Bonjour, Voici un PC qui a notamment le problème suivant : lorsque sur le gestionnaire internet orange, je lance la messagerie, cela commence à m'ouvrir le navigateur orange, soit il plante direct, soit il me detecte un virus : c program files\ wanadoo\woobrowser\skin\default\favorites\cmdbd.bmp, virus identifié : win32/PEPatch. J'ai beau avoir essayé de le placer en quarantaine plusieurs fois, cela revient toujours. J'ai fait un scan RSIT que voici : info.txt logfile of random's system information tool 1.06 2009-08-13 09:37:49 ======Uninstall list====== -->C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL -->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0 -->C:\WINDOWS\NuNInst.exe /UNINSTALL -->C:\WINDOWS\unmrw.exe /UNINSTALL -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{88E5FCB8-5F25-11D5-B16F-0800460222F0}\setup.exe" -l0x40c UNINSTALL -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D76298C2-E532-4A11-BCFF-76F3F19DA84D}\setup.exe" UNINSTALL -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe Adobe Reader 9.1 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A91000000001} Adobe Shockwave Player-->C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log Adobe® Photoshop® Album Edition Découverte 3.0-->MsiExec.exe /I{4BDFD2CE-6329-42E4-9801-9B3D1F10D79B} Apple Mobile Device Support-->MsiExec.exe /I{EC4455AB-F155-4CC1-A4C5-88F3777F9886} Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033} ASAPI Update-->C:\WINDOWS\system32\IWUNIN~1.EXE -uninstall C:\WINDOWS\ISUNINST.EXE -fC:\PROGRA~1\VOB\ASAPIU~1\ASAPI.isu Ask Toolbar-->rundll32 C:\PROGRA~1\AskSBar\bar\1.bin\AskSBar.dll,O Audacity 1.3.7 (Unicode)-->"C:\Program Files\Audacity 1.3 Beta (Unicode)\unins000.exe" AVG Free 8.5-->C:\Program Files\AVG\AVG8\setup.exe /UNINSTALL Azureus Vuze-->C:\Program Files\Azureus\uninstall.exe Bonjour-->MsiExec.exe /I{8A25392D-C5D2-4E79-A2BD-C15DDC5B0959} Canon MP Navigator EX 1.0-->"C:\Program Files\Canon\MP Navigator EX 1.0\Maint.exe" /UninstallRemove C:\Program Files\Canon\MP Navigator EX 1.0\uninst.ini Canon MP220 series-->"C:\WINDOWS\system32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP220_series\DelDrv.exe" /U:{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP220_series /L0x000c Canon My Printer-->C:\Program Files\Canon\MyPrinter\uninst.exe uninst.ini Canon Utilities Easy-PhotoPrint EX-->C:\Program Files\Canon\Easy-PhotoPrint EX\uninst.exe uninst.ini Canon Utilities Solution Menu-->C:\Program Files\Canon\SolutionMenu\uninst.exe uninst.ini CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe" Code::Blocks-->"C:\Program Files\CodeBlocks\unins000.exe" Copy Utility-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\EPSON\Copy Utility\Uninst.isu" Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe" Enregistrement utilisateur de Canon MP220 series-->C:\Program Files\Canon\IJEREG\MP220 series\UNINST.EXE EPSON Attach To Email-->C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{20C45B32-5AB6-46A4-94EF-58950CAF05E5} /l1033 ADDREMOVEDLG EPSON Easy Photo Print-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BC69DDB8-4840-4D9B-BB31-0D4DB2BA1312}\SETUP.EXE" -l0x40c UNINST EPSON File Manager-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E86BC406-944E-41F6-ADE6-2C136734C96B}\Setup.exe" -l0x40c UNINST EPSON Logiciel imprimante-->C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EPUPDATE.EXE /R EPSON Photo Print-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\EPSON\Photo Print\Uninst.isu" EPSON Scan Assistant-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2A88F1BF-7041-4E42-84B1-6B4ACB83AC64}\Setup.exe" -l0x40c -u EPSON Smart Panel-->C:\Program Files\EPSON\Smart Panel\SPUninst.exe EPSON TWAIN 5-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9A3EABC0-CA06-11D4-BF77-00104B130C19}\setup.exe" UNINSTALL EPSON Web-To-Page-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7F14F68C-17FA-4F88-B3FD-7F449C1EBF32}\SETUP.EXE" -l0x40c -anything ESC79_D78 Guide d’utilisation-->C:\Program Files\EPSON\TPMANUAL\ESC79_D78\FRA\USE_G\DOCUNINS.EXE Filzip 3.06-->"C:\Program Files\Filzip\unins000.exe" Free Mp3 Wma Converter V 1.7.2-->"C:\Program Files\Free Audio Pack\unins000.exe" Gestionnaire Internet-->C:\PROGRA~1\Wanadoo\uninstall.exe GNU Solfege 3.12.0-->"C:\Program Files\GNU Solfege\unins000.exe" HijackThis 2.0.2-->"C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\HijackThis.exe" /uninstall Intel Audio Studio-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3D1B20A6-E31D-4BB5-BC5C-DDD3B0D91728}\setup.exe" -l0x40c Intel(R) PRO Network Connections Drivers-->Prounstl.exe iPod for Windows 2006-03-23-->C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{2070F79D-46BC-4EEA-8F02-9B4DCABAE7CB} /l1036 iTunes-->MsiExec.exe /I{318AB667-3230-41B5-A617-CB3BF748D371} J2SE Runtime Environment 5.0 Update 6-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150060} Java(TM) 6 Update 15-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216013FF} La boite a couleurs version 1.6.14-->"C:\Program Files\LaBoiteACouleurs\unins000.exe" LG PC Suite III-->C:\Program Files\InstallShield Installation Information\{C0E18DC4-C74A-4889-AE3A-933471023787}\setup.exe -runfromtemp -l0x040c -removeonly LG USB Modem driver-->"C:\Program Files\InstallShield Installation Information\{C3ABE126-2BB2-4246-BFE1-6797679B3579}\setup.exe" -runfromtemp -l0x040cLG -removeonly livebox-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AB3F9176-E74A-4F28-9A09-4F22349B145E}\setup.exe" -l0x40c LiveReg (Symantec Corporation)-->C:\Program Files\Fichiers communs\Symantec Shared\LiveReg\VcSetup.exe /REMOVE LiveUpdate 1.80 (Symantec Corporation)-->C:\Program Files\Symantec\LiveUpdate\LSETUP.EXE /U Logiciel QuickCam de Logitech-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C191BE7C-8542-4A61-973A-714EF76C5995}\setup.exe" -l0x40c Logitech Desktop Messenger-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{900B1197-53F5-4F46-A882-2CFFFE2EEDCB}\setup.exe" -l0x40c UNINSTALL Maple 11-->"C:\Program Files\Maple 11\Uninstall_Maple 11\Uninstall Maple 11.exe" MD Simple Burner 2.0.04-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{47E09785-B2FB-11D5-B8EE-00B0D0D26B88}\setup.exe" -l0x40c UNINSTALL Microsoft Office XP Professional with FrontPage-->MsiExec.exe /I{90280409-6000-11D3-8CFE-0050048383C9} Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d} Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe" Mise à jour de sécurité pour Lecteur Windows Media (KB973540)-->"C:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 8 (KB972260)-->"C:\WINDOWS\ie8updates\KB972260-IE8\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB938464-v2)-->"C:\WINDOWS\$NtUninstallKB938464-v2$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB956390)-->"C:\WINDOWS\$NtUninstallKB956390$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB956744)-->"C:\WINDOWS\$NtUninstallKB956744$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB958215)-->"C:\WINDOWS\$NtUninstallKB958215$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB960714)-->"C:\WINDOWS\$NtUninstallKB960714$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB960859)-->"C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB961371)-->"C:\WINDOWS\$NtUninstallKB961371$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB963027)-->"C:\WINDOWS\$NtUninstallKB963027$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB968537)-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB969897)-->"C:\WINDOWS\$NtUninstallKB969897$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB969898)-->"C:\WINDOWS\$NtUninstallKB969898$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB971557)-->"C:\WINDOWS\$NtUninstallKB971557$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB971633)-->"C:\WINDOWS\$NtUninstallKB971633$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB971657)-->"C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB972260)-->"C:\WINDOWS\$NtUninstallKB972260$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB973346)-->"C:\WINDOWS\$NtUninstallKB973346$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB973354)-->"C:\WINDOWS\$NtUninstallKB973354$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB973507)-->"C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB973869)-->"C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe" Mise à jour pour Windows Internet Explorer 8 (KB972636)-->"C:\WINDOWS\ie8updates\KB972636-IE8\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB973815)-->"C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe" Mozilla Firefox (3.5.2)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe MSN-->C:\Program Files\MSN\MsnInstaller\msninst.exe /Action:ARP MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F} MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF} MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71} MSXML 4.0 SP2 Parser and SDK-->MsiExec.exe /I{716E0306-8318-4364-8B8F-0CC4E9376BAC} Navigateur Orange-->C:\PROGRA~1\Wanadoo\Shell.exe inst\uninst_FTBrowser.shl Nero Suite-->C:\Program Files\Fichiers communs\Nero\Uninstall\Setup.exe /uninstall ExtraUninstallID="" Norton Ghost-->MsiExec.exe /I{6975E810-C92F-45F0-0BFD-187B312F10E8} Notepad++-->C:\Program Files\Notepad++\uninstall.exe NVIDIA Drivers-->C:\WINDOWS\system32\nvudisp.exe UninstallGUI OpenMG AAC Add-on Module 1.0.00-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\1150\INTEL3~1\IDriver.exe /M{23BE930B-6AC4-4D0D-B5C3-03062A2BF2A3} UNINSTALL OpenMG Limited Patch 4.5-06-05-12-01-->C:\Program Files\Fichiers communs\Sony Shared\OpenMG\HotFixes\HotFix4.5-06-05-12-01\HotFixSetup\setup.exe /u OpenMG Secure Module 4.5.01-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\1150\INTEL3~1\IDriver.exe /M{3633BA28-67CE-4AC8-A677-3406CA84C3D8} UNINSTALL OpenOffice.org 3.1-->MsiExec.exe /I{0FA44E79-CD7D-4E8D-A2EE-26FE05F509B6} PIF DESIGNER-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B90450DF-E781-46FD-B1F1-0C86DA40E443}\SETUP.EXE" -l0x40c anything PIXMA Extended Survey Program-->C:\Program Files\Canon\IJPLM\SETUP.EXE -R Programme de gestion Camera de Logitech®-->"C:\Program Files\Fichiers communs\Logitech\QCDRV\BIN\SETUP.EXE" UNINSTALL REMOVEPROMPT QuickTime-->MsiExec.exe /I{F958CA02-BB40-4007-894B-258729456EE4} Raven Lite 1.0-->"C:\Program Files\Raven Lite 1.0\UninstallerData\Uninstall Raven.exe" RealPlayer-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0 SAGEM F@st 800-840-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4AE3A0CB-87B0-4F51-BECD-3D1F8DFDD62F}\setup.exe" -l0x40c ScanSoft OmniPage SE 4-->MsiExec.exe /I{DEE88727-779B-47A9-ACEF-F87CA5F92A65} ScanToWeb-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EBAE381B-60A6-4863-AA9F-FCAB755BC9E5}\Setup.exe" ADDREMOVEDLG SigmaTel Audio-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A462213D-EED4-42C2-9A60-7BDD4D4B0B17}\setup.exe" -l0x40c -remove -removeonly SonicStage 2.1.00-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{71D6CE84-B7DC-4166-8E0D-56C1C37BFB5A}\setup.exe" -l0x40c UNINSTALL SPEAR v0.7.1-->"C:\Program Files\SPEAR\unins000.exe" Steinberg WaveLab 5.01b-->C:\PROGRA~1\STEINB~1\WaveLab\UNWISE.EXE C:\PROGRA~1\STEINB~1\WaveLab\INSTALL.LOG TeamViewer 4-->C:\Program Files\TeamViewer\Version4\uninstall.exe VCW VicMan's Photo Editor 7.99-->"C:\Program Files\VCW VicMan's Photo Editor\unins000.exe" VideoLAN VLC media player 0.8.5-->C:\Program Files\VideoLAN\VLC\uninstall.exe Wanadoo Messager-->C:\PROGRA~1\WANADO~1\UNWISE.EXE C:\PROGRA~1\WANADO~1\INSTALL.LOG Windows Live Messenger-->MsiExec.exe /I{F6326B60-1B1D-4ABF-BFCD-7B7404F44411} Windows Live Sign-in Assistant-->MsiExec.exe /I{F652D238-5F29-42D5-BAF3-0115EF977EC2} Windows Media Format Runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe" Worms World Party-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9A200E68-D5F4-4E70-910F-2871753A0E2B}\setup.exe" =====HijackThis Backups===== O4 - HKLM\..