Virus TR/Dldr.WintrmBY.33

Bonsoir
ci-dessous les rapports demandés. Je ne comprend pas qu'avec Antivir, Search and destroy, malwarebytes, j'attrape encore des virus.
Merci pour ton aide
Milou

Malwarebytes' Anti-Malware 1.36
Version de la base de données: 2078
Windows 5.1.2600 Service Pack 3

18/08/2009 20:10:37
mbam-log-2009-08-18 (20-10-37).txt

Type de recherche: Examen rapide
Eléments examinés: 77503
Temps écoulé: 5 minute(s), 55 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)



Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:17:08, on 18/08/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Safe mode

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Documents and Settings\M.Catoire\Bureau\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechCameraAssistant] C:\Program Files\Logitech\Video\CameraAssistant.exe
O4 - HKLM\..\Run: [LogitechVideo[inspector]] C:\Program Files\Logitech\Video\InstallHelper.exe /inspect
O4 - HKLM\..\Run: [LogitechCameraService(E)] C:\WINDOWS\system32\ElkCtrl.exe /automation
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\M.Catoire\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe" -s
O4 - Startup: Notification de cadeaux MSN.lnk = C:\Documents and Settings\M.Catoire\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
O4 - Startup: Outil de notification Live Search.lnk = C:\Documents and Settings\M.Catoire\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} (GoPetsWeb Control) - https://secure.gopetslive.com/dev/GoPetsWeb.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{04EF8218-C993-4B7A-92C2-E4E5AD4F65C5}: NameServer = 194.117.200.11,194.117.200.16
O17 - HKLM\System\CS1\Services\Tcpip\..\{04EF8218-C993-4B7A-92C2-E4E5AD4F65C5}: NameServer = 194.117.200.11,194.117.200.16
O17 - HKLM\System\CS2\Services\Tcpip\..\{04EF8218-C993-4B7A-92C2-E4E5AD4F65C5}: NameServer = 194.117.200.11,194.117.200.16
O18 - Protocol: bw+0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: TomTomHOMEService - TomTom - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe

Bonjour
Mises a jour faites, et rapport GenProc ci-dessous.
Cordialement.
Milou

Rapport GenProc 2.615 [1] - 19/08/2009 à 12:58:16
@ Windows XP Service Pack 3 - Mode normal
@ Mozilla Firefox (3.0.13) [Navigateur par défaut]

~~ "C:\WINDOWS\sed.exe" a été renommé sed.exe_RenameGenProc ~~
~~ "C:\WINDOWS\grep.exe" a été renommé grep.exe_RenameGenProc ~~

GenProc n'a détecté aucune infection caractéristique et suggère de suivre la procédure suivante :


Poste un rapport Nod32 https://www.eset.com/ (il faut utiliser Internet Explorer)
- coche toutes les cases à chaque fois, et lorsque c'est terminé, colle le rapport :
C:\Program Files\EsetOnlineScanner\log.txt




~~~~ INFORMATION COMPLEMENTAIRE ~~~~


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:00:03, on 19/08/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\CameraAssistant.exe
C:\WINDOWS\system32\ElkCtrl.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Documents and Settings\M.Catoire\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe
C:\Documents and Settings\M.Catoire\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
C:\Documents and Settings\M.Catoire\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe
C:\Documents and Settings\M.Catoire\Application Data\Microsoft\Live Search\Mise-a-jour-LiveSearch.exe
C:\WINDOWS\system32\cmd.exe
C:\Genproc\outil\M.Catoire_GenProc.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechCameraAssistant] C:\Program Files\Logitech\Video\CameraAssistant.exe
O4 - HKLM\..\Run: [LogitechVideo[inspector]] C:\Program Files\Logitech\Video\InstallHelper.exe /inspect
O4 - HKLM\..\Run: [LogitechCameraService(E)] C:\WINDOWS\system32\ElkCtrl.exe /automation
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\M.Catoire\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe" -s
O4 - Startup: Notification de cadeaux MSN.lnk = C:\Documents and Settings\M.Catoire\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
O4 - Startup: Outil de notification Live Search.lnk = C:\Documents and Settings\M.Catoire\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} (GoPetsWeb Control) - https://secure.gopetslive.com/dev/GoPetsWeb.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{04EF8218-C993-4B7A-92C2-E4E5AD4F65C5}: NameServer = 194.117.200.11,194.117.200.16
O17 - HKLM\System\CS1\Services\Tcpip\..\{04EF8218-C993-4B7A-92C2-E4E5AD4F65C5}: NameServer = 194.117.200.11,194.117.200.16
O17 - HKLM\System\CS2\Services\Tcpip\..\{04EF8218-C993-4B7A-92C2-E4E5AD4F65C5}: NameServer = 194.117.200.11,194.117.200.16
