Analyse avec Hijackthis

cm -  
 gen-hackman -
Bonjour,

Je me permets de mettre le rapport Hijackthis effectué sur l'ordi domestique pour savoir ce que vous en pensez. Cet ordi est très lent au démarrage. J'ai un ordi portable qui était infecté et grâce à votre aide je viens de désinfecter. Je me disais que peut-être il en étai de même pour celui-là.

Le rapport est :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:47:34, on 03/02/2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\ArcSoft\Connection Service\Bin\ACService.exe
C:\WINDOWS\system32\bgsvcgen.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\lxddserv.exe
C:\WINDOWS\system32\lxddcoms.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files\POP Peeper\POPPeeper.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/...
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/...
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Lexmark Barre d'outils - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
O3 - Toolbar: Lexmark Barre d'outils - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - .DEFAULT User Startup: AutoTBar.exe (User 'Default user')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm (HKCU)
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm (HKCU)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: bw+0 - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {8471F776-F013-46BF-91DF-297E2C7DB65C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Fichiers communs\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: B's Recorder GOLD Library General Service (bgsvcgen) - B.H.A Corporation - C:\WINDOWS\system32\bgsvcgen.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Fichiers communs\Logitech\Bluetooth\LBTServ.exe
O23 - Service: lxddCATSCustConnectService - Lexmark International, Inc. - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxddserv.exe
O23 - Service: lxdd_device - - C:\WINDOWS\system32\lxddcoms.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

--
End of file - 19673 bytes

Merci d'avance
Configuration: Windows XP
Firefox 3.5.7

32 réponses

  • 1
  • 2
Résumé de la discussion

Le rapport HijackThis met en évidence une lenteur au démarrage sur un PC Windows XP SP2, avec de nombreuses entrées et services enregistrés dans la configuration, suggérant une possible infection ou surcharge logicielle. Les solutions proposées incluent la refonte de l'analyse avec OTL comme indiqué, puis la suppression des éléments indésirables dans le registre et les fichiers temporaires afin de réduire les charges système et les démarrages automatiques. D'autres mesures consistent en une vérification des services actifs listés par HijackThis et une éventuelle désactivation ou désinstallation des outils et barres d'outils inutiles, avec un suivi via des scans répétés pour confirmer la propreté.

Généré automatiquement par IA
sur la base des meilleures réponses
  1. gen-hackman
     
    salut :

    ▶ Télécharge Ad-remover ( de C_XX ) sur ton bureau :

    ▶ Déconnecte toi et ferme toutes applications en cours !

    ▶ Double clique sur "Ad-R.exe" pour lancer l'installation et laisse les paramètres d'installation par défaut .

    ▶ Double-clique sur le raccourci Ad-remover qui est sur ton bureau pour lancer l'outil .

    ▶ Au menu principal choisis l'option "L" et tape sur [entrée] .

    ▶ Laisse travailler l'outil et ne touche à rien ...

    ▶ Poste le rapport qui apparait à la fin , sur le forum ...

    ( Le rapport est sauvegardé aussi sous C:\Ad-report.log )
    ( CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller )

    ▶ Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
    Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
    Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.
    0
    1. cm
       
      Merci et voici le rapport :
      .
      ======= RAPPORT D'AD-REMOVER 1.1.4.6_J | UNIQUEMENT XP/VISTA/7 =======
      .
      Mis à jour par C_XX le 29.01.2010 à 16:43
      Contact: AdRemover.contact@gmail.com
      Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
      .
      Lancé à: 18:12:45, 03/02/2010 | Mode Normal | Option: CLEAN
      Exécuté de: C:\Ad-Remover\
      Système d'exploitation: Microsoft® Windows XP™ Service Pack 2 v5.1.2600
      Nom du PC: ORDINATEUR | Utilisateur actuel: HP_Propri‚taire
      .
      ============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
      .

      C:\Program Files\eoRezo
      C:\DOCUME~1\HP_PRO~1\APPLIC~1\EoRezo
      C:\DOCUME~1\HP_PRO~1\APPLIC~1\ItsLabel

      (!) -- Fichiers temporaires supprimés.