\Run: [Salestart] "C:\Program Files\Fichiers communs\DriveCleaner Free\dcsm.exe" [2008-01-02] O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) [2008-01-02] ======Security center information====== AV: AVG Anti-Virus Free AV: Kaspersky Anti-Virus 6.0 (disabled) (outdated) ======System event log====== Computer Name: HOME-B33BC9FADD Event Code: 7035 Message: Un contrôle Démarrer a correctement été envoyé au service Service de découvertes SSDP. Record Number: 45059 Source Name: Service Control Manager Time Written: 20090803080058.000000+120 Event Type: Informations User: AUTORITE NT\SYSTEM Computer Name: HOME-B33BC9FADD Event Code: 7036 Message: Le service Compatibilité avec le Changement rapide d'utilisateur est entré dans l'état : en cours d'exécution. Record Number: 45058 Source Name: Service Control Manager Time Written: 20090803080051.000000+120 Event Type: Informations User: Computer Name: HOME-B33BC9FADD Event Code: 7035 Message: Un contrôle Démarrer a correctement été envoyé au service Compatibilité avec le Changement rapide d'utilisateur. Record Number: 45057 Source Name: Service Control Manager Time Written: 20090803080051.000000+120 Event Type: Informations User: AUTORITE NT\SYSTEM Computer Name: HOME-B33BC9FADD Event Code: 7036 Message: Le service Services Terminal Server est entré dans l'état : en cours d'exécution. Record Number: 45056 Source Name: Service Control Manager Time Written: 20090803080046.000000+120 Event Type: Informations User: Computer Name: HOME-B33BC9FADD Event Code: 7035 Message: Un contrôle Démarrer a correctement été envoyé au service Services Terminal Server. Record Number: 45055 Source Name: Service Control Manager Time Written: 20090803080046.000000+120 Event Type: Informations User: AUTORITE NT\SYSTEM =====Application event log===== Computer Name: HOME-B33BC9FADD Event Code: 0 Message: Record Number: 15636 Source Name: iPod Service Time Written: 20090630113008.000000+120 Event Type: Informations User: Computer Name: HOME-B33BC9FADD Event Code: 1800 Message: Le service Centre de sécurité Windows a démarré. Record Number: 15635 Source Name: SecurityCenter Time Written: 20090630112912.000000+120 Event Type: Informations User: Computer Name: HOME-B33BC9FADD Event Code: 4 Message: The LightScribe Service started successfully. Record Number: 15634 Source Name: LightScribeService Time Written: 20090630112857.000000+120 Event Type: Informations User: Computer Name: HOME-B33BC9FADD Event Code: 0 Message: Record Number: 15633 Source Name: GhostStartService Time Written: 20090630112851.000000+120 Event Type: Informations User: Computer Name: HOME-B33BC9FADD Event Code: 1 Message: Record Number: 15632 Source Name: Bonjour Service Time Written: 20090630112849.000000+120 Event Type: Informations User: ======Environment variables====== "ComSpec"=%SystemRoot%\system32\cmd.exe "Path"=C:\watcom-1.3\binnt;C:\watcom-1.3\binw;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\system32\WBEM;"C:\Program Files\Symantec\Norton Ghost 2003\";C:\Program Files\QuickTime\QTSystem\ "windir"=%SystemRoot% "FP_NO_HOST_CHECK"=NO "OS"=Windows_NT "PROCESSOR_ARCHITECTURE"=x86 "PROCESSOR_LEVEL"=15 "PROCESSOR_IDENTIFIER"=x86 Family 15 Model 4 Stepping 3, GenuineIntel "PROCESSOR_REVISION"=0403 "NUMBER_OF_PROCESSORS"=2 "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH "TEMP"=%SystemRoot%\TEMP "TMP"=%SystemRoot%\TEMP "KMP_DUPLICATE_LIB_OK"=TRUE "WATCOM"=C:\watcom-1.3 "CLASSPATH"=.;C:\Program Files\Java\jre1.5.0_06\lib\ext\QTJava.zip "QTJAVA"=C:\Program Files\Java\jre1.5.0_06\lib\ext\QTJava.zip -----------------EOF----------------- Logfile of random's system information tool 1.06 (written by random/random) Run by evelyne at 2009-08-13 09:37:28 Microsoft Windows XP Professionnel Service Pack 3 System drive C: has 20 GB (39%) free of 51 GB Total RAM: 510 MB (44% free) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 09:37:43, on 13/08/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Ahead\InCD\InCDsrv.exe C:\WINDOWS\system32\spoolsv.exe c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\WINDOWS\eHome\ehRecvr.exe C:\WINDOWS\eHome\ehSched.exe C:\WINDOWS\System32\FTRTSVC.exe C:\Program Files\Symantec\Norton Ghost 2003\GhostStartService.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe C:\PROGRA~1\AVG\AVG8\avgrsx.exe C:\Program Files\AVG\AVG8\avgcsrvx.exe C:\Program Files\Sony\MD Simple Burner\NetMDSB.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\TeamViewer\Version4\TeamViewer_Service.exe C:\PROGRA~1\AVG\AVG8\avgemc.exe C:\WINDOWS\Explorer.EXE C:\Program Files\TeamViewer\Version4\TeamViewer.exe C:\Program Files\AVG\AVG8\avgcsrvx.exe C:\WINDOWS\system32\dllhost.exe C:\WINDOWS\system32\wbem\wmiapsrv.exe C:\WINDOWS\ehome\ehtray.exe C:\WINDOWS\eHome\ehmsas.exe C:\Program Files\Ahead\InCD\InCD.exe C:\Program Files\Symantec\Norton Ghost 2003\GhostStartTrayApp.exe C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe C:\WINDOWS\system32\LVCOMSX.EXE C:\Program Files\Logitech\Video\CameraAssistant.exe C:\WINDOWS\system32\ElkCtrl.exe C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe C:\Program Files\iTunes\iTunesHelper.exe C:\PROGRA~1\Wanadoo\TaskBarIcon.exe C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe C:\Program Files\Canon\MyPrinter\BJMyPrt.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\PROGRA~1\AVG\AVG8\avgtray.exe C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe C:\Program Files\Messenger\msmsgs.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe C:\Program Files\iPod\bin\iPodService.exe C:\PROGRA~1\AVG\AVG8\avgnsx.exe C:\Program Files\MSN Messenger\usnsvc.exe C:\Documents and Settings\evelyne\Bureau\RSIT.exe C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\evelyne.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens R3 - URLSearchHook: (no name) - {0579B4B6-0293-4d73-B02D-5EBB0BA0F0A2} - C:\Program Files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL O2 - BHO: Ask Search Assistant BHO - {0579B4B1-0293-4d73-B02D-5EBB0BA0F0A2} - C:\Program Files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll O2 - BHO: Ask Toolbar BHO - {F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file) O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll O3 - Toolbar: Ask Toolbar - {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file) O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe O4 - HKLM\..\Run: [IntelAudioStudio] "C:\Program Files\Intel Audio Studio\IntelAudioStudio.exe" BOOT O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [GhostStartTrayApp] C:\Program Files\Symantec\Norton Ghost 2003\GhostStartTrayApp.exe O4 - HKLM\..\Run: [autoclk] autoclk.exe O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE O4 - HKLM\..\Run: [LogitechCameraAssistant] C:\Program Files\Logitech\Video\CameraAssistant.exe O4 - HKLM\..\Run: [LogitechVideo[inspector]] C:\Program Files\Logitech\Video\InstallHelper.exe /inspect O4 - HKLM\..\Run: [LogitechCameraService(E)] C:\WINDOWS\system32\ElkCtrl.exe /automation O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe" O4 - HKLM\..\Run: [EPSON Stylus D78 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBGE.EXE /FU "C:\WINDOWS\TEMP\E_S82.tmp" /EF "HKLM" O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe" O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe O4 - HKCU\..\Run: [WOOKIT] C:\Program Files\Wanadoo\Shell.exe appLaunchClientZone.shl|DEFAULT=cnx|PARAM= O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe O4 - HKCU\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: Web Anti-Virus - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\WINDOWS\system32\shdocvw.dll O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/resources/MSNPUpld.cab O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab O18 - Protocol: bw+0 - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw+0s - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw-0 - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw-0s - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw00 - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw00s - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw10 - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw10s - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw20 - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw20s - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw30 - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw30s - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw40 - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw40s - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw50 - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw50s - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw60 - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw60s - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw70 - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw70s - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw80 - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw80s - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw90 - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw90s - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwa0 - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwa0s - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwb0 - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwb0s - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwc0 - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwc0s - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwd0 - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwd0s - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwe0 - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwe0s - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwf0 - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwf0s - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll O18 - Protocol: bwg0 - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwg0s - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwh0 - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwh0s - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwi0 - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwi0s - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwj0 - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwj0s - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwk0 - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwk0s - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwl0 - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwl0s - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwm0 - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwm0s - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwn0 - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwn0s - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwo0 - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwo0s - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwp0 - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwp0s - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwq0 - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwq0s - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwr0 - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwr0s - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bws0 - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bws0s - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwt0 - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwt0s - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwu0 - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwu0s - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwv0 - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwv0s - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bww0 - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bww0s - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwx0 - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwx0s - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwy0 - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwy0s - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwz0 - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwz0s - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll O18 - Protocol: offline-8876480 - {4990D5BC-E7A2-457F-9487-456DB5922AC7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe O23 - Service: GhostStartService - Symantec Corporation - C:\Program Files\Symantec\Norton Ghost 2003\GhostStartService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe O23 - Service: InCD Helper (read only) (InCDsrvR) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\MSCSPTISRV.exe O23 - Service: MD Simple Burner Service (NetMDSB) - Sony Corporation - C:\Program Files\Sony\MD Simple Burner\NetMDSB.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exe O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe O23 - Service: TeamViewer 4 (TeamViewer4) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version4\TeamViewer_Service.exe