O17 - HKLM\System\CS4\Services\Tcpip\..\{04EF8218-C993-4B7A-92C2-E4E5AD4F65C5}: NameServer = 194.117.200.11,194.117.200.16
O17 - HKLM\System\CS5\Services\Tcpip\..\{04EF8218-C993-4B7A-92C2-E4E5AD4F65C5}: NameServer = 194.117.200.11,194.117.200.16
O18 - Protocol: bw+0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: TomTomHOMEService - TomTom - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe

re
rapport scan NOD32
Journal de l'analyse
Version de la base des signatures de virus : 3890 (20090226)
Date : 19/08/2009 Heure : 18:56:08
Disques, dossiers et fichiers analysés : Mémoire vive;C:\Secteur d'amorçage;D:\Secteur d'amorçage;C:\;D:\
C:\pagefile.sys - erreur à l'ouverture [4]
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MailSkinnerrtk.zip » ZIP » msksetup.log - erreur - fichier protégé par mot de passe
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MailSkinnerrtk.zip » ZIP » sbRecovery.ini - erreur - fichier protégé par mot de passe
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MailSkinnerrtk1.zip » ZIP » msksetup.log - erreur - fichier protégé par mot de passe
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MailSkinnerrtk1.zip » ZIP » sbRecovery.ini - erreur - fichier protégé par mot de passe
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MailSkinnerrtk2.zip » ZIP » msksetup.log - erreur - fichier protégé par mot de passe
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MailSkinnerrtk2.zip » ZIP » sbRecovery.ini - erreur - fichier protégé par mot de passe
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MessengerSkinnerrtk.zip » ZIP » nvs2.inf - erreur - fichier protégé par mot de passe
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MessengerSkinnerrtk.zip » ZIP » sbRecovery.ini - erreur - fichier protégé par mot de passe
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\QuadRegistryCleaner.zip » ZIP » Documents and Settings/All Users/Application Data/Spybot - Search & Destroy/Recovery/sbRecovery.ini - erreur - fichier protégé par mot de passe
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\QuadRegistryCleaner1.zip » ZIP » Program Files/QUAD Utilities/QUAD Registry Cleaner/Vista Scheduler.dll - erreur - fichier protégé par mot de passe
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\QuadRegistryCleaner1.zip » ZIP » Documents and Settings/All Users/Application Data/Spybot - Search & Destroy/Recovery/sbRecovery.ini - erreur - fichier protégé par mot de passe
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\QuadRegistryCleaner2.zip » ZIP » Program Files/QUAD Utilities/QUAD Registry Cleaner/Vista Scheduler.dll - erreur - fichier protégé par mot de passe
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\QuadRegistryCleaner2.zip » ZIP » Documents and Settings/All Users/Application Data/Spybot - Search & Destroy/Recovery/sbRecovery.ini - erreur - fichier protégé par mot de passe
C:\Documents and Settings\M.Catoire\Application Data\Mozilla\Firefox\Profiles\31uma6ob.default\extensions\ChoiceGuard@Microsoft\chrome.manifest » MIME - est OK (analyse interne non effectuée)
C:\Documents and Settings\M.Catoire\Local Settings\Application Data\Identities\{2A01D6B1-8D37-4008-9360-0BF473A31623}\Microsoft\Outlook Express\Boîte d'envoi.bak » DBX - est OK (analyse interne non effectuée)
C:\Documents and Settings\M.Catoire\Local Settings\Application Data\Identities\{2A01D6B1-8D37-4008-9360-0BF473A31623}\Microsoft\Outlook Express\Boîte d'envoi.dbx » DBX - est OK (analyse interne non effectuée)
C:\Documents and Settings\M.Catoire\Local Settings\Application Data\Identities\{2A01D6B1-8D37-4008-9360-0BF473A31623}\Microsoft\Outlook Express\Boîte de réception.dbx » DBX - est OK (analyse interne non effectuée)
C:\Documents and Settings\M.Catoire\Local Settings\Application Data\Microsoft\Windows Live Mail\Sentinel\WLMailSearchSentinel.eml » MIME - est OK (analyse interne non effectuée)
C:\Program Files\AGI\common\dependencies.zip » ZIP » dateutil/zoneinfo/zoneinfo-2005q.tar.gz » GZIP » zoneinfo-2005q.tar » TAR » Antarctica/South_Pole » TAR » Asia/ - erreur à la lecture de l'archive
C:\Program Files\AGI\common\dependencies.zip » ZIP » dateutil/zoneinfo/zoneinfo-2005q.tar.gz » GZIP » zoneinfo-2005q.tar » TAR » - archive endommagée
C:\Program Files\AGI\common\windows.zip » ZIP » comtypes/_comobject.py » MIME - est OK (analyse interne non effectuée)
C:\Program Files\AGI\common\windows.zip » ZIP » comtypes/connectionpoints.py » MIME - est OK (analyse interne non effectuée)
C:\Program Files\AGI\common\windows.zip » ZIP » comtypes/GUID.py » MIME - est OK (analyse interne non effectuée)