      .
      HKCU\software\EoRezo
      HKCU\software\ItsLabel
      HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{0E5CBF21-D15F-11D0-8301-00AA005B4383}
      HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{64F56FC1-1272-44CD-BA6E-39723696E350}
      HKLM\software\AskBarDis
      HKLM\software\classes\EoRezoBHO.EoBho
      HKLM\software\classes\EoRezoBHO.EoBho.1
      HKLM\software\EoRezo
      .
      ============== Scan additionnel ==============
      .
      .
      * Mozilla FireFox Version 3.5.7 [fr] *
      .
      Nom du profil: pd4cnorr.default (HP_Propri‚taire)
      .
      (HP_PRO~1, prefs.js) Browser.download.dir, C:\Documents and Settings\HP_Propriétaire\Mes documents
      (HP_PRO~1, prefs.js) Browser.download.lastDir, C:\Documents and Settings\HP_Propriétaire\Mes documents
      (HP_PRO~1, prefs.js) Browser.startup.homepage, hxxp://www.google.fr/
      (HP_PRO~1, prefs.js) Extensions.enabledItems, fr@dictionaries.addons.mozilla.org:2.1,{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}:6.0.01,{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}:6.0.02,{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}:6.0,{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}:6.0.05,{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}:6.0.04,{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}:6.0.03,{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}:6.0.07,{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}:6.0.11,{20a82645-c095-46ed-80e3-08825760534b}:1.1,{635abd67-4fe9-1b23-4f01-e679fa7484c1}:1.6.5.200812101546,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.7,{36C13C8F-54F1-412e-8177-2E411719162D}:4.0.1
      (HP_PRO~1, prefs.js) Privacy.popups.showBrowserMessage, false
      .
      .
      .
      * Internet Explorer Version 8.0.6001.18702 *
      .
      [HKEY_CURRENT_USER\..\Internet Explorer\Main]
      .
      Do404Search: 01000000
      Local Page: C:\WINDOWS\system32\blank.htm
      Show_ToolBar: yes
      Start Page: hxxp://fr.msn.com/
      Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
      Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
      Search Bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
      Use Custom Search URL: 1 (0x1)
      Use Search Asst: no
      Enable Browser Extensions: yes
      .
      [HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
      .
      Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
      Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
      Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
      Delete_Temp_Files_On_Exit: yes
      Local Page: C:\WINDOWS\system32\blank.htm
      Start Page: hxxp://fr.msn.com/
      Search Bar: hxxp://search.msn.com/spbasic.htm
      .
      [HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
      .
      Tabs: res://ieframe.dll/tabswelcome.htm
      .
      ===================================
      .
      3304 Octet(s) - C:\Ad-Report-CLEAN[1].log
      .
      42 Fichier(s) - C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp
      33 Fichier(s) - C:\WINDOWS\Temp
      0 Fichier(s) - C:\WINDOWS\Prefetch
      .
      18 Fichier(s) - C:\Ad-Remover\BACKUP
      120 Fichier(s) - C:\Ad-Remover\QUARANTINE
      .
      Fin à: 18:25:32 | 03/02/2010 - CLEAN[1]
      .
      ============== E.O.F ==============
      .
      0
  2. gen-hackman
     
    ok tu peux desinstalle AD-Remover

    Télécharge OTL de OLDTimer

    enregistre le sur ton Bureau.

    ▶ Double clic ( pour vista / 7 => clic droit "executer en tant qu'administrateur") sur OTL.exe pour le lancer.

    ▶ Coche les 2 cases Lop et Purity

    ▶ Coche la case devant scan all users

    ▶ règle-le sur "60 Days"

    ▶ dans la colonne de gauche , mets tout sur all

    ne modifie pas ceci :

    "files created whithin" et "files modified whithin"


    ▶Clic sur Run Scan.

    A la fin du scan, le Bloc-Notes va s'ouvrir avec le rapport (OTL.txt).

    Ce fichier est sur ton Bureau (en général C:\Documents and settings\le_nom_de_ta_session\OTL.txt)

    ▶▶▶ NE LE POSTE PAS SUR LE FORUM

    Pour me le transmettre clique sur ce lien : http://www.cijoint.fr/

    ▶ Clique sur Parcourir et cherche le fichier ci-dessus.