Desactive ton antivirus le temps de la manip ainsi que ton parefeu si présent &#9654 Télécharge List&Kill'em et enregistre-le sur ton bureau Il ne necessite pas d'installation &#9654double clic (clic droit "executer en tant qu'administrateur" pour Vista) pour lancer le scan choisis la langue puis choisis l'option 1 = Mode Recherche &#9654laisse travailler l'outil le rapport va s'afficher , une fois le scan fini &#9654&#9654&#9654&#9654&#9654&#9654&#9654 ATTENTION : Efface ton adresse IP stp !!!! ici : [121]: KB973815 - Update [122]: KB973869 - Update [123]: XpsEPSC Carte(s) r‚seau: 4 carte(s) r‚seau install‚e(s). [01]: Bluetooth PAN Network Adapter Nom de la connexion : Connexion au r‚seau local 2 tat : Support d‚connect‚ [02]: Intel(R) PRO/1000 CT Network Connection Nom de la connexion : Connexion au r‚seau local DHCP activ‚ : Non Adresse(s) IP [01] : 192.168.0.11 [03]: VirtualBox Host-Only Ethernet Adapter Nom de la connexion : VirtualBox Host-Only Network DHCP activ‚ : Non Adresse(s) IP [01] : 192.168.56.1 [04]: VirtualBox Host-Only Ethernet Adapter Nom de la connexion : VirtualBox Host-Only Network #2 DHCP activ‚ : Non Adresse(s) IP [01] : 192.168.217.1 Nom de l'image PIDÿ Nom de la sessio Num‚ro d Utilisation ========================= ====== ================ ======== ============ System Idle Process 0 Console 0 16 Ko System 4 Console 0 244 Ko smss.exe 916 Console 0 400 Ko csrss.exe 972 Console 0 4ÿ456 Ko winlogon.exe 996 Console 0 3ÿ536 Ko &#9654 colle le contenu dans ta prochaine réponse