C:\Program Files\AGI\common\windows.zip » ZIP » comtypes/messageloop.py » MIME - est OK (analyse interne non effectuée)
C:\Program Files\AGI\common\windows.zip » ZIP » comtypes/safearray.py » MIME - est OK (analyse interne non effectuée)
C:\Program Files\AGI\common\windows.zip » ZIP » comtypes/server/connectionpoints.py » MIME - est OK (analyse interne non effectuée)
C:\Program Files\AGI\common\windows.zip » ZIP » comtypes/server/localserver.py » MIME - est OK (analyse interne non effectuée)
C:\Program Files\AGI\common\windows.zip » ZIP » comtypes/tools/tlbparser.py » MIME - est OK (analyse interne non effectuée)
C:\Program Files\AGI\common\comtypes\connectionpoints.py » MIME - est OK (analyse interne non effectuée)
C:\Program Files\AGI\common\comtypes\GUID.py » MIME - est OK (analyse interne non effectuée)
C:\Program Files\AGI\common\comtypes\messageloop.py » MIME - est OK (analyse interne non effectuée)
C:\Program Files\AGI\common\comtypes\safearray.py » MIME - est OK (analyse interne non effectuée)
C:\Program Files\AGI\common\comtypes\_comobject.py » MIME - est OK (analyse interne non effectuée)
C:\Program Files\AGI\common\comtypes\server\connectionpoints.py » MIME - est OK (analyse interne non effectuée)
C:\Program Files\AGI\common\comtypes\server\localserver.py » MIME - est OK (analyse interne non effectuée)
C:\Program Files\AGI\common\comtypes\tools\tlbparser.py » MIME - est OK (analyse interne non effectuée)
C:\Program Files\AGI\common\dateutil\zoneinfo\zoneinfo-2005q.tar.gz » GZIP » zoneinfo-2005q.tar » TAR » Antarctica/South_Pole » TAR » Asia/ - erreur à la lecture de l'archive
C:\Program Files\AGI\common\dateutil\zoneinfo\zoneinfo-2005q.tar.gz » GZIP » zoneinfo-2005q.tar » TAR » - archive endommagée
C:\Program Files\AGI\Python25\Lib\compiler\visitor.py » MIME - est OK (analyse interne non effectuée)
C:\Program Files\AGI\tmp\python25.zip » ZIP » Lib/compiler/visitor.py » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\Attach To Email\ReadMe\ReadMe.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\Attach To Email\ReadMe\ReadMe_de.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\Attach To Email\ReadMe\ReadMe_en.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\Attach To Email\ReadMe\ReadMe_en_US.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\Attach To Email\ReadMe\ReadMe_es.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\Attach To Email\ReadMe\ReadMe_fr.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\Attach To Email\ReadMe\ReadMe_it.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\Attach To Email\ReadMe\ReadMe_ja_jp.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\Attach To Email\ReadMe\ReadMe_ko.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\Attach To Email\ReadMe\ReadMe_nl.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\Attach To Email\ReadMe\ReadMe_pt.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\Attach To Email\ReadMe\ReadMe_ru.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\Attach To Email\ReadMe\ReadMe_zh.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\Attach To Email\ReadMe\ReadMe_zh_TW.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\Copy Utility\ReadMe\ReadMe.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\Copy Utility\ReadMe\ReadMe_de.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\Copy Utility\ReadMe\ReadMe_en_US.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\Copy Utility\ReadMe\ReadMe_es.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\Copy Utility\ReadMe\ReadMe_fr.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\Copy Utility\ReadMe\ReadMe_it.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\Copy Utility\ReadMe\ReadMe_ko.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\Copy Utility\ReadMe\ReadMe_nl.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\Copy Utility\ReadMe\ReadMe_pt.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\Copy Utility\ReadMe\ReadMe_ru.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\Copy Utility\ReadMe\ReadMe_zh.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\Copy Utility\ReadMe\ReadMe_zh_TW.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\Copy Utility\ReadMe\License\fr\License.txt » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\Easy Photo Print\Help\Help.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\Easy Photo Print\Help\Help_de.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\Easy Photo Print\Help\Help_en_GB.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\Easy Photo Print\Help\Help_en_US.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\Easy Photo Print\Help\Help_es.