKB951698$
    2009-04-14 08:44:01 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
    2009-04-14 08:43:48 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
    2009-04-14 08:43:41 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
    2009-04-14 08:43:35 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
    2009-04-14 08:43:20 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
    2009-04-14 08:43:11 ----HDC---- C:\WINDOWS\$NtUninstallKB938464$
    2009-04-14 08:40:00 ----D---- C:\WINDOWS\system32\fr
    2009-04-14 08:40:00 ----D---- C:\WINDOWS\system32\bits
    2009-04-14 08:26:15 ----AT---- C:\WINDOWS\006533_.tmp
    2009-04-10 18:26:42 ----D---- C:\Program Files\The Adventure Company
    2009-04-09 16:53:01 ----D---- C:\Documents and Settings\sophie\Application Data\Pharaohs Secret

    ======List of files/folders modified in the last 1 months======

    2009-05-07 21:39:03 ----D---- C:\Program Files\Mozilla Firefox
    2009-05-07 21:07:17 ----D---- C:\WINDOWS\Temp
    2009-05-07 21:07:10 ----D---- C:\WINDOWS\system32\CatRoot2
    2009-05-07 21:05:38 ----D---- C:\WINDOWS\system32\drivers
    2009-05-07 21:05:38 ----D---- C:\WINDOWS\system32
    2009-05-07 21:05:06 ----A---- C:\WINDOWS\SchedLgU.Txt
    2009-05-07 21:03:25 ----RD---- C:\Program Files
    2009-05-07 20:49:33 ----HD---- C:\Config.Msi
    2009-05-07 20:49:21 ----SHD---- C:\WINDOWS\Installer
    2009-05-07 20:32:52 ----D---- C:\WINDOWS
    2009-05-07 14:21:56 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP
    2009-05-06 20:44:24 ----HD---- C:\WINDOWS\inf
    2009-05-06 20:35:54 ----D---- C:\WINDOWS\WinSxS
    2009-05-06 17:47:19 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
    2009-05-03 18:49:40 ----HD---- C:\Program Files\InstallShield Installation Information
    2009-05-03 18:47:45 ----D---- C:\Program Files\Virtual Ball Fighters
    2009-05-03 18:39:08 ----D---- C:\Program Files\Sony
    2009-05-03 18:35:27 ----D---- C:\Program Files\Microsoft
    2009-05-03 18:35:01 ----D---- C:\Program Files\Kings Mahjongg
    2009-05-03 18:34:37 ----D---- C:\Program Files\GJGames
    2009-05-03 18:34:32 ----D---- C:\Program Files\DynamicPlaygrounds
    2009-05-03 18:27:51 ----D---- C:\Program Files\Fichiers communs
    2009-05-03 18:25:38 ----D---- C:\Program Files\WordWars
    2009-05-03 18:24:33 ----D---- C:\Program Files\DivX
    2009-05-03 18:23:49 ----D---- C:\Program Files\Fichiers communs\ScanSoft Shared
    2009-05-03 18:23:13 ----D---- C:\Program Files\ArcSoft
    2009-05-03 18:22:38 ----A---- C:\WINDOWS\WININIT.INI
    2009-05-03 17:34:52 ----RSD---- C:\WINDOWS\assembly
    2009-05-03 17:34:31 ----RSD---- C:\WINDOWS\Fonts
    2009-05-03 17:33:33 ----D---- C:\Program Files\Fichiers communs\HP
    2009-05-03 17:30:25 ----SD---- C:\WINDOWS\Downloaded Program Files
    2009-05-03 14:34:31 ----D---- C:\Program Files\eMule
    2009-05-03 13:55:37 ----D---- C:\Program Files\Zylom Games