    ▶ Clique sur Ouvrir.

    ▶ Clique sur "Cliquez ici pour déposer le fichier".

    Un lien de cette forme :

    http://www.cijoint.fr/cjlink.php?file=cjge368/cijSKAP5fU.txt

    est ajouté dans la page.

    ▶ Copie ce lien dans ta réponse.

    ▶▶ Tu feras la meme chose avec le "Extra.txt".
    0
    1. cm
       
      voici le lien :
      http://www.cijoint.fr/cjlink.php?file=cj201002/cijQvG3OQj.txt
      et celui de "extra" :
      http://www.cijoint.fr/cjlink.php?file=cj201002/cijY92th6p.txt
      0
  3. gen-hackman
     
    Desactive ton antivirus le temps de la manip ainsi que ton parefeu si présent(car il est detecté a tort comme infection)

    ▶ Télécharge List&Kill'em et enregistre le sur ton bureau

    ▶ Branche clés usb , disques durs externes , mp3 , mp4 , etc..

    double clique ( clic droit "executer en tant qu'administrateur" pour Vista/7 ) sur le raccourci sur ton bureau pour lancer l'installation

    coche la case "creer une icone sur le bureau"

    une fois terminée , clic sur "terminer" et le programme se lancera seul

    choisis la langue puis choisis l'option 1 = Mode Recherche

    ▶ laisse travailler l'outil

    à l'apparition de la fenetre blanche , c'est un peu long , c'est normal , le programme n'est pas bloqué.

    un rapport du nom de catchme apparait sur ton bureau , ignore-le,ne le poste pas , mais ne le supprime pas pour l instant, le scan n'est pas fini.

    ▶ Poste le contenu du rapport qui s'ouvre aux 100 % du scan à l'ecran "COMPLETED"

    tu peux supprimer le rapport catchme.log de ton bureau maintenant.

    0
    1. cm
       
      Voilà le contenu du scan :
      List'em by g3n-h@ckm@n 1.2.2.0

      ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Processes running

      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\csrss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Windows Defender\MsMpEng.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Fichiers communs\ArcSoft\Connection Service\Bin\ACService.exe
      C:\WINDOWS\system32\bgsvcgen.exe
      C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\lxddserv.exe
      C:\WINDOWS\system32\lxddcoms.exe
      C:\WINDOWS\system32\HPZipm12.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\WINDOWS\System32\alg.exe
      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      C:\WINDOWS\system32\spider.exe
      C:\Documents and Settings\HP_Propriétaire\Mes documents\OTL.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\WINDOWS\system32\wscntfy.exe
      C:\Program Files\List_Kill'em\List_Kill'em.scr
      C:\WINDOWS\system32\cmd.exe
      C:\Documents and Settings\HP_Propriétaire\Local Settings\Temp\1C.tmp\pv.exe

      ======================
      Keys "Run"
      ======================
      [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      avast! REG_SZ C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      Ad-Watch REG_SZ C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe

      [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices]

      [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]

      =====================
      Other Keys
      =====================
      [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
      dontdisplaylastusername REG_DWORD 0 (0x0)
      legalnoticecaption REG_SZ
      legalnoticetext REG_SZ
      shutdownwithoutlogon REG_DWORD 1 (0x1)
      undockwithoutlogon REG_DWORD 1 (0x1)

      ===============
      [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
      NoDriveTypeAutoRun REG_DWORD 145 (0x91)

      ===============
      [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
      HonorAutoRunSetting REG_DWORD 1 (0x1)
      NoCDBurning REG_DWORD 0 (0x0)

      ===============
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
      AppInit_DLLS REG_SZ