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\Easy Photo Print\Help\Help_fr.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\Easy Photo Print\Help\Help_it.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\Easy Photo Print\Help\Help_ko.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\Easy Photo Print\Help\Help_nl.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\Easy Photo Print\Help\Help_pt.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\Easy Photo Print\Help\Help_ru.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\Easy Photo Print\Help\Help_zh_CN.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\Easy Photo Print\Help\Help_zh_TW.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\Easy Photo Print\Readme\ReadMe.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\Easy Photo Print\Readme\ReadMe_de.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\Easy Photo Print\Readme\ReadMe_en_GB.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\Easy Photo Print\Readme\ReadMe_en_US.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\Easy Photo Print\Readme\ReadMe_es.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\Easy Photo Print\Readme\ReadMe_fr.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\Easy Photo Print\Readme\ReadMe_it.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\Easy Photo Print\Readme\ReadMe_ko.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\Easy Photo Print\Readme\ReadMe_nl.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\Easy Photo Print\Readme\ReadMe_pt.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\Easy Photo Print\Readme\ReadMe_ru.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\Easy Photo Print\Readme\ReadMe_zh_CN.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\Easy Photo Print\Readme\ReadMe_zh_TW.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\File Manager\Help\Help.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\File Manager\Help\Help_de.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\File Manager\Help\Help_en_GB.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\File Manager\Help\Help_en_US.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\File Manager\Help\Help_es.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\File Manager\Help\Help_fr.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\File Manager\Help\Help_it.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\File Manager\Help\Help_ko.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\File Manager\Help\Help_nl.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\File Manager\Help\Help_pt.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\File Manager\Help\Help_ru.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\File Manager\Help\Help_zh_CN.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\File Manager\Help\Help_zh_TW.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\File Manager\Readme\ReadMe.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\File Manager\Readme\ReadMe_de.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\File Manager\Readme\ReadMe_en_GB.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\File Manager\Readme\ReadMe_en_US.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\File Manager\Readme\ReadMe_es.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\File Manager\Readme\ReadMe_fr.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\File Manager\Readme\ReadMe_it.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\File Manager\Readme\ReadMe_ko.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\File Manager\Readme\ReadMe_nl.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\File Manager\Readme\ReadMe_pt.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\File Manager\Readme\ReadMe_ru.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\File Manager\Readme\ReadMe_zh_CN.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\epson\Creativity Suite\File Manager\Readme\ReadMe_zh_TW.def » MIME - est OK (analyse interne non effectuée)
C:\Program Files\Fichiers communs\Logitech\QCDRV\BIN\ESP\license.txt » MIME - est OK (analyse interne non effectuée)
C:\Program Files\Fichiers communs\Logitech\QCDRV\BIN\PTB\license.txt » MIME - est OK (analyse interne non effectuée)
C:\Program Files\Java\jre6\lib\resources.jar » ZIP » com/sun/org/apache/xerces/internal/impl/msg/XIncludeMessages.properties » MIME - est OK (analyse interne non effectuée)
C:\Program Files\Java\jre6\lib\resources.jar » ZIP » com/sun/xml/internal/fastinfoset/resources/ResourceBundle.properties » MIME - est OK (analyse interne non effectuée)