List'em by g3n-h@ckm@n 1.0.2.8 updated on 23.08.2009 ::::: 13.00 Microsoft Windows XP [version 5.1.2600] 24/08/2009 14:47:42,06 Nom de l'h“te: HOME-B33BC9FADD Nom du systŠme d'exploitation: Microsoft Windows XP Professionnel Version du systŠme: 5.1.2600 Service Pack 3 version 2600 Fabricant du systŠme d'exploitation: Microsoft Corporation Configuration du systŠme d'exploitation: Station de travail autonome Type de version du systŠme d'exploitation: Multiprocessor Free Propri‚taire enregistr‚ÿ: MILLOT Organisation enregistr‚eÿ: HOME Identificateur de produit: 76413-OEM-0080652-14936 Date d'installation originale: 14/11/2008, 17:51:22 Dur‚e d'activit‚ systŠme: 0 jours, 1 heures, 21 minutes, 32 secondes Fabricant du systŠme: INTEL_ ModŠle du systŠme: D945PVS_ Type du systŠme: X86-based PC Processeur(s): 1 processeur(s) install‚(s). [01]: x86 Family 15 Model 4 Stepping 3 GenuineIntel ~3000 MHz Version du BIOS: INTEL - 32 R‚pertoire Windows: C:\WINDOWS R‚pertoire systŠme: C:\WINDOWS\system32 P‚riph‚rique d'amor‡age: \Device\HarddiskVolume1 Option r‚gionale du systŠme: fr;Fran‡ais (France) ParamŠtres r‚gionaux d'entr‚eÿ: fr;Fran‡ais (France) Fuseau horaire: N/D M‚moire physique totale: 510 Mo M‚moire physique disponible: 163 Mo M‚moire virtuelle : taille maximale: 2ÿ048 Mo M‚moire virtuelle : disponible: 2ÿ008 Mo M‚moire virtuelle : en cours d'utilisation: 40 Mo Emplacements des fichiers d'‚change: c:\pagefile.sys Domaine: WORKGROUP Serveur d'ouverture de session: \\HOME-B33BC9FADD Correctif(s): 134 Corrections install‚es. [01]: File 1 [02]: File 1 [03]: File 1 [04]: File 1 [05]: File 1 [06]: File 1 [07]: File 1 [08]: File 1 [09]: File 1 [10]: File 1 [11]: File 1 [12]: File 1 [13]: File 1 [14]: File 1 [15]: File 1 [16]: File 1 [17]: File 1 [18]: File 1 [19]: File 1 [20]: File 1 [21]: File 1 [22]: File 1 [23]: File 1 [24]: File 1 [25]: File 1 [26]: File 1 [27]: File 1 [28]: File 1 [29]: File 1 [30]: File 1 [31]: File 1 [32]: File 1 [33]: File 1 [34]: File 1 [35]: File 1 [36]: File 1 [37]: File 1 [38]: File 1 [39]: File 1 [40]: File 1 [41]: File 1 [42]: File 1 [43]: File 1 [44]: File 1 [45]: File 1 [46]: File 1 [47]: File 1 [48]: File 1 [49]: File 1 [50]: File 1 [51]: File 1 [52]: File 1 [53]: File 1 [54]: File 1 [55]: File 1 [56]: File 1 [57]: File 1 [58]: File 1 [59]: File 1 [60]: Q147222 [61]: KB887998 - QFE [62]: KB930494 - QFE [63]: SP3 - SP [64]: Q927978 [65]: Q936181 [66]: Q954430 [67]: KB952069_WM9 [68]: KB973540_WM9 [69]: KB917734_WMP10 [70]: KB936782_WMP10 [71]: KB925398_WMP64 [72]: KB923689 [73]: KB941569 [74]: KB972260-IE8 - Update [75]: KB972636-IE8 - Update [76]: KB936929 - Service Pack [77]: KB923561 - Update [78]: KB938464 - Update [79]: KB938464-v2 - Update [80]: KB946648 - Update [81]: KB950762 - Update [82]: KB950974 - Update [83]: KB951066 - Update [84]: KB951072-v2 - Update [85]: KB951376 - Update [86]: KB951376-v2 - Update [87]: KB951698 - Update [88]: KB951748 - Update [89]: KB951978 - Update [90]: KB952004 - Update [91]: KB952287 - Update [92]: KB952954 - Update [93]: KB954211 - Update [94]: KB954459 - Update [95]: KB954600 - Update [96]: KB955069 - Update [97]: KB955839 - Update [98]: KB956390 - Update [99]: KB956572 - Update [100]: KB956744 - Update [101]: KB956802 - Update [102]: KB956803 - Update [103]: KB956841 - Update [104]: KB957095 - Update [105]: KB957097 - Update [106]: KB958215 - Update [107]: KB958644 - Update [108]: KB958687 - Update [109]: KB958690 - Update [110]: KB959426 - Update [111]: KB960225 - Update [112]: KB960714 - Update [113]: KB960715 - Update [114]: KB960803 - Update [115]: KB960859 - Update [116]: KB961371 - Update [117]: KB961373 - Update [118]: KB961501 - Update [119]: KB963027 - Update [120]: KB967715 - Update [121]: KB968537 - Update [122]: KB969897 - Update [123]: KB969898 - Update [124]: KB970238 - Update [125]: KB971557 - Update [126]: KB971633 - Update [127]: KB971657 - Update [128]: KB972260 - Update [129]: KB973346 - Update [130]: KB973354 - Update [131]: KB973507 - Update [132]: KB973815 - Update [133]: KB973869 - Update [134]: KB835221WXP - Update Carte(s) r‚seau: 3 carte(s) r‚seau install‚e(s). [01]: Intel(R) PRO/1000 PM Network Connection Nom de la connexion : Connexion au r‚seau local tat : Support d‚connect‚ [02]: Carte r‚seau 1394 Nom de la connexion : Connexion 1394 2 DHCP activ‚ : Oui Serveur DHCP : N/D Adresse(s) IP [03]: ADI USB Remote NDIS Network Device Nom de la connexion : Connexion au r‚seau local 12 DHCP activ‚ : Oui Serveur DHCP : Adresse(s) IP [01] : 192.168.1.11 Nom de l'image PIDÿ Nom de la sessio Num‚ro d Utilisation ========================= ====== ================ ======== ============ System Idle Process 0 Console 0 28 Ko System 4 Console 0 74ÿ432 Ko smss.exe 780 Console 0 180 Ko csrss.exe 844 Console 0 3ÿ452 Ko winlogon.exe 868 Console 0 3ÿ424 Ko services.exe 912 Console 0 3ÿ064 Ko lsass.exe 924 Console 0 1ÿ624 Ko svchost.exe 1084 Console 0 3ÿ260 Ko svchost.exe 1192 Console 0 2ÿ972 Ko svchost.exe 1372 Console 0 18ÿ232 Ko InCDsrv.exe 1396 Console 0 1ÿ792 Ko svchost.exe 1576 Console 0 2ÿ468 Ko svchost.exe 1672 Console 0 5ÿ084 Ko spoolsv.exe 1864 Console 0 2ÿ848 Ko LVPrcSrv.exe 1904 Console 0 1ÿ112 Ko svchost.exe 1952 Console 0 1ÿ872 Ko AppleMobileDeviceService. 1984 Console 0 1ÿ184 Ko avgwdsvc.exe 2004 Console 0 2ÿ580 Ko mDNSResponder.exe 2020 Console 0 2ÿ020 Ko ehRecvr.exe 168 Console 0 1ÿ376 Ko ehSched.exe 220 Console 0 2ÿ248 Ko FTRTSVC.exe 300 Console 0 764 Ko GhostStartService.exe 428 Console 0 904 Ko jqs.exe 452 Console 0 1ÿ384 Ko LSSrvc.exe 556 Console 0 796 Ko avgrsx.exe 664 Console 0 540 Ko NetMDSB.exe 680 Console 0 4ÿ960 Ko avgnsx.exe 688 Console 0 2ÿ428 Ko avgcsrvx.exe 720 Console 0 428 Ko nvsvc32.exe 1320 Console 0 1ÿ960 Ko svchost.exe 1584 Console 0 7ÿ160 Ko TeamViewer_Service.exe 1588 Console 0 2ÿ220 Ko avgemc.exe 1728 Console 0 648 Ko explorer.exe 2040 Console 0 23ÿ428 Ko TeamViewer.exe 1296 Console 0 29ÿ600 Ko avgcsrvx.exe 1668 Console 0 3ÿ228 Ko dllhost.exe 2480 Console 0 2ÿ652 Ko alg.exe 2788 Console 0 1ÿ856 Ko wmiapsrv.exe 2876 Console 0 2ÿ704 Ko ehtray.exe 3376 Console 0 1ÿ588 Ko InCD.exe 3468 Console 0 2ÿ084 Ko ehmsas.exe 3584 Console 0 1ÿ516 Ko CameraAssistant.exe 3596 Console 0 3ÿ284 Ko ElkCtrl.exe 3700 Console 0 2ÿ248 Ko apdproxy.exe 3768 Console 0 3ÿ544 Ko LVCOMSX.EXE 3932 Console 0 2ÿ476 Ko OpWareSE4.exe 4056 Console 0 1ÿ104 Ko BJMYPRT.EXE 1632 Console 0 1ÿ512 Ko jusched.exe 1248 Console 0 1ÿ612 Ko TaskBarIcon.exe 2100 Console 0 3ÿ584 Ko LogitechDesktopMessenger. 2156 Console 0 1ÿ904 Ko msmsgs.exe 916 Console 0 2ÿ556 Ko ctfmon.exe 2332 Console 0 2ÿ740 Ko dslmon.exe 1284 Console 0 2ÿ512 Ko GestionnaireInternet.exe 2952 Console 0 11ÿ284 Ko ComComp.exe 524 Console 0 5ÿ804 Ko Toaster.exe 3344 Console 0 4ÿ664 Ko Inactivity.exe 3364 Console 0 4ÿ644 Ko PollingModule.exe 3480 Console 0 5ÿ280 Ko ALERTM~1.EXE 3720 Console 0 2ÿ964 Ko Watch.exe 2260 Console 0 1ÿ360 Ko wscntfy.exe 3580 Console 0 2ÿ948 Ko svchost.exe 1332 Console 0 3ÿ592 Ko List_Killem.exe 324 Console 0 5ÿ512 Ko cmd.exe 2168 Console 0 1ÿ936 Ko wmiprvse.exe 2828 Console 0 8ÿ292 Ko wmiprvse.exe 1964 Console 0 4ÿ960 Ko tasklist.exe 828 Console 0 5ÿ016 Ko Infections : ========== ¤¤¤¤¤¤¤¤¤¤ Fichiers et dossiers presents : "C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat" "C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat" "C:\WINDOWS\bwUnin-7.2.0.137-8876480SL.exe" "C:\WINDOWS\SlantAdj.dll" "C:\WINDOWS\System32\prnjobs.vbs" ¤¤¤¤¤¤¤¤¤¤ Clés de registre Presentes : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536 ¤¤¤¤¤¤¤¤¤¤ C:\WINDOWS\Prefetch : ADOBE_UPDATER.EXE-32E1E9B7.pf ALERTM~1.EXE-1C0AE839.pf APDPROXY.EXE-397EBF29.pf APPLEMOBILEDEVICESERVICE.EXE-2220AFA1.pf ATTRIB.EXE-39EAFB02.pf AVGCMGR.EXE-1D29CBA8.pf AVGCSRVX.EXE-2F45B5C7.pf AVGEMC.EXE-008A9DEE.pf AVGNSX.EXE-3B2A5A79.pf AVGRSX.EXE-1893543C.pf AVGTRAY.EXE-17920267.pf AVGUI.EXE-388E181A.pf AVGUPD.EXE-388A6FCA.pf AVGWDSVC.EXE-1AC4BEE6.pf BJMYPRT.EXE-18781E4F.pf CAMERAASSISTANT.EXE-0F386179.pf CLEANMGR.EXE-1F86EA8E.pf CMD.EXE-087B4001.pf CMDTSF.EXE-1F39BECB.pf CNMSE8T.EXE-2B61AD51.pf CNSLMAIN.EXE-18EDD5BC.pf COMCOMP.EXE-01668373.pf COMCOMP.EXE-063CBADA.pf CSRSS.EXE-12B63473.pf CTFMON.EXE-0E17969B.pf DEFRAG.EXE-273F131E.pf DFRGNTFS.EXE-269967DF.pf DRWTSN32.EXE-2B4B52AC.pf DSLMON.EXE-1476FDB3.pf DWWIN.EXE-30875ADC.pf ECHOX.EXE-0EC32D49.pf EHMSAS.EXE-181DA6C9.pf EHREC.EXE-3B4F59C8.pf EHTRAY.EXE-02EFC9BD.pf ELKCTRL.EXE-1A83F79C.pf EULA.EXE-2546E412.pf EXPLORER.EXE-082F38A9.pf E_FATIBGE.EXE-2FF22BEB.pf FINDSTR.EXE-0CA6274B.pf FIREFOX.EXE-28641590.pf FIXCFG.EXE-293DC071.pf GESTIONNAIREINTERNET.EXE-0D9C1BD4.pf GESTIONNAIREINTERNET.EXE-246342AC.pf GESTMAJ.EXE-26927B6B.pf GESTMAJ.EXE-2B68B2D2.pf GHOSTSTARTTRAYAPP.EXE-0DF01D09.pf HELPSVC.EXE-2878DDA2.pf IEXPLORE.EXE-27122324.pf INACTIVITY.EXE-054B684A.pf INCD.EXE-0A3D304D.pf INSTALLHELPER.EXE-349129CE.pf INTELAUDIOSTUDIO.EXE-14309C37.pf IPODSERVICE.EXE-3192DE38.pf ITUNESHELPER.EXE-15823303.pf JAVAW.EXE-2DC32ABC.pf JAVAWS.EXE-021AC9A9.pf JQSNOTIFY.EXE-24AE4A36.pf JUSCHED.EXE-25206883.pf Layout.ini LDMCONF.EXE-2E2A6E1D.pf LISTEM.EXE-359606DC.pf LIST_KILLEM.EXE-25BD3C26.pf LOGITECHDESKTOPMESSENGER.EXE-1F2075EE.pf LOGON.SCR-151EFAEA.pf LOGONUI.EXE-0AF22957.pf LVCOMSX.EXE-0AC1D558.pf MODE.COM-31685BAE.pf MSIMN.EXE-38BA891D.pf MSMSGS.EXE-2B6052DE.pf MSNMSGR.EXE-366A1A81.pf NEROCHECK.EXE-092C6DFA.pf NET.EXE-171DB0D9.pf NETPRO.EXE-020CC3BA.pf NOTEPAD.EXE-189578DA.pf NOTEPAD.EXE-336351A9.pf NTOSBOOT-B00DFAAD.pf NTVDM.EXE-1A10A423.pf NWIZ.EXE-2D0F9FBC.pf OPWARESE4.EXE-04F76A6E.pf OSA.EXE-2CD63980.pf OTL.EXE-023C1F34.pf POLLINGMODULE.EXE-2C738EAB.pf QTTASK.EXE-342507FB.pf QUICKSTART.EXE-24C38DA1.pf READER_SL.EXE-2B4EA1CB.pf REALSCHED.EXE-04BEC5CC.pf REG.EXE-0D2A95F7.pf RUNDLL32.EXE-1340EF7F.pf RUNDLL32.EXE-13DA0E71.pf RUNDLL32.EXE-2A94BB85.pf RUNDLL32.EXE-35A483DA.pf RUNDLL32.EXE-3ACEEC28.pf RUNDLL32.EXE-415F88EC.pf RUNDLL32.EXE-4489B61B.pf RUNDLL32.EXE-451FC2C0.pf RUNDLL32.EXE-4BD19A5C.pf SED.EXE-2A032EBB.pf SHELL.EXE-044C0E2F.pf SHELL.EXE-3189A993.pf SOFFICE.BIN-01E25E9C.pf SSBKGDUPDATE.EXE-070949C7.pf SVCHOST.EXE-3530F672.pf SWREG.EXE-2A961210.pf SYSTEMINFO.EXE-32ED1FAB.pf TASKBARICON.EXE-09096496.pf TASKLIST.EXE-10D94B23.pf TEAMVIEWER.EXE-3592AB02.pf TOASTER.EXE-1CBF7015.pf UNINSTAL.EXE-0DF0BDC2.pf UNINSTALL ADR.EXE-06F93FCD.pf UPLOAD.EXE-26B20106.pf USERINIT.EXE-30B18140.pf USNSVC.EXE-373E4DBC.pf VERCLSID.EXE-3667BD89.pf WATCH.EXE-0DACDE18.pf WATCH.EXE-31EDBDF6.pf WINHLP32.EXE-2C18E975.pf WINLOGON.EXE-32C57D49.pf WINWORD.EXE-29F5CB89.pf WMIPRVSE.EXE-28F301A9.pf WOOBROWSER.EXE-2D710CF8.pf WSCNTFY.EXE-1B24F5EB.pf WUAUCLT.EXE-399A8E72.pf ZIP.EXE-296EED19.pf ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤( EOF )¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