      ===============
      [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
      AutoRestartShell REG_DWORD 1 (0x1)
      DefaultDomainName REG_SZ ORDINATEUR
      DefaultUserName REG_SZ HP_Propriétaire
      LegalNoticeCaption REG_SZ
      LegalNoticeText REG_SZ
      PowerdownAfterShutdown REG_SZ 0
      ReportBootOk REG_SZ 1
      Shell REG_SZ Explorer.exe
      ShutdownWithoutLogon REG_SZ 0
      System REG_SZ
      Userinit REG_SZ C:\WINDOWS\system32\userinit.exe,
      VmApplet REG_SZ rundll32 shell32,Control_RunDLL "sysdm.cpl"
      SfcQuota REG_DWORD -1 (0xffffffff)
      allocatecdroms REG_SZ 0
      allocatedasd REG_SZ 0
      allocatefloppies REG_SZ 0
      cachedlogonscount REG_SZ 10
      forceunlocklogon REG_DWORD 0 (0x0)
      passwordexpirywarning REG_DWORD 14 (0xe)
      scremoveoption REG_SZ 0
      AllowMultipleTSSessions REG_DWORD 1 (0x1)
      UIHost REG_EXPAND_SZ logonui.exe
      LogonType REG_DWORD 1 (0x1)
      Background REG_SZ 0 0 0
      DebugServerCommand REG_SZ no
      SFCDisable REG_DWORD 0 (0x0)
      WinStationsDisabled REG_SZ 0
      DefaultPassword REG_SZ
      HibernationPreviouslyEnabled REG_DWORD 1 (0x1)
      ShowLogonOptions REG_DWORD 0 (0x0)
      AltDefaultUserName REG_SZ HP_Propriétaire
      AltDefaultDomainName REG_SZ ORDINATEUR
      ChangePasswordUseKerberos REG_DWORD 1 (0x1)

      ===============
      [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\AtiExtEvent]
      [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\crypt32chain]
      [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\cryptnet]
      [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\cscdll]
      [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\dimsntfy]
      [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LBTWlgn]
      [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ScCertProp]
      [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\Schedule]
      [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\sclgntfy]
      [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\SensLogn]
      [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\termsrv]
      [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WgaLogon]
      [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\wlballoon]

      ===============
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
      {AEB6717E-7E19-11d0-97EE-00C04FD91972} REG_SZ
      {091EB208-39DD-417D-A5DD-7E2C2D8FB9CB} REG_SZ Microsoft AntiMalware ShellExecuteHook