C:\Program Files\Java\jre6\lib\resources.jar » ZIP » javax/xml/bind/Messages.properties » MIME - est OK (analyse interne non effectuée)
C:\Program Files\Java\jre6\lib\deploy\ffjcext.zip » ZIP » {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}/chrome.manifest » MIME - est OK (analyse interne non effectuée)
C:\Program Files\Java\jre6\lib\deploy\jqs\ff\chrome.manifest » MIME - est OK (analyse interne non effectuée)
C:\Program Files\Microsoft CAPICOM 2.1.0.2\License\license.mht » MIME - est OK (analyse interne non effectuée)
C:\Program Files\Mozilla Firefox\chrome\browser.manifest » MIME - est OK (analyse interne non effectuée)
C:\Program Files\Mozilla Firefox\chrome\comm.manifest » MIME - est OK (analyse interne non effectuée)
C:\Program Files\Mozilla Firefox\chrome\pippki.manifest » MIME - est OK (analyse interne non effectuée)
C:\Program Files\Mozilla Firefox\chrome\reporter.manifest » MIME - est OK (analyse interne non effectuée)
C:\Program Files\Mozilla Firefox\chrome\toolkit.manifest » MIME - est OK (analyse interne non effectuée)
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}\chrome.manifest » MIME - est OK (analyse interne non effectuée)
C:\Program Files\MSN\MSNCoreFiles\Install\MSN9Components\Msncli.exe » CAB » license.txt » MIME - est OK (analyse interne non effectuée)
C:\Program Files\Panasonic\LUMIXSimpleViewer\Manual\kyodaku.txt » MIME - est OK (analyse interne non effectuée)
C:\Program Files\TomTom HOME 2\xul\chrome\chrome.manifest » MIME - est OK (analyse interne non effectuée)
C:\Program Files\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com\chrome.manifest » MIME - est OK (analyse interne non effectuée)
C:\Program Files\TomTom HOME 2\xulrunner\chrome\comm.manifest » MIME - est OK (analyse interne non effectuée)
C:\Program Files\TomTom HOME 2\xulrunner\chrome\pippki.manifest » MIME - est OK (analyse interne non effectuée)
C:\Program Files\TomTom HOME 2\xulrunner\chrome\toolkit.manifest » MIME - est OK (analyse interne non effectuée)
C:\Program Files\VirginMega\VirginMegaPremium\Maintenance.mht » MIME - est OK (analyse interne non effectuée)
C:\WINDOWS\$hf_mig$\KB873339\update\eula.txt » MIME - est OK (analyse interne non effectuée)
C:\WINDOWS\$hf_mig$\KB885835\update\eula.txt » MIME - est OK (analyse interne non effectuée)
C:\WINDOWS\$hf_mig$\KB885836\update\eula.txt » MIME - est OK (analyse interne non effectuée)
C:\WINDOWS\$hf_mig$\KB886185\update\eula.txt » MIME - est OK (analyse interne non effectuée)
C:\WINDOWS\$hf_mig$\KB887472\update\eula.txt » MIME - est OK (analyse interne non effectuée)
C:\WINDOWS\$hf_mig$\KB888302\update\eula.txt » MIME - est OK (analyse interne non effectuée)
C:\WINDOWS\$hf_mig$\KB890046\update\eula.txt » MIME - est OK (analyse interne non effectuée)
C:\WINDOWS\$hf_mig$\KB890859\update\eula.txt » MIME - est OK (analyse interne non effectuée)
C:\WINDOWS\$hf_mig$\KB891781\update\eula.txt » MIME - est OK (analyse interne non effectuée)
C:\WINDOWS\$hf_mig$\KB894391\update\eula.txt » MIME - est OK (analyse interne non effectuée)
C:\WINDOWS\$hf_mig$\KB896358\update\eula.txt » MIME - est OK (analyse interne non effectuée)
C:\WINDOWS\$hf_mig$\KB896428\update\eula.txt » MIME - est OK (analyse interne non effectuée)
C:\WINDOWS\$hf_mig$\KB898461\update\eula.txt » MIME - est OK (analyse interne non effectuée)
C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vs_setup.cab » CAB » Chrome_manifest.3643236F_FC70_11D3_A536_0090278A1BB8 » MIME - est OK (analyse interne non effectuée)
C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\chrome.manifest » MIME - est OK (analyse interne non effectuée)
C:\WINDOWS\ServicePackFiles\i386\msncli.exe » CAB » license.txt » MIME - est OK (analyse interne non effectuée)
C:\WINDOWS\system32\eula.txt » MIME - est OK (analyse interne non effectuée)
D:\musique\mp3\Lounge\Zen 2 - EAC - MPC Q6 - [MPCovore] - by PatMan\Codec WinAmp\cnv_mpc (Winamp 3.0 plugin - 0.92b Alpha).exe » NSIS - mauvaise archive
D:\musique\mp3\Lounge\Zen 2 - EAC - MPC Q6 - [MPCovore] - by PatMan\Codec WinAmp\in_mpc (Winamp 2.xx plugin - 0.99d Alpha).exe » NSIS - mauvaise archive
D:\musique\mp3\mp3 à trier\bplay086.exe » NSIS - somme de contrôle CRC incorrecte, le fichier est peut-être endommagé
D:\musique\mp3\mp3 à trier\DivX.5.06Pro.zip » ZIP » DivX.5.06Pro.exe - erreur - fichier protégé par mot de passe
Nombre d'objets analysés : 231208
Nombre de menaces détectées : 0
Heure d'achèvement : 21:37:33 Temps d'analyse total : 9685 sec. (02:41:25)

Notes :
[4] L'objet ne peut pas être ouvert. Il est peut-être utilisé par une autre application ou le système d'exploitation.