bien : Redemarre en mode sans echec &#9654 Relance List&Kill'em comme tu as fait pour l'option 1 (soit en clic droit pour vista), mais cette fois-ci : &#9654 choisis l'option 2 = Mode Destruction laisse travailler l'outil apres les verifications , un rapport va s'ouvrir. &#9654 ferme-le. un deuxieme rapport va s'ouvrir , &#9654 colle son contenu dans ta reponse

Kill'em by g3n-h@ckm@n 1.0.2.8 updated on 23.08.2009 ::::: 13.00 Microsoft Windows XP [version 5.1.2600] 24/08/2009 16:07:36,75 Fichiers analysés : ================= ¤¤¤¤¤¤¤¤¤¤ Fichiers et dossiers presents : "C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat" "C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat" "C:\WINDOWS\bwUnin-7.2.0.137-8876480SL.exe" "C:\WINDOWS\SlantAdj.dll" "C:\WINDOWS\System32\prnjobs.vbs" ¤¤¤¤¤¤¤¤¤¤ Action sur les fichiers : Quarantaine : bwUnin-7.2.0.137-8876480SL.exe.Kill'em prnjobs.vbs.Kill'em qmgr0.dat.Kill'em qmgr1.dat.Kill'em SlantAdj.dll.Kill'em ¤¤¤¤¤¤¤¤¤¤ Verification : Infections : ========== ¤¤¤¤¤¤¤¤¤¤ Fichiers et dossiers presents : ¤¤¤¤¤¤¤¤¤¤ Clés de registre Presentes : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536 ¤¤¤¤¤¤¤¤¤¤ C:\WINDOWS\Prefetch : Layout.ini NTOSBOOT-B00DFAAD.pf ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤( EOF )¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