      ===============
      [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
      %windir%\system32\sessmgr.exe REG_SZ %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019
      C:\Program Files\AOL 9.0\waol.exe REG_SZ C:\Program Files\AOL 9.0\waol.exe:*:Enabled:AOL France
      C:\Program Files\Messenger\msmsgs.exe REG_SZ C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger
      C:\Program Files\Mozilla Firefox\firefox.exe REG_SZ C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox
      C:\WINDOWS\system32\fxsclnt.exe REG_SZ C:\WINDOWS\system32\fxsclnt.exe:*:Enabled:Microsoft Fax Console
      %windir%\Network Diagnostic\xpnetdiag.exe REG_SZ %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000
      C:\Program Files\IncrediMail\bin\IMApp.exe REG_SZ C:\Program Files\IncrediMail\bin\IMApp.exe:*:Enabled:IncrediMail
      C:\Program Files\IncrediMail\bin\IncMail.exe REG_SZ C:\Program Files\IncrediMail\bin\IncMail.exe:*:Enabled:IncrediMail
      C:\Program Files\IncrediMail\bin\ImpCnt.exe REG_SZ C:\Program Files\IncrediMail\bin\ImpCnt.exe:*:Enabled:IncrediMail
      C:\Program Files\Outlook Express\msimn.exe REG_SZ C:\Program Files\Outlook Express\msimn.exe:*:Disabled:Outlook Express
      C:\Program Files\eMule\emule.exe REG_SZ C:\Program Files\eMule\emule.exe:*:Enabled:eMule
      C:\WINDOWS\system32\LEXPPS.EXE REG_SZ C:\WINDOWS\system32\LEXPPS.EXE:*:Enabled:LEXPPS.EXE
      C:\WINDOWS\system32\ZoneLabs\avsys\ScanningProcess.exe REG_SZ C:\WINDOWS\system32\ZoneLabs\avsys\ScanningProcess.exe:*:Enabled:Kaspersky AV Scanner
      C:\WINDOWS\system32\lxddcoms.exe REG_SZ C:\WINDOWS\system32\lxddcoms.exe:*:Enabled:Lexmark Communications System
      C:\Program Files\Lexmark 2500 Series\lxddamon.exe REG_SZ C:\Program Files\Lexmark 2500 Series\lxddamon.exe:*:Enabled:Lexmark Device Monitor
      C:\Program Files\Lexmark 2500 Series\app4r.exe REG_SZ C:\Program Files\Lexmark 2500 Series\app4r.exe:*:Enabled:Lexmark Imaging Studio
      C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe REG_SZ C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Disabled:Logitech Desktop Messenger
      C:\Program Files\adslTV\adsltv.exe REG_SZ C:\Program Files\adslTV\adsltv.exe:*:Enabled:adsltv
      C:\Program Files\adslTV\vlc.exe REG_SZ C:\Program Files\adslTV\vlc.exe:*:Enabled:VLC media player
      C:\Program Files\MyFreeTV\MyFreeTV.exe REG_SZ C:\Program Files\MyFreeTV\MyFreeTV.exe:*:Enabled:MyFreeTV
      C:\Program Files\Windows Live\Messenger\wlcsdk.exe REG_SZ C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call
      C:\Program Files\Windows Live\Messenger\msnmsgr.exe REG_SZ C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger
      C:\Program Files\Real\RealPlayer\realplay.exe REG_SZ C:\Program Files\Real\RealPlayer\realplay.exe:*:Enabled:RealPlayer
      C:\Program Files\Skype\Phone\Skype.exe REG_SZ C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype
      C:\WINDOWS\system32\spool\drivers\w32x86\3\lxddwbgw.exe REG_SZ C:\WINDOWS\system32\spool\drivers\w32x86\3\lxddwbgw.exe:*:Enabled:
      C:\Program Files\Lexmark 2500 Series\lxddmon.exe REG_SZ C:\Program Files\Lexmark 2500 Series\lxddmon.exe:*:Enabled:
      C:\WINDOWS\system32\spool\drivers\w32x86\3\lxddpswx.exe REG_SZ C:\WINDOWS\system32\spool\drivers\w32x86\3\lxddpswx.exe:*:Enabled:
      C:\WINDOWS\system32\spool\drivers\w32x86\3\lxddjswx.exe REG_SZ C:\WINDOWS\system32\spool\drivers\w32x86\3\lxddjswx.exe:*:Enabled:
      C:\WINDOWS\system32\spool\drivers\w32x86\3\lxddtime.exe REG_SZ C:\WINDOWS\system32\spool\drivers\w32x86\3\lxddtime.exe:*:Enabled:

      [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
      %windir%\system32\sessmgr.exe REG_SZ %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019
      %ProgramFiles%\iTunes\iTunes.exe REG_SZ %ProgramFiles%\iTunes\iTunes.exe:*:enabled:iTunes
      %windir%\Network Diagnostic\xpnetdiag.exe REG_SZ %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000
      C:\Program Files\Lexmark 2500 Series\app4r.exe REG_SZ C:\Program Files\Lexmark 2500 Series\App4R.exe:*:Enabled:Printing Application
      C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe REG_SZ C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger
      C:\Program Files\Windows Live\Messenger\wlcsdk.exe REG_SZ C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call
      C:\Program Files\Windows Live\Messenger\msnmsgr.exe REG_SZ C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger

      ===============
      ActivX controls
      ===============
      HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{17492023-C23A-453E-A040-C7C580BBF700}
      HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{6414512B-B978-451D-A0D8-FCFDF33E833C}
      HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{8AD9C840-044E-11D1-B3E9-00805F499D93}
      HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}
      HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}
      HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}
      HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}
      HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA}
      HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}
      HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}
      HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}
      HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}
      HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}
      HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}
      HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}
      HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}
      HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}
      HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
      HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
      HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
      HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{D27CDB6E-AE6D-11CF-96B8-444553540000}