    2009-05-03 13:53:57 ----D---- C:\Program Files\EACOM
    2009-05-03 13:52:41 ----D---- C:\Program Files\BoontyGames
    2009-05-03 13:52:20 ----D---- C:\Program Files\Absolutist.com
    2009-05-03 13:50:08 ----D---- C:\Program Files\Vampire Software
    2009-05-02 23:04:04 ----D---- C:\Documents and Settings\All Users\Application Data\PlayPond
    2009-05-01 18:20:00 ----D---- C:\Documents and Settings\sophie\Application Data\Identities
    2009-04-29 22:35:04 ----RSHD---- C:\WINDOWS\system32\dllcache
    2009-04-29 06:53:55 ----HD---- C:\WINDOWS\$hf_mig$
    2009-04-23 15:38:44 ----D---- C:\Program Files\PopCap Games
    2009-04-23 14:46:55 ----D---- C:\Program Files\Ian Software
    2009-04-17 16:13:37 ----D---- C:\WINDOWS\system32\wbem
    2009-04-17 16:13:37 ----D---- C:\WINDOWS\AppPatch
    2009-04-17 16:11:19 ----A---- C:\WINDOWS\imsins.BAK
    2009-04-17 16:10:48 ----D---- C:\WINDOWS\system32\fr-fr
    2009-04-17 16:10:48 ----D---- C:\Program Files\Internet Explorer
    2009-04-16 13:12:28 ----D---- C:\Documents and Settings\sophie\Application Data\SpinTop Games
    2009-04-16 13:12:25 ----D---- C:\Documents and Settings\sophie\Application Data\Zylom
    2009-04-14 19:20:04 ----D---- C:\WINDOWS\system32\CatRoot
    2009-04-14 08:54:35 ----A---- C:\WINDOWS\OEWABLog.txt
    2009-04-14 08:53:11 ----A---- C:\WINDOWS\setuplog.txt
    2009-04-14 08:51:20 ----D---- C:\Program Files\Windows Media Player
    2009-04-14 08:51:19 ----D---- C:\WINDOWS\system32\Setup
    2009-04-14 08:51:19 ----D---- C:\Program Files\Outlook Express
    2009-04-14 08:50:26 ----D---- C:\WINDOWS\security
    2009-04-14 08:43:25 ----D---- C:\Program Files\Messenger
    2009-04-14 08:40:26 ----D---- C:\WINDOWS\Help
    2009-04-14 08:40:15 ----D---- C:\WINDOWS\network diagnostic
    2009-04-14 08:40:14 ----D---- C:\WINDOWS\ime
    2009-04-14 08:40:02 ----D---- C:\WINDOWS\system32\usmt
    2009-04-14 08:40:00 ----D---- C:\WINDOWS\peernet
    2009-04-14 08:39:59 ----D---- C:\Program Files\Movie Maker
    2009-04-14 08:36:53 ----D---- C:\WINDOWS\system32\Restore
    2009-04-14 08:36:53 ----D---- C:\WINDOWS\system32\npp
    2009-04-14 08:36:51 ----D---- C:\WINDOWS\msagent
    2009-04-14 08:36:50 ----D---- C:\WINDOWS\srchasst
    2009-04-14 08:36:49 ----D---- C:\Program Files\NetMeeting
    2009-04-14 08:36:48 ----D---- C:\WINDOWS\system32\Com
    2009-04-14 08:36:44 ----D---- C:\Program Files\Windows NT
    2009-04-14 08:36:40 ----D---- C:\Program Files\Fichiers communs\System
    2009-04-14 08:36:15 ----D---- C:\WINDOWS\system32\oobe
    2009-04-14 08:36:13 ----D---- C:\WINDOWS\system
    2009-04-14 08:32:32 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
    2009-04-14 08:27:40 ----D---- C:\WINDOWS\EHome
    2009-04-10 20:40:03 ----D---- C:\Documents and Settings\sophie\Application Data\Magic Academy
    2009-04-10 20:03:01 ----D---- C:\Program Files\Micro Application

    ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R1 AmdK7;Pilote de processeur AMD K7; C:\WINDOWS\System32\DRIVERS\amdk7.sys [2008-04-14 41856]
    R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys []
    R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
    R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-02-13 28376]
    R1 vcsmpdrv;vcsmpdrv; C:\WINDOWS\System32\DRIVERS\vcsmpdrv.sys [2002-06-07 49232]
    R2 CdaC15BA;CdaC15BA; \??\C:\WINDOWS\System32\drivers\CdaC15BA.SYS []
    R2 fssfltr;FssFltr; C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys [2009-02-06 55152]
    R2 SBKUPNT;SBKUPNT; \??\C:\WINDOWS\System32\Drivers\SBKUPNT.SYS []
    R2 usbhub;DSC Composite USB Device; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2008-04-13 59520]
    R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2003-04-24 730092]
    R3 ati2mtag;ati2mtag; C:\WINDOWS\System32\DRIVERS\ati2mtag.sys [2003-06-19 576512]
    R3 FETNDISB;VIA Rhine Family Fast Ethernet Adapter Driver Service; C:\WINDOWS\System32\DRIVERS\fetnd5b.sys [2003-04-24 41984]
    R3 LVcKap;Logitech AEC Driver; C:\WINDOWS\system32\DRIVERS\LVcKap.sys [2007-10-19 2109976]
    R3 LVPr2Mon;Logitech LVPr2Mon Driver; C:\WINDOWS\system32\DRIVERS\LVPr2Mon.sys [2007-10-11 25624]
    R3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\drivers\LVUSBSta.sys [2007-10-12 41752]
    R3 Mtlmnt5;Mtlmnt5; C:\WINDOWS\System32\DRIVERS\Mtlmnt5.sys [2003-01-21 210024]
    R3 pepifilter;Volume Adapter; C:\WINDOWS\system32\DRIVERS\lv302af.sys [2007-10-12 13848]
    R3 PID_PEPI;Logitech QuickCam IM(PID_PEPI); C:\WINDOWS\system32\DRIVERS\LV302V32.SYS [2007-10-12 1279000]
    R3 Slntamr;SmartLink AMR_PCI Driver; C:\WINDOWS\System32\DRIVERS\slntamr.sys [2003-01-17 507008]
    R3 SlWdmSup;SlWdmSup; C:\WINDOWS\System32\DRIVERS\SlWdmSup.sys [2003-01-17 39348]
    R3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
    R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [2008-04-13 32128]
    R3 usbehci;Pilote miniport de contrôleur hôte amélioré USB 2.0 Microsoft; C:\WINDOWS\System32\DRIVERS\usbehci.sys [2008-04-13 30208]
    R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
    R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2008-04-13 20608]
    S1 kbdhid;Pilote HID de clavier; C:\WINDOWS\System32\DRIVERS\kbdhid.sys [2008-04-14 14720]
    S2 Ca533av;Polaroid Digital Cam Video; C:\WINDOWS\System32\Drivers\Ca533av.sys []
    S3 catchme;catchme; \??\C:\DOCUME~1\sophie\LOCALS~1\Temp\catchme.sys []
    S3 CCDECODE;Closed Caption Decoder; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
    S3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\System32\DRIVERS\hidusb.sys [2008-04-13 10368]
    S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\System32\DRIVERS\HPZid412.sys [2005-03-08 51120]
    S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\System32\DRIVERS\HPZipr12.sys [2005-03-08 16496]
    S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\System32\DRIVERS\HPZius12.sys [2005-03-08 21744]
    S3 LVMVDrv;Logitech Machine Vision Engine Loader; C:\WINDOWS\system32\DRIVERS\LVMVDrv.sys [2007-10-11 2142488]
    S3 ms_mpu401;Pilote UART MIDI MPU-401 Microsoft; C:\WINDOWS\system32\drivers\msmpu401.sys [2001-08-17 2944]
    S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
    S3 Mtlstrm;Mtlstrm; C:\WINDOWS\System32\DRIVERS\Mtlstrm.sys [2003-01-21 1290312]
    S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\System32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
    S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [2008-04-13 10880]
    S3 NtMtlFax;NtMtlFax; C:\WINDOWS\System32\DRIVERS\NtMtlFax.sys [2003-01-17 162136]
    S3 nv;nv; C:\WINDOWS\System32\DRIVERS\nv4_mini.sys [2004-08-03 1897408]
    S3 PCAMPR5;PCAMPR5 NDIS Protocol Driver; \??\C:\WINDOWS\System32\PCAMPR5.SYS []
    S3 PCANDIS5;PCANDIS5 NDIS Protocol Driver; \??\C:\WINDOWS\System32\PCANDIS5.SYS []
    S3 RecAgent;recagent; \??\C:\WINDOWS\System32\DRIVERS\RecAgent.sys []
    S3 SG762_XP;SAGEM 802.11g XG762 1211B Driver; C:\WINDOWS\System32\DRIVERS\WlanBZXP.sys [2007-01-10 450560]
    S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\System32\DRIVERS\SLIP.sys [2008-04-13 11136]
    S3 SlNtHal;SlNtHal; C:\WINDOWS\System32\DRIVERS\Slnthal.sys [2003-01-21 84784]
    S3 streamip;BDA IPSink; C:\WINDOWS\System32\DRIVERS\StreamIP.sys [2008-04-13 15232]
    S3 usbbus;LGE Mobile Composite USB Device; C:\WINDOWS\system32\DRIVERS\lgusbbus.sys [2008-09-04 13056]
    S3 USBCamera;Icatch(IV) Still Camera Device; C:\WINDOWS\System32\Drivers\Bulk533.sys []
    S3 UsbDiag;LGE Mobile USB Serial Port; C:\WINDOWS\system32\DRIVERS\lgusbdiag.sys [2008-09-04 19968]
    S3 USBModem;LGE Mobile USB Modem; C:\WINDOWS\system32\DRIVERS\lgusbmodem.sys [2008-09-04 24832]
    S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbprint.sys [2008-04-13 25856]
    S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\System32\DRIVERS\usbscan.sys [2008-04-13 15104]
    S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\System32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
    S3 ZDCndis5;ZDCndis5 Protocol Driver; \??\C:\WINDOWS\System32\ZDCndis5.SYS []
    S3 ZDPSp50;ZDPSp50 NDIS Protocol Driver; C:\WINDOWS\System32\Drivers\ZDPSp50.sys []

    ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R2 AntiVirSchedulerService;Avira AntiVir Planificateur; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-04-01 108289]
    R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-03-02 185089]
    R2 C-DillaCdaC11BA;C-DillaCdaC11BA; C:\WINDOWS\System32\drivers\CDAC11BA.EXE [2004-04-04 54784]
    R2 FTRTSVC;France Telecom Routing Table Service; C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe [2007-09-25 65536]
    R2 LVCOMSer;LVCOMSer; C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe [2007-10-19 186904]
    R2 LVPrcSrv;Process Monitor; C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe [2007-10-19 141848]
    R2 MDM;Machine Debug Manager; C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe [2003-06-20 322120]
    R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-01-14 226656]
    R2 SLService;SmartLinkService; C:\WINDOWS\system32\slserv.exe [2003-01-17 45056]
    R2 VCSSecS;Virtual CD v4 Security service (SDK - Version); C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe [2002-05-16 139264]
    S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2003-06-19 114688]
    S2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-05-07 152984]
    S2 LVSrvLauncher;LVSrvLauncher; C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe [2007-10-19 141848]
    S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\HPZipm12.exe [2007-08-09 73728]
    S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896]
    S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240]
    S3 fsssvc;Windows Live Contrôle parental; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2009-02-06 533360]
    S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]