ok redemarre l'ordi et refais OTL comme précité

le scan avec les cases a cocher et tout

C'est reparti : OTL.txt : https://www.cjoint.com/?jbjQ21cpwN Extras.txt : https://www.cjoint.com/?jbjRLzXDJ7

salut desole je n'ai plus la possibilité d'aider pour le moment , je passe mes dernieres minutes pour prevenir desolé et merci .

Dommage, tu ne connaitrais pas quelqu'un qui pourrait prendre le relais ?

PC à analyser : virus navigateur orange - Page 2

Réponse 21 / 34
gen-hackman

Desactive ton antivirus le temps de la manip ainsi que ton parefeu si présent

▶ Télécharge List&Kill'em et enregistre-le sur ton bureau

Il ne necessite pas d'installation

▶double clic (clic droit "executer en tant qu'administrateur" pour Vista) pour lancer le scan

choisis la langue puis choisis l'option 1 = Mode Recherche

▶laisse travailler l'outil

le rapport va s'afficher , une fois le scan fini

▶▶▶▶▶▶▶ ATTENTION : Efface ton adresse IP stp !!!!

ici :

[121]: KB973815 - Update
[122]: KB973869 - Update
[123]: XpsEPSC
Carte(s) r‚seau: 4 carte(s) r‚seau install‚e(s).
[01]: Bluetooth PAN Network Adapter
Nom de la connexion : Connexion au r‚seau local 2
tat : Support d‚connect‚
[02]: Intel(R) PRO/1000 CT Network Connection
Nom de la connexion : Connexion au r‚seau local
DHCP activ‚ : Non
Adresse(s) IP
[01] : 192.168.0.11
[03]: VirtualBox Host-Only Ethernet Adapter
Nom de la connexion : VirtualBox Host-Only Network
DHCP activ‚ : Non
Adresse(s) IP
[01] : 192.168.56.1
[04]: VirtualBox Host-Only Ethernet Adapter
Nom de la connexion : VirtualBox Host-Only Network #2
DHCP activ‚ : Non
Adresse(s) IP
[01] : 192.168.217.1

Nom de l'image PIDÿ Nom de la sessio Num‚ro d Utilisation
========================= ====== ================ ======== ============
System Idle Process 0 Console 0 16 Ko
System 4 Console 0 244 Ko
smss.exe 916 Console 0 400 Ko
csrss.exe 972 Console 0 4ÿ456 Ko
winlogon.exe 996 Console 0 3ÿ536 Ko

▶ colle le contenu dans ta prochaine réponse
0
Réponse 22 / 34
matduchesne

List'em by g3n-h@ckm@n 1.0.2.8

updated on 23.08.2009 ::::: 13.00

Microsoft Windows XP [version 5.1.2600]

24/08/2009 14:47:42,06

Nom de l'h“te: HOME-B33BC9FADD
Nom du systŠme d'exploitation: Microsoft Windows XP Professionnel
Version du systŠme: 5.1.2600 Service Pack 3 version 2600
Fabricant du systŠme d'exploitation: Microsoft Corporation
Configuration du systŠme d'exploitation: Station de travail autonome
Type de version du systŠme d'exploitation: Multiprocessor Free
Propri‚taire enregistr‚ÿ: MILLOT
Organisation enregistr‚eÿ: HOME
Identificateur de produit: 76413-OEM-0080652-14936
Date d'installation originale: 14/11/2008, 17:51:22
Dur‚e d'activit‚ systŠme: 0 jours, 1 heures, 21 minutes, 32 secondes
Fabricant du systŠme: INTEL_
ModŠle du systŠme: D945PVS_
Type du systŠme: X86-based PC
Processeur(s): 1 processeur(s) install‚(s).
[01]: x86 Family 15 Model 4 Stepping 3 GenuineIntel ~3000 MHz
Version du BIOS: INTEL - 32
R‚pertoire Windows: C:\WINDOWS
R‚pertoire systŠme: C:\WINDOWS\system32
P‚riph‚rique d'amor‡age: \Device\HarddiskVolume1
Option r‚gionale du systŠme: fr;Fran‡ais (France)
ParamŠtres r‚gionaux d'entr‚eÿ: fr;Fran‡ais (France)
Fuseau horaire: N/D
M‚moire physique totale: 510 Mo
M‚moire physique disponible: 163 Mo
M‚moire virtuelle : taille maximale: 2ÿ048 Mo
M‚moire virtuelle : disponible: 2ÿ008 Mo
M‚moire virtuelle : en cours d'utilisation: 40 Mo
Emplacements des fichiers d'‚change: c:\pagefile.sys
Domaine: WORKGROUP
Serveur d'ouverture de session: \\HOME-B33BC9FADD
Correctif(s): 134 Corrections install‚es.
[01]: File 1
[02]: File 1
[03]: File 1
[04]: File 1
[05]: File 1
[06]: File 1
[07]: File 1
[08]: File 1
[09]: File 1
[10]: File 1
[11]: File 1
[12]: File 1
[13]: File 1
[14]: File 1
[15]: File 1
[16]: File 1
[17]: File 1
[18]: File 1
[19]: File 1
[20]: File 1
[21]: File 1
[22]: File 1
[23]: File 1
[24]: File 1
[25]: File 1
[26]: File 1
[27]: File 1
[28]: File 1
[29]: File 1
[30]: File 1
[31]: File 1
[32]: File 1
[33]: File 1
[34]: File 1
[35]: File 1
[36]: File 1
[37]: File 1
[38]: File 1
[39]: File 1
[40]: File 1
[41]: File 1
[42]: File 1
[43]: File 1
[44]: File 1
[45]: File 1
[46]: File 1
[47]: File 1
[48]: File 1
[49]: File 1
[50]: File 1
[51]: File 1
[52]: File 1
[53]: File 1
[54]: File 1
[55]: File 1
[56]: File 1
[57]: File 1
[58]: File 1
[59]: File 1
[60]: Q147222
[61]: KB887998 - QFE
[62]: KB930494 - QFE
[63]: SP3 - SP
[64]: Q927978
[65]: Q936181
[66]: Q954430
[67]: KB952069_WM9
[68]: KB973540_WM9
[69]: KB917734_WMP10
[70]: KB936782_WMP10
[71]: KB925398_WMP64
[72]: KB923689
[73]: KB941569
[74]: KB972260-IE8 - Update
[75]: KB972636-IE8 - Update
[76]: KB936929 - Service Pack
[77]: KB923561 - Update
[78]: KB938464 - Update
[79]: KB938464-v2 - Update
[80]: KB946648 - Update
[81]: KB950762 - Update
[82]: KB950974 - Update
[83]: KB951066 - Update
[84]: KB951072-v2 - Update
[85]: KB951376 - Update
[86]: KB951376-v2 - Update
[87]: KB951698 - Update
[88]: KB951748 - Update
[89]: KB951978 - Update
[90]: KB952004 - Update
[91]: KB952287 - Update
[92]: KB952954 - Update
[93]: KB954211 - Update
[94]: KB954459 - Update
[95]: KB954600 - Update
[96]: KB955069 - Update
[97]: KB955839 - Update
[98]: KB956390 - Update
[99]: KB956572 - Update
[100]: KB956744 - Update
[101]: KB956802 - Update
[102]: KB956803 - Update
[103]: KB956841 - Update
[104]: KB957095 - Update
[105]: KB957097 - Update
[106]: KB958215 - Update
[107]: KB958644 - Update
[108]: KB958687 - Update
[109]: KB958690 - Update
[110]: KB959426 - Update
[111]: KB960225 - Update
[112]: KB960714 - Update
[113]: KB960715 - Update
[114]: KB960803 - Update
[115]: KB960859 - Update
[116]: KB961371 - Update
[117]: KB961373 - Update
[118]: KB961501 - Update
[119]: KB963027 - Update
[120]: KB967715 - Update
[121]: KB968537 - Update
[122]: KB969897 - Update
[123]: KB969898 - Update
[124]: KB970238 - Update
[125]: KB971557 - Update
[126]: KB971633 - Update
[127]: KB971657 - Update
[128]: KB972260 - Update
[129]: KB973346 - Update
[130]: KB973354 - Update
[131]: KB973507 - Update
[132]: KB973815 - Update
[133]: KB973869 - Update
[134]: KB835221WXP - Update
Carte(s) r‚seau: 3 carte(s) r‚seau install‚e(s).
[01]: Intel(R) PRO/1000 PM Network Connection
Nom de la connexion : Connexion au r‚seau local
tat : Support d‚connect‚
[02]: Carte r‚seau 1394
Nom de la connexion : Connexion 1394 2
DHCP activ‚ : Oui
Serveur DHCP : N/D
Adresse(s) IP
[03]: ADI USB Remote NDIS Network Device
Nom de la connexion : Connexion au r‚seau local 12
DHCP activ‚ : Oui
Serveur DHCP :
Adresse(s) IP
[01] : 192.168.1.11