Bonjour
Je n'arrive pas a faire le scan avec bitdefender.
milou

Bonjour

Ai lancé le scan NOD 32 résultat négatif. Suis attaqué de nouveau par un virus HTLM/iFrance4305 bloqué par Antivir et mis en quarantaine. (scan NOD32 lancé aprés attaque virus).
Lorsque je lance un scan avec antivir, a 40% de l'analyse, le programme se coupe et repasse en démarrage?
Merci pour ton aide
Milou

Re
Impossible d'enregistrer et de renommer sd-fix-exe, Antivir me bloque l'enregistrement sur le bureau

Bonjour
Rapports ci-dessous. Bien que je n'ai pas réussi à l'installer, j'ai dans le bureau un dossier SDFix comment faire pour l'enlever. Il n'apparait pas dans les programmes installés.
Cordialement.
Milou

ComboFix 09-08-23.01 - M.Catoire 24/08/2009 12:29.7.2 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.3.1252.33.1036.18.1023.659 [GMT 2:00]
Running from: c:\documents and settings\M.Catoire\Bureau\combo-fix.exe
AV: AntiVir Desktop *On-access scanning disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\docume~1\M3140~1.CAT\LOCALS~1\Temp\IadHide5.dll
c:\documents and settings\M.Catoire\Local Settings\temp\IadHide5.dll
.
---- Previous Run -------
.
c:\docume~1\M3140~1.CAT\LOCALS~1\Temp\IadHide5.dll
c:\documents and settings\M.Catoire\Local Settings\Temp\IadHide5.dll
c:\windows\Installer\10977.msi
c:\windows\Installer\112577.msi
c:\windows\Installer\112578.msp
c:\windows\Installer\112579.msp
c:\windows\Installer\11257a.msp
c:\windows\Installer\11257b.msp
c:\windows\Installer\11257c.msp
c:\windows\system32\sqlite3.dll

.
((((((((((((((((((((((((( Files Created from 2009-07-24 to 2009-08-24 )))))))))))))))))))))))))))))))
.

2009-08-23 17:45 . 2009-08-23 18:00 -------- d-----w- C:\SDFix
2009-08-20 22:22 . 2009-08-20 22:22 -------- d-----w- c:\program files\ESET
2009-08-19 16:50 . 2009-08-19 16:50 -------- d-----w- c:\documents and settings\All Users\Application Data\ESET
2009-08-12 09:51 . 2009-07-10 13:27 1315328 -c----w- c:\windows\system32\dllcache\msoe.dll
2009-08-05 09:00 . 2009-08-05 09:00 205312 -c----w- c:\windows\system32\dllcache\mswebdvd.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-08-18 10:35 . 2008-05-04 21:36 21656 ----a-w- c:\documents and settings\M.Catoire\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-08-18 10:34 . 2009-07-14 07:25 55656 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2009-08-15 22:44 . 2006-03-02 12:00 80508 ----a-w- c:\windows\system32\perfc00C.dat
2009-08-15 22:44 . 2006-03-02 12:00 500482 ----a-w- c:\windows\system32\perfh00C.dat
2009-08-05 09:00 . 2006-03-02 12:00 205312 ----a-w- c:\windows\system32\mswebdvd.dll
2009-08-01 07:00 . 2008-06-23 12:16 -------- d-----w- c:\program files\Microsoft Silverlight
2009-07-25 06:52 . 2008-08-23 08:24 -------- d-----w- c:\program files\Panasonic
2009-07-25 06:52 . 2008-05-02 06:44 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-07-19 07:54 . 2009-07-19 07:54 -------- d-----w- c:\program files\Avira
2009-07-19 07:54 . 2009-07-19 07:54 -------- d-----w- c:\documents and settings\All Users\Application Data\Avira
2009-07-17 19:03 . 2006-03-02 12:00 58880 ----a-w- c:\windows\system32\atl.dll
2009-07-13 21:43 . 2006-03-02 12:00 286208 ----a-w- c:\windows\system32\wmpdxm.dll
2009-07-03 16:57 . 2006-03-02 12:00 915456 ----a-w- c:\windows\system32\wininet.dll
2009-06-26 17:13 . 2008-06-09 10:55 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-06-26 14:25 . 2009-06-26 14:25 -------- d-----w- c:\program files\VirginMega
2009-06-26 14:25 . 2009-06-26 14:25 -------- d-----w- c:\documents and settings\All Users\Application Data\Downloaded Installations
2009-06-26 14:23 . 2009-06-26 14:23 -------- d-----w- c:\program files\Windows Media Connect 2
2009-06-26 14:07 . 2009-05-16 09:03 -------- d-----w- c:\program files\Fichiers communs\AVSMedia
2009-06-26 14:07 . 2009-05-16 08:58 -------- d-----w- c:\program files\AVS4YOU
2009-06-26 14:05 . 2009-06-26 14:05 -------- d-----w- c:\documents and settings\All Users\Application Data\NCH Software
2009-06-16 14:40 . 2006-03-02 12:00 81920 ----a-w- c:\windows\system32\fontsub.dll
2009-06-16 14:40 . 2006-03-02 12:00 119808 ----a-w- c:\windows\system32\t2embed.dll
2009-06-15 10:44 . 2006-03-02 12:00 78848 ----a-w- c:\windows\system32\telnet.exe
2009-06-15 10:44 . 2006-03-02 12:00 82944 ----a-w- c:\windows\system32\tlntsess.exe
2009-06-10 14:14 . 2006-03-02 12:00 85504 ----a-w- c:\windows\system32\avifil32.dll
2009-06-10 07:21 . 2008-05-02 06:11 2066432 ----a-w- c:\windows\system32\mstscax.dll
2009-06-10 06:15 . 2006-03-02 12:00 132096 ----a-w- c:\windows\system32\wkssvc.dll
2009-06-03 19:10 . 2006-03-02 12:00 1297408 ----a-w- c:\windows\system32\quartz.dll
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LDM"="c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe" [2008-12-27 32768]
"Google Update"="c:\documents and settings\M.Catoire\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" [2008-09-06 133104]