    -----------------EOF-----------------

  • Télécharge OTMoveIt3 (OldTimer) sur ton Bureau.
  • Double-clique sur OTMoveIt3.exe afin de le lancer.
  • Copie (Ctrl+C) le texte suivant ci-dessous :

    :processes
    explorer.exe

    :files
    C:\gendel32.exe

    :reg
    [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

    :commands
    [purity]
    [emptytemp]
    [reboot]


  • Colle (Ctrl+V) le texte précédemment copié dans le cadre Paste Instructions for Items to be Moved.
  • Clique maintenant sur le bouton MoveIt! puis ferme OTMoveIt3.

    ---> Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
    Accepte en cliquant sur YES.

  • Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\
    ---> Le nom du rapport correspond au moment de sa création : date_heure.log

    ========== PROCESSES ==========
    Process explorer.exe killed successfully.
    ========== FILES ==========
    C:\gendel32.exe moved successfully.
    ========== REGISTRY ==========
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}\\ deleted successfully.
    ========== COMMANDS ==========
    File delete failed. C:\DOCUME~1\sophie\LOCALS~1\Temp\MessengerCache\eAxegzHYJyeyoZ02lTiD2KAIuc8= scheduled to be deleted on reboot.
    File delete failed. C:\DOCUME~1\sophie\LOCALS~1\Temp\MessengerCache\f3nWq8pEYF9Sl+CYcrv7K2Fwae4= scheduled to be deleted on reboot.
    File delete failed. C:\DOCUME~1\sophie\LOCALS~1\Temp\MessengerCache\oL2jWj0Vdx3YKO2FqgCUL3BCDxpc= scheduled to be deleted on reboot.
    File delete failed. C:\DOCUME~1\sophie\LOCALS~1\Temp\MessengerCache\XXNSoZp2FoLKSCTcqVp9RfMDWHXQ= scheduled to be deleted on reboot.
    File delete failed. C:\DOCUME~1\sophie\LOCALS~1\Temp\etilqs_xcg6jAiE7njkLKSbHqVo scheduled to be deleted on reboot.
    File delete failed. C:\DOCUME~1\sophie\LOCALS~1\Temp\hpodvd09.log scheduled to be deleted on reboot.
    File delete failed. C:\DOCUME~1\sophie\LOCALS~1\Temp\IadHide5.dll scheduled to be deleted on reboot.
    User's Temp folder emptied.
    User's Internet Explorer cache folder emptied.
    File delete failed. C:\Documents and Settings\sophie\Local Settings\Temporary Internet Files\Content.IE5\32Z62NPR\ADSAdClient31[1].htm scheduled to be deleted on reboot.
    File delete failed. C:\Documents and Settings\sophie\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
    User's Temporary Internet Files folder emptied.
    Local Service Temp folder emptied.
    File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
    Local Service Temporary Internet Files folder emptied.
    Network Service Temp folder emptied.
    Network Service Temporary Internet Files folder emptied.
    Windows Temp folder emptied.
    Java cache emptied.
    File delete failed. C:\Documents and Settings\sophie\Local Settings\Application Data\Mozilla\Firefox\Profiles\02fzcpyf.default\Cache\_CACHE_001_ scheduled to be deleted on reboot.
    File delete failed. C:\Documents and Settings\sophie\Local Settings\Application Data\Mozilla\Firefox\Profiles\02fzcpyf.default\Cache\_CACHE_002_ scheduled to be deleted on reboot.
    File delete failed. C:\Documents and Settings\sophie\Local Settings\Application Data\Mozilla\Firefox\Profiles\02fzcpyf.default\Cache\_CACHE_003_ scheduled to be deleted on reboot.
    File delete failed. C:\Documents and Settings\sophie\Local Settings\Application Data\Mozilla\Firefox\Profiles\02fzcpyf.default\Cache\_CACHE_MAP_ scheduled to be deleted on reboot.
    File delete failed. C:\Documents and Settings\sophie\Local Settings\Application Data\Mozilla\Firefox\Profiles\02fzcpyf.default\urlclassifier3.sqlite scheduled to be deleted on reboot.
    File delete failed. C:\Documents and Settings\sophie\Local Settings\Application Data\Mozilla\Firefox\Profiles\02fzcpyf.default\XUL.mfl scheduled to be deleted on reboot.
    FireFox cache emptied.
    Temp folders emptied.

    OTMoveIt3 by OldTimer - Version 1.0.11.0 log created on 05072009_220909

    Files moved on Reboot...
    C:\DOCUME~1\sophie\LOCALS~1\Temp\MessengerCache\eAxegzHYJyeyoZ02lTiD2KAIuc8= moved successfully.
    C:\DOCUME~1\sophie\LOCALS~1\Temp\MessengerCache\f3nWq8pEYF9Sl+CYcrv7K2Fwae4= moved successfully.
    C:\DOCUME~1\sophie\LOCALS~1\Temp\MessengerCache\oL2jWj0Vdx3YKO2FqgCUL3BCDxpc= moved successfully.
    C:\DOCUME~1\sophie\LOCALS~1\Temp\MessengerCache\XXNSoZp2FoLKSCTcqVp9RfMDWHXQ= moved successfully.
    File C:\DOCUME~1\sophie\LOCALS~1\Temp\etilqs_xcg6jAiE7njkLKSbHqVo not found!
    C:\DOCUME~1\sophie\LOCALS~1\Temp\hpodvd09.log moved successfully.
    DllUnregisterServer procedure not found in C:\DOCUME~1\sophie\LOCALS~1\Temp\IadHide5.dll
    C:\DOCUME~1\sophie\LOCALS~1\Temp\IadHide5.dll NOT unregistered.
    C:\DOCUME~1\sophie\LOCALS~1\Temp\IadHide5.dll moved successfully.
    C:\Documents and Settings\sophie\Local Settings\Temporary Internet Files\Content.IE5\32Z62NPR\ADSAdClient31[1].htm moved successfully.
    C:\Documents and Settings\sophie\Local Settings\Application Data\Mozilla\Firefox\Profiles\02fzcpyf.default\Cache\_CACHE_001_ moved successfully.
    C:\Documents and Settings\sophie\Local Settings\Application Data\Mozilla\Firefox\Profiles\02fzcpyf.default\Cache\_CACHE_002_ moved successfully.
    C:\Documents and Settings\sophie\Local Settings\Application Data\Mozilla\Firefox\Profiles\02fzcpyf.default\Cache\_CACHE_003_ moved successfully.
    C:\Documents and Settings\sophie\Local Settings\Application Data\Mozilla\Firefox\Profiles\02fzcpyf.default\Cache\_CACHE_MAP_ moved successfully.
    C:\Documents and Settings\sophie\Local Settings\Application Data\Mozilla\Firefox\Profiles\02fzcpyf.default\urlclassifier3.sqlite moved successfully.
    C:\Documents and Settings\sophie\Local Settings\Application Data\Mozilla\Firefox\Profiles\02fzcpyf.default\XUL.mfl moved successfully.