Nom de l'image PIDÿ Nom de la sessio Num‚ro d Utilisation
========================= ====== ================ ======== ============
System Idle Process 0 Console 0 28 Ko
System 4 Console 0 74ÿ432 Ko
smss.exe 780 Console 0 180 Ko
csrss.exe 844 Console 0 3ÿ452 Ko
winlogon.exe 868 Console 0 3ÿ424 Ko
services.exe 912 Console 0 3ÿ064 Ko
lsass.exe 924 Console 0 1ÿ624 Ko
svchost.exe 1084 Console 0 3ÿ260 Ko
svchost.exe 1192 Console 0 2ÿ972 Ko
svchost.exe 1372 Console 0 18ÿ232 Ko
InCDsrv.exe 1396 Console 0 1ÿ792 Ko
svchost.exe 1576 Console 0 2ÿ468 Ko
svchost.exe 1672 Console 0 5ÿ084 Ko
spoolsv.exe 1864 Console 0 2ÿ848 Ko
LVPrcSrv.exe 1904 Console 0 1ÿ112 Ko
svchost.exe 1952 Console 0 1ÿ872 Ko
AppleMobileDeviceService. 1984 Console 0 1ÿ184 Ko
avgwdsvc.exe 2004 Console 0 2ÿ580 Ko
mDNSResponder.exe 2020 Console 0 2ÿ020 Ko
ehRecvr.exe 168 Console 0 1ÿ376 Ko
ehSched.exe 220 Console 0 2ÿ248 Ko
FTRTSVC.exe 300 Console 0 764 Ko
GhostStartService.exe 428 Console 0 904 Ko
jqs.exe 452 Console 0 1ÿ384 Ko
LSSrvc.exe 556 Console 0 796 Ko
avgrsx.exe 664 Console 0 540 Ko
NetMDSB.exe 680 Console 0 4ÿ960 Ko
avgnsx.exe 688 Console 0 2ÿ428 Ko
avgcsrvx.exe 720 Console 0 428 Ko
nvsvc32.exe 1320 Console 0 1ÿ960 Ko
svchost.exe 1584 Console 0 7ÿ160 Ko
TeamViewer_Service.exe 1588 Console 0 2ÿ220 Ko
avgemc.exe 1728 Console 0 648 Ko
explorer.exe 2040 Console 0 23ÿ428 Ko
TeamViewer.exe 1296 Console 0 29ÿ600 Ko
avgcsrvx.exe 1668 Console 0 3ÿ228 Ko
dllhost.exe 2480 Console 0 2ÿ652 Ko
alg.exe 2788 Console 0 1ÿ856 Ko
wmiapsrv.exe 2876 Console 0 2ÿ704 Ko
ehtray.exe 3376 Console 0 1ÿ588 Ko
InCD.exe 3468 Console 0 2ÿ084 Ko
ehmsas.exe 3584 Console 0 1ÿ516 Ko
CameraAssistant.exe 3596 Console 0 3ÿ284 Ko
ElkCtrl.exe 3700 Console 0 2ÿ248 Ko
apdproxy.exe 3768 Console 0 3ÿ544 Ko
LVCOMSX.EXE 3932 Console 0 2ÿ476 Ko
OpWareSE4.exe 4056 Console 0 1ÿ104 Ko
BJMYPRT.EXE 1632 Console 0 1ÿ512 Ko
jusched.exe 1248 Console 0 1ÿ612 Ko
TaskBarIcon.exe 2100 Console 0 3ÿ584 Ko
LogitechDesktopMessenger. 2156 Console 0 1ÿ904 Ko
msmsgs.exe 916 Console 0 2ÿ556 Ko
ctfmon.exe 2332 Console 0 2ÿ740 Ko
dslmon.exe 1284 Console 0 2ÿ512 Ko
GestionnaireInternet.exe 2952 Console 0 11ÿ284 Ko
ComComp.exe 524 Console 0 5ÿ804 Ko
Toaster.exe 3344 Console 0 4ÿ664 Ko
Inactivity.exe 3364 Console 0 4ÿ644 Ko
PollingModule.exe 3480 Console 0 5ÿ280 Ko
ALERTM~1.EXE 3720 Console 0 2ÿ964 Ko
Watch.exe 2260 Console 0 1ÿ360 Ko
wscntfy.exe 3580 Console 0 2ÿ948 Ko
svchost.exe 1332 Console 0 3ÿ592 Ko
List_Killem.exe 324 Console 0 5ÿ512 Ko
cmd.exe 2168 Console 0 1ÿ936 Ko
wmiprvse.exe 2828 Console 0 8ÿ292 Ko
wmiprvse.exe 1964 Console 0 4ÿ960 Ko
tasklist.exe 828 Console 0 5ÿ016 Ko

Infections :
==========

¤¤¤¤¤¤¤¤¤¤ Fichiers et dossiers presents :

"C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat"
"C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat"
"C:\WINDOWS\bwUnin-7.2.0.137-8876480SL.exe"
"C:\WINDOWS\SlantAdj.dll"
"C:\WINDOWS\System32\prnjobs.vbs"

¤¤¤¤¤¤¤¤¤¤ Clés de registre Presentes :

HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536

¤¤¤¤¤¤¤¤¤¤ C:\WINDOWS\Prefetch :