"TomTomHOME.exe"="c:\program files\TomTom HOME 2\TomTomHOMERunner.exe" [2009-06-03 251240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LVCOMSX"="c:\windows\system32\LVCOMSX.EXE" [2005-12-09 225280]
"LogitechCameraAssistant"="c:\program files\Logitech\Video\CameraAssistant.exe" [2005-12-07 489472]
"LogitechVideo[inspector]"="c:\program files\Logitech\Video\InstallHelper.exe" [2005-12-07 09:33 73728]
"LogitechCameraService(E)"="c:\windows\system32\ElkCtrl.exe" [2004-11-01 262144]
"UnlockerAssistant"="c:\program files\Unlocker\UnlockerAssistant.exe" [2008-05-02 15872]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]

c:\documents and settings\M.Catoire\Menu D‚marrer\Programmes\D‚marrage\
Notification de cadeaux MSN.lnk - c:\documents and settings\M.Catoire\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe [2009-5-6 135680]
Outil de notification Live Search.lnk - c:\documents and settings\M.Catoire\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe [2009-5-6 143360]

c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Logitech Desktop Messenger.lnk - c:\program files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe [2008-12-27 450560]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=

R2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [19/07/2009 09:55 108289]
R2 TomTomHOMEService;TomTomHOMEService;c:\program files\TomTom HOME 2\TomTomHOMEService.exe [03/06/2009 14:46 92008]
.
Contents of the 'Scheduled Tasks' folder

2009-08-18 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2006-08-29 12:21]

2009-08-23 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-842925246-1770027372-839522115-1003Core.job
- c:\documents and settings\M.Catoire\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2008-09-06 08:24]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://search.live.com/results.aspx?q=Mozzilla+firefox&mkt=fr-FR&FORM=MIAWB1
uInternet Connection Wizard,ShellNext = iexplore
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office10\EXCEL.EXE/3000
TCP: {04EF8218-C993-4B7A-92C2-E4E5AD4F65C5} = 194.117.200.11,194.117.200.16
Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - c:\program files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} - hxxps://secure.gopetslive.com/dev/GoPetsWeb.cab
FF - ProfilePath - c:\documents and settings\M.Catoire\Application Data\Mozilla\Firefox\Profiles\31uma6ob.default\
FF - prefs.js: browser.search.selectedEngine - Yahoo
FF - plugin: c:\documents and settings\M.Catoire\Local Settings\Application Data\Google\Update\1.2.183.7\npGoogleOneClick8.dll
FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll

---- FIREFOX POLICIES ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.enforce_same_site_origin", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.cache_size", 51200);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.ogg.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.wave.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.autoplay.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.urlbar.autocomplete.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("capability.policy.mailnews.*.wholeText", "noAccess");
c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.storage.default_quota", 5120);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("content.sink.event_probe_rate", 3);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.http.prompt-temp-redirect", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("layout.css.dpi", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("layout.css.devPixelsPerPx", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("gestures.enable_single_finger_input", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.max_chrome_script_run_time", 0);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.tcp.sendbuffer", 131072);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("geo.enabled", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.remember_cert_checkbox_default_setting", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr", "moz35");
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-cjkt", "moz35");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.blocklist.level", 2);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.urlbar.restrict.typed", "~");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.urlbar.default.behavior", 