    Avira AntiVir Personal
    Date de création du fichier de rapport : vendredi 8 mai 2009 08:57

    La recherche porte sur 1383188 souches de virus.

    Détenteur de la licence : Avira AntiVir Personal - FREE Antivirus
    Numéro de série : 0000149996-ADJIE-0000001
    Plateforme : Windows XP
    Version de Windows : (Service Pack 3) [5.1.2600]
    Mode Boot : Démarré normalement
    Identifiant : SYSTEM
    Nom de l'ordinateur : SN200341280004

    Informations de version :
    BUILD.DAT : 9.0.0.65 17959 Bytes 22/04/2009 12:06:00
    AVSCAN.EXE : 9.0.3.6 466689 Bytes 21/04/2009 12:20:54
    AVSCAN.DLL : 9.0.3.0 49409 Bytes 03/03/2009 09:21:02
    LUKE.DLL : 9.0.3.2 209665 Bytes 20/02/2009 10:35:11
    LUKERES.DLL : 9.0.2.0 13569 Bytes 03/03/2009 09:21:31
    ANTIVIR0.VDF : 7.1.0.0 15603712 Bytes 27/10/2008 11:30:36
    ANTIVIR1.VDF : 7.1.2.12 3336192 Bytes 11/02/2009 19:33:26
    ANTIVIR2.VDF : 7.1.3.137 1810944 Bytes 30/04/2009 04:51:50
    ANTIVIR3.VDF : 7.1.3.171 164864 Bytes 07/05/2009 18:45:07
    Version du moteur : 8.2.0.160
    AEVDF.DLL : 8.1.1.1 106868 Bytes 07/05/2009 04:51:58
    AESCRIPT.DLL : 8.1.1.79 385403 Bytes 07/05/2009 04:51:57
    AESCN.DLL : 8.1.1.10 127348 Bytes 07/05/2009 04:51:57
    AERDL.DLL : 8.1.1.3 438645 Bytes 29/10/2008 17:24:41
    AEPACK.DLL : 8.1.3.14 397685 Bytes 07/05/2009 04:51:56
    AEOFFICE.DLL : 8.1.0.36 196987 Bytes 26/02/2009 19:01:56
    AEHEUR.DLL : 8.1.0.122 1737080 Bytes 07/05/2009 04:51:55
    AEHELP.DLL : 8.1.2.2 119158 Bytes 26/02/2009 19:01:56
    AEGEN.DLL : 8.1.1.39 348532 Bytes 07/05/2009 04:51:52
    AEEMU.DLL : 8.1.0.9 393588 Bytes 09/10/2008 13:32:40
    AECORE.DLL : 8.1.6.9 176500 Bytes 07/05/2009 04:51:51
    AEBB.DLL : 8.1.0.3 53618 Bytes 09/10/2008 13:32:40
    AVWINLL.DLL : 9.0.0.3 18177 Bytes 12/12/2008 07:47:30
    AVPREF.DLL : 9.0.0.1 43777 Bytes 03/12/2008 10:39:26
    AVREP.DLL : 8.0.0.3 155905 Bytes 20/01/2009 13:34:28
    AVREG.DLL : 9.0.0.0 36609 Bytes 07/11/2008 14:24:42
    AVARKT.DLL : 9.0.0.3 292609 Bytes 24/03/2009 14:05:22
    AVEVTLOG.DLL : 9.0.0.7 167169 Bytes 30/01/2009 09:36:37
    SQLITE3.DLL : 3.6.1.0 326401 Bytes 28/01/2009 14:03:49
    SMTPLIB.DLL : 9.2.0.25 28417 Bytes 02/02/2009 07:20:57
    NETNT.DLL : 9.0.0.0 11521 Bytes 07/11/2008 14:40:59
    RCIMAGE.DLL : 9.0.0.21 2438401 Bytes 17/02/2009 12:49:32
    RCTEXT.DLL : 9.0.37.0 88321 Bytes 15/04/2009 09:07:05