ADOBE_UPDATER.EXE-32E1E9B7.pf
ALERTM~1.EXE-1C0AE839.pf
APDPROXY.EXE-397EBF29.pf
APPLEMOBILEDEVICESERVICE.EXE-2220AFA1.pf
ATTRIB.EXE-39EAFB02.pf
AVGCMGR.EXE-1D29CBA8.pf
AVGCSRVX.EXE-2F45B5C7.pf
AVGEMC.EXE-008A9DEE.pf
AVGNSX.EXE-3B2A5A79.pf
AVGRSX.EXE-1893543C.pf
AVGTRAY.EXE-17920267.pf
AVGUI.EXE-388E181A.pf
AVGUPD.EXE-388A6FCA.pf
AVGWDSVC.EXE-1AC4BEE6.pf
BJMYPRT.EXE-18781E4F.pf
CAMERAASSISTANT.EXE-0F386179.pf
CLEANMGR.EXE-1F86EA8E.pf
CMD.EXE-087B4001.pf
CMDTSF.EXE-1F39BECB.pf
CNMSE8T.EXE-2B61AD51.pf
CNSLMAIN.EXE-18EDD5BC.pf
COMCOMP.EXE-01668373.pf
COMCOMP.EXE-063CBADA.pf
CSRSS.EXE-12B63473.pf
CTFMON.EXE-0E17969B.pf
DEFRAG.EXE-273F131E.pf
DFRGNTFS.EXE-269967DF.pf
DRWTSN32.EXE-2B4B52AC.pf
DSLMON.EXE-1476FDB3.pf
DWWIN.EXE-30875ADC.pf
ECHOX.EXE-0EC32D49.pf
EHMSAS.EXE-181DA6C9.pf
EHREC.EXE-3B4F59C8.pf
EHTRAY.EXE-02EFC9BD.pf
ELKCTRL.EXE-1A83F79C.pf
EULA.EXE-2546E412.pf
EXPLORER.EXE-082F38A9.pf
E_FATIBGE.EXE-2FF22BEB.pf
FINDSTR.EXE-0CA6274B.pf
FIREFOX.EXE-28641590.pf
FIXCFG.EXE-293DC071.pf
GESTIONNAIREINTERNET.EXE-0D9C1BD4.pf
GESTIONNAIREINTERNET.EXE-246342AC.pf
GESTMAJ.EXE-26927B6B.pf
GESTMAJ.EXE-2B68B2D2.pf
GHOSTSTARTTRAYAPP.EXE-0DF01D09.pf
HELPSVC.EXE-2878DDA2.pf
IEXPLORE.EXE-27122324.pf
INACTIVITY.EXE-054B684A.pf
INCD.EXE-0A3D304D.pf
INSTALLHELPER.EXE-349129CE.pf
INTELAUDIOSTUDIO.EXE-14309C37.pf
IPODSERVICE.EXE-3192DE38.pf
ITUNESHELPER.EXE-15823303.pf
JAVAW.EXE-2DC32ABC.pf
JAVAWS.EXE-021AC9A9.pf
JQSNOTIFY.EXE-24AE4A36.pf
JUSCHED.EXE-25206883.pf
Layout.ini
LDMCONF.EXE-2E2A6E1D.pf
LISTEM.EXE-359606DC.pf
LIST_KILLEM.EXE-25BD3C26.pf
LOGITECHDESKTOPMESSENGER.EXE-1F2075EE.pf
LOGON.SCR-151EFAEA.pf
LOGONUI.EXE-0AF22957.pf
LVCOMSX.EXE-0AC1D558.pf
MODE.COM-31685BAE.pf
MSIMN.EXE-38BA891D.pf
MSMSGS.EXE-2B6052DE.pf
MSNMSGR.EXE-366A1A81.pf
NEROCHECK.EXE-092C6DFA.pf
NET.EXE-171DB0D9.pf
NETPRO.EXE-020CC3BA.pf
NOTEPAD.EXE-189578DA.pf
NOTEPAD.EXE-336351A9.pf
NTOSBOOT-B00DFAAD.pf
NTVDM.EXE-1A10A423.pf
NWIZ.EXE-2D0F9FBC.pf
OPWARESE4.EXE-04F76A6E.pf
OSA.EXE-2CD63980.pf
OTL.EXE-023C1F34.pf
POLLINGMODULE.EXE-2C738EAB.pf
QTTASK.EXE-342507FB.pf
QUICKSTART.EXE-24C38DA1.pf
READER_SL.EXE-2B4EA1CB.pf
REALSCHED.EXE-04BEC5CC.pf
REG.EXE-0D2A95F7.pf
RUNDLL32.EXE-1340EF7F.pf
RUNDLL32.EXE-13DA0E71.pf
RUNDLL32.EXE-2A94BB85.pf
RUNDLL32.EXE-35A483DA.pf
RUNDLL32.EXE-3ACEEC28.pf
RUNDLL32.EXE-415F88EC.pf
RUNDLL32.EXE-4489B61B.pf
RUNDLL32.EXE-451FC2C0.pf
RUNDLL32.EXE-4BD19A5C.pf
SED.EXE-2A032EBB.pf
SHELL.EXE-044C0E2F.pf
SHELL.EXE-3189A993.pf
SOFFICE.BIN-01E25E9C.pf
SSBKGDUPDATE.EXE-070949C7.pf
SVCHOST.EXE-3530F672.pf
SWREG.EXE-2A961210.pf
SYSTEMINFO.EXE-32ED1FAB.pf
TASKBARICON.EXE-09096496.pf
TASKLIST.EXE-10D94B23.pf
TEAMVIEWER.EXE-3592AB02.pf
TOASTER.EXE-1CBF7015.pf
UNINSTAL.EXE-0DF0BDC2.pf
UNINSTALL ADR.EXE-06F93FCD.pf
UPLOAD.EXE-26B20106.pf
USERINIT.EXE-30B18140.pf
USNSVC.EXE-373E4DBC.pf
VERCLSID.EXE-3667BD89.pf
WATCH.EXE-0DACDE18.pf
WATCH.EXE-31EDBDF6.pf
WINHLP32.EXE-2C18E975.pf
WINLOGON.EXE-32C57D49.pf
WINWORD.EXE-29F5CB89.pf
WMIPRVSE.EXE-28F301A9.pf
WOOBROWSER.EXE-2D710CF8.pf
WSCNTFY.EXE-1B24F5EB.pf
WUAUCLT.EXE-399A8E72.pf
ZIP.EXE-296EED19.pf

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤( EOF )¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
0
Réponse 23 / 34
gen-hackman

bien :

Redemarre en mode sans echec

▶ Relance List&Kill'em comme tu as fait pour l'option 1 (soit en clic droit pour vista),

mais cette fois-ci :

▶ choisis l'option 2 = Mode Destruction

laisse travailler l'outil

apres les verifications , un rapport va s'ouvrir.

▶ ferme-le.

un deuxieme rapport va s'ouvrir ,

▶ colle son contenu dans ta reponse
0
Réponse 24 / 34
matduchesne

Kill'em by g3n-h@ckm@n 1.0.2.8

updated on 23.08.2009 ::::: 13.00

Microsoft Windows XP [version 5.1.2600]

24/08/2009 16:07:36,75

Fichiers analysés :
=================

¤¤¤¤¤¤¤¤¤¤ Fichiers et dossiers presents :

"C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat"
"C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat"
"C:\WINDOWS\bwUnin-7.2.0.137-8876480SL.exe"
"C:\WINDOWS\SlantAdj.dll"
"C:\WINDOWS\System32\prnjobs.vbs"

¤¤¤¤¤¤¤¤¤¤ Action sur les fichiers :

Quarantaine :

bwUnin-7.2.0.137-8876480SL.exe.Kill'em
prnjobs.vbs.Kill'em
qmgr0.dat.Kill'em
qmgr1.dat.Kill'em
SlantAdj.dll.Kill'em

¤¤¤¤¤¤¤¤¤¤ Verification :

Infections :
==========

¤¤¤¤¤¤¤¤¤¤ Fichiers et dossiers presents :

¤¤¤¤¤¤¤¤¤¤ Clés de registre Presentes :

HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536

¤¤¤¤¤¤¤¤¤¤ C:\WINDOWS\Prefetch :

Layout.ini
NTOSBOOT-B00DFAAD.pf

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤( EOF )¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
0
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
Réponse 25 / 34
gen-hackman

ok redemarre l'ordi et refais OTL comme précité
0
Réponse 26 / 34
matduchesne

Le scan ? ou le custom fixes ?
0
Réponse 27 / 34
gen-hackman

le scan avec les cases a cocher et tout
0
Réponse 28 / 34
matduchesne

C'est reparti :

OTL.txt :
https://www.cjoint.com/?jbjQ21cpwN

Extras.txt :
https://www.cjoint.com/?jbjRLzXDJ7
0
Réponse 29 / 34
gen-hackman

salut desole je n'ai plus la possibilité d'aider pour le moment , je passe mes dernieres minutes pour prevenir

desolé et merci .
0
Réponse 30 / 34
matduchesne

Dommage, tu ne connaitrais pas quelqu'un qui pourrait prendre le relais ?
0
Réponse 31 / 34
gen-hackman

je vais prevenir quelqu'un de bon
0
Réponse 32 / 34
matduchesne

Merci bien et merci pour l'aide déjà fournie, au plaisir de se revoir sur le forum
0
Réponse 33 / 34
gen-hackman

de rien je ne sais quand je pourrai etre de retour donc...
0
Réponse 34 / 34
matduchesne

Bonjour,
Il y aurait il un spécialiste sur ce forum pour m'aider à nettoyer ce PC ?

Merci d'avance
0

Newsletters