0);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.history", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.formdata", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.passwords", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.downloads", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cookies", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cache", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.sessions", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.offlineApps", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.siteSettings", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.history", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.formdata", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.passwords", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.downloads", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.cookies", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.cache", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.sessions", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.offlineApps", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.siteSettings", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.sanitize.migrateFx3Prefs", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.ssl_override_behavior", 2);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("security.alternate_certificate_error_page", "certerror");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.autostart", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.dont_prompt_on_enter", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("geo.wifi.uri", "https://www.google.com/loc/json");
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-08-24 12:42
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(1020)
c:\windows\system32\Ati2evxx.dll

- - - - - - - > 'explorer.exe'(2672)
c:\docume~1\M3140~1.CAT\LOCALS~1\Temp\IadHide5.dll
c:\program files\Unlocker\UnlockerHook.dll
c:\windows\system32\eappprxy.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\program files\ArcSoft\Software Suite\PhotoImpression\share\pihook.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\ati2evxx.exe
c:\windows\system32\ati2evxx.exe
c:\program files\Avira\AntiVir Desktop\avguard.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
c:\windows\system32\wscntfy.exe
c:\documents and settings\M.Catoire\Application Data\Microsoft\Live Search\Mise-a-jour-LiveSearch.exe
.
**************************************************************************
.
Completion time: 2009-08-24 12:51 - machine was rebooted
ComboFix-quarantined-files.txt 2009-08-24 10:51

Pre-Run: 38 613 921 792 octets libres
Post-Run: 38 579 040 256 octets libres

Current=4 Default=4 Failed=1 LastKnownGood=5 Sets=1,2,4,5
208 --- E O F --- 2009-08-19 22:18








Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:28:36, on 24/08/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\CameraAssistant.exe
C:\WINDOWS\system32\ElkCtrl.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Documents and Settings\M.Catoire\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe
C:\Documents and Settings\M.Catoire\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
C:\Documents and Settings\M.Catoire\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe
C:\Documents and Settings\M.Catoire\Application Data\Microsoft\Live Search\Mise-a-jour-LiveSearch.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\M.Catoire\Mes documents\Téléchargements\HiJackThis(3).exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.bing.com/search?q=Mozzilla+firefox&mkt=fr-FR&FORM=MIAWB1&toHttps=1&redig=011E43952EF84A6EA61A22156273E59B
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechCameraAssistant] C:\Program Files\Logitech\Video\CameraAssistant.exe
O4 - HKLM\..\Run: [LogitechVideo[inspector]] C:\Program Files\Logitech\Video\InstallHelper.exe /inspect
O4 - HKLM\..\Run: [LogitechCameraService(E)] C:\WINDOWS\system32\ElkCtrl.exe /automation
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\M.Catoire\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe" -s
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Startup: Notification de cadeaux MSN.lnk = C:\Documents and Settings\M.Catoire\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
O4 - Startup: Outil de notification Live Search.lnk = C:\Documents and Settings\M.Catoire\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} (GoPetsWeb Control) - https://secure.gopetslive.com/dev/GoPetsWeb.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{04EF8218-C993-4B7A-92C2-E4E5AD4F65C5}: NameServer = 194.117.200.11,194.117.200.16
O17 - HKLM\System\CS1\Services\Tcpip\..\{04EF8218-C993-4B7A-92C2-E4E5AD4F65C5}: NameServer = 194.117.200.11,194.117.200.16
O17 - HKLM\System\CS2\Services\Tcpip\..\{04EF8218-C993-4B7A-92C2-E4E5AD4F65C5}: NameServer = 194.117.200.11,194.117.200.16
O18 - Protocol: bw+0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {7B20D2D4-1E85-4F99-A2F6-4D43865F5789} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: TomTomHOMEService - TomTom - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe

Re
SDFix, combo, hidjack, supprimés avec tools cleaner
Milou

Bonjour
J'aimerai savoir si les différents scans font apparaitre que les programmes sont nettoyés.
Sur le scan de Combo fix j'ai le message suivant "WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED "Ique dois je faire?
Cordialement
Milou