    Configuration pour la recherche actuelle :
    Nom de la tâche...............................: Contrôle intégral du système
    Fichier de configuration......................: C:\Program Files\Avira\AntiVir Desktop\sysscan.avp
    Documentation.................................: bas
    Action principale.............................: interactif
    Action secondaire.............................: ignorer
    Recherche sur les secteurs d'amorçage maître..: marche
    Recherche sur les secteurs d'amorçage.........: marche
    Secteurs d'amorçage...........................: C:, F:,
    Recherche dans les programmes actifs..........: marche
    Recherche en cours sur l'enregistrement.......: marche
    Recherche de Rootkits.........................: marche
    Contrôle d'intégrité de fichiers système......: arrêt
    Fichier mode de recherche.....................: Tous les fichiers
    Recherche sur les archives....................: marche
    Limiter la profondeur de récursivité..........: 20
    Archive Smart Extensions......................: marche
    Heuristique de macrovirus.....................: marche
    Heuristique fichier...........................: moyen

    Début de la recherche : vendredi 8 mai 2009 08:57

    La recherche d'objets cachés commence.
    '50163' objets ont été contrôlés, '0' objets cachés ont été trouvés.

    La recherche sur les processus démarrés commence :
    Processus de recherche 'avscan.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'notepad.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'avcenter.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'firefox.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'wlcomm.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'wmiprvse.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'COCIManager.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'LVComSer.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'alg.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'vcssecs.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'slserv.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'SeaPort.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'mdm.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'hpqste08.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'LVComSer.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'FTRTSVC.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'CDAC11BA.EXE' - '1' module(s) sont contrôlés
    Processus de recherche 'avguard.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'NkMonitor.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'hpqtra08.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'LogitechDesktopMessenger.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'AlertModule.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'ctfmon.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'msnmsgr.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'avgnt.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'Quickcam.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'Communications_Helper.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'SystrayApp.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'qttask.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'hpwuSchd2.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'opware32.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'vcsplay.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'realsched.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'atiptaxx.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'SOUNDMAN.EXE' - '1' module(s) sont contrôlés
    Processus de recherche 'explorer.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'sched.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'LVPrcSrv.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'spoolsv.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'lsass.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'services.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'winlogon.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'csrss.exe' - '1' module(s) sont contrôlés
    Processus de recherche 'smss.exe' - '1' module(s) sont contrôlés
    '51' processus ont été contrôlés avec '51' modules

    La recherche sur les secteurs d'amorçage maître commence :
    Secteur d'amorçage maître HD0
    [INFO] Aucun virus trouvé !
    Secteur d'amorçage maître HD1
    [INFO] Aucun virus trouvé !
    Secteur d'amorçage maître HD2
    [INFO] Aucun virus trouvé !
    Secteur d'amorçage maître HD3
    [INFO] Aucun virus trouvé !

    La recherche sur les secteurs d'amorçage commence :
    Secteur d'amorçage 'C:\'
    [INFO] Aucun virus trouvé !
    Secteur d'amorçage 'F:\'
    [INFO] Aucun virus trouvé !

    La recherche sur les renvois aux fichiers exécutables (registre) commence :
    Le registre a été contrôlé ( '60' fichiers).


    La recherche sur les fichiers sélectionnés commence :

    Recherche débutant dans 'C:\' <HDD>
    C:\hiberfil.sys
    [AVERTISSEMENT] Impossible d'ouvrir le fichier !
    [REMARQUE] Ce fichier est un fichier système Windows.
    [REMARQUE] Il est correct que ce fichier ne puisse pas être ouvert pour la recherche.
    C:\pagefile.sys
    [AVERTISSEMENT] Impossible d'ouvrir le fichier !
    [REMARQUE] Ce fichier est un fichier système Windows.
    [REMARQUE] Il est correct que ce fichier ne puisse pas être ouvert pour la recherche.
    C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP570\A0111179.exe
    [RESULTAT] Contient le cheval de Troie TR/Trash.Gen
    C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP570\A0111180.exe
    [RESULTAT] Contient le cheval de Troie TR/Trash.Gen
    Recherche débutant dans 'F:\' <SWISNIFE1>

    Début de la désinfection :
    C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP570\A0111179.exe
    [RESULTAT] Contient le cheval de Troie TR/Trash.Gen
    [REMARQUE] Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '4a34ead3.qua' !
    C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP570\A0111180.exe
    [RESULTAT] Contient le cheval de Troie TR/Trash.Gen
    [REMARQUE] Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '4b4dd91c.qua' !


    Fin de la recherche : vendredi 8 mai 2009 10:17
    Temps nécessaire: 57:51 Minute(s)

    La recherche a été effectuée intégralement

    8284 Les répertoires ont été contrôlés
    216135 Des fichiers ont été contrôlés
    2 Des virus ou programmes indésirables ont été trouvés
    0 Des fichiers ont été classés comme suspects
    0 Des fichiers ont été supprimés
    0 Des virus ou programmes indésirables ont été réparés
    2 Les fichiers ont été déplacés dans la quarantaine
    0 Les fichiers ont été renommés
    2 Impossible de contrôler des fichiers
    216131 Fichiers non infectés
    6681 Les archives ont été contrôlées
    2 Avertissements
    4 Consignes
    50163 Des objets ont été contrôlés lors du Rootkitscan
    0 Des objets cachés ont été trouvés

    Avira AntiVir Personal - Free Antivirus Updater

    Heure de création : Fri May 08 08:56:35 2009


    Système d'exploitation:
    Windows XP (Service Pack 3) [5.1.2600]

    Informations produit :
    Version produit : 9.0.0.65
    Updater : C:\Program Files\Avira\AntiVir Desktop\update.exe 9.0.0.46
    Plug-in : C:\Program Files\Avira\AntiVir Desktop\updext.dll 9.0.0.6

    Répertoire temporaire : C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\TEMP\UPDATE\
    Répertoire de sauvegarde : C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\BACKUP\
    Répertoire dapos;installation : C:\Program Files\Avira\AntiVir Desktop\
    Répertoire de l'Updater : C:\Program Files\Avira\AntiVir Desktop\
    Répertoire AppData : C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\


    [UPD] [INFO] Contrôle en cours pour savoir si des fichiers plus récents sont disponibles.
    [UPD] [INFO] Sélection en cours du serveur de mise à jour 'http://80.190.143.235/update'.
    [UPD] [INFO] Téléchargement de 'http://80.190.143.235/update/idx/master.idx' vers'C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\TEMP\UPDATE\idx\master.idx'.
    [UPD] [INFO] Pas de mise à jour disponible, l'installation est à jour.

    Résumé :
    ********
    0 fichiers téléchargés
    0 fichiers installés

    08:56:36 La mise à jour a été effectuée avec succès !

    1/

  • Désinstalle HijackThis.

  • Télécharge ToolsCleaner2 sur ton Bureau.
  • Double-clique sur ToolsCleaner2.exe pour le lancer.
  • Clique sur Recherche et laisse le scan agir.
  • Clique sur Suppression pour finaliser.
  • Tu peux, si tu le souhaites, te servir des Options Facultatives.
  • Clique sur Quitter pour obtenir le rapport.
  • Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).


    2/

  • Télécharge et installe CCleaner Slim.
  • Lance-le. Va dans Options puis Avancé et décoche la case Effacer uniquement les fichiers etc....
  • Va dans Nettoyeur, choisis Analyse. Une fois terminé, lance le nettoyage.
  • Ensuite, choisis Registre, puis Chercher des erreurs. Une fois terminé, répare toutes les erreurs (Sauvegarde la base de registre).


    3/

  • Il est nécessaire de désactiver puis réactiver la restauration système pour la purger.


    ==Prévention==

    Conserve MBAM. Il te servira à scanner les fichiers douteux en complément de l'antivirus et scanne le disque dur régulièrement.

    Comme navigateur, utilise plutôt Mozilla Firefox qu'Internet Explorer.

    Vérifie que les mises à jour automatiques sont bien activées (Menu Démarrer, clique droit sur Poste de travail, onglet Mises à jour automatiques).

    Par rapport au P2P : Lien

    Voici un dossier complet (A lire avec Adobe Reader ou Foxit Reader) : Lien


    ==Problème résolu ?==

    Si tu estimes que ton problème est résolu :

    ---> Ajoute maintenant [Résolu] au titre. Pour cela :
  • Clique, dans ton premier message, sur le bouton Editer .
  • Rajoute la mention [Résolu] devant le titre.
  • Clique ensuite sur Valider votre message.


    Sois plus vigilant(e) sur Internet ;) 
    Lassé par la pub ? Créez un compte

    Créer un nouveau sujet

    Tom's guide dans le monde