      ===============
      HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}
      HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
      HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{26923b43-4d38-484f-9b9e-de460746276c}
      HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}
      HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}
      HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\D27CDB6E-AE6D-11CF-96B8-444553540000
      HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}
      HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10072CEC-8CC1-11D1-986E-00A0C955B42F}
      HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{2179C5D3-EBFF-11CF-B6FD-00AA00B4E220}
      HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
      HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{283807B5-2C60-11D0-A31D-00AA00B92C03}
      HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}
      HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{36f8ec70-c29a-11d1-b5c7-0000f8051515}
      HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{3af36230-a269-11d1-b5bf-0000f8051515}
      HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{3bf42070-b3b1-11d1-b5c5-0000f8051515}
      HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{411EDCF7-755D-414E-A74B-3DCD6583F589}
      HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{4278c270-a269-11d1-b5bf-0000f8051515}
      HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}
      HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}
      HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA848-CC51-11CF-AAFA-00AA00B6015C}
      HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA855-CC51-11CF-AAFA-00AA00B6015F}
      HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{45ea75a0-a269-11d1-b5bf-0000f8051515}
      HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{4f216970-c90c-11d1-b5c7-0000f8051515}
      HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{4f645220-306d-11d2-995d-00c04f98bbc9}
      HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{5945c046-1e7d-11d1-bc44-00c04fd912be}
      HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{5A8D6EE0-3E18-11D0-821E-444553540000}
      HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{5fd399c0-a70a-11d1-9948-00c04f98bbc9}
      HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{630b1da0-b465-11d1-9948-00c04f98bbc9}
      HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}
      HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{6fab99d0-bab8-11d1-994a-00c04f98bbc9}
      HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{7131646D-CD3C-40F4-97B9-CD9E4E6262EF}
      HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{7790769C-0471-11d2-AF11-00C04FA35D02}
      HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{89820200-ECBD-11cf-8B85-00AA005B4340}
      HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{89820200-ECBD-11cf-8B85-00AA005B4383}
      HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}
      HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8b15971b-5355-4c82-8c07-7e181ea07608}
      HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{9381D8F2-0288-11D0-9501-00AA00B911A5}
      HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{94de52c8-2d59-4f1b-883e-79663d2d9a8c}
      HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{9A394342-4A68-4EBA-85A6-55B559F4E700}
      HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{ACC563BC-4266-43f0-B6ED-9D38C4202C7E}
      HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{B508B3F1-A24A-32C0-B310-85786919EF28}
      HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
      HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{C9E9A340-D1F1-11D0-821E-444553540600}
      HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
      HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{CC2A9BA0-3BDD-11D0-821E-444553540000}
      HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{CDD7975E-60F8-41d5-8149-19E51D6F71D0}
      HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{D27CDB6E-AE6D-11cf-96B8-444553540000}
      HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{DAA94A2A-2A8D-4D3B-9DB8-56FBECED082D}
      HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{de5aed00-a4bf-11d1-9948-00c04f98bbc9}
      HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{E92B03AB-B707-11d2-9CBD-0000F87A369E}
      HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{F196AC50-7C95-42E1-9947-BDAB18BF3C8C}

      ==============
      BHO :
      ======
      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{1017A80C-6F09-4548-A84D-EDD6AC9525F0}]
      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

      ================
      Internet Explorer :
      ================
      [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
      Start Page REG_SZ https://www.msn.com/fr-fr

      [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
      Start Page REG_SZ https://www.msn.com/fr-fr

      ========
      Services
      ========
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services]

      Ndisuio : 0x3
      SharedAccess : 0x2
      windefend : 0x2
      wuauserv : 0x2

      =========
      Atapi.sys
      =========

      %%%% HASHDEEP-1.0
      %%%% size,md5,sha256,filename
      ## Invoked from: C:\Documents and Settings\HP_Propriétaire\Local Settings\Temp\1C.tmp
      ## C:\> hashdeep C:\WINDOWS\System32\Drivers\atapi.sys
      ##
      95360,cdfe4411a69c224bd1d11b2da92dac51,0e6b23a80f171550575bebc56f7500cd87a5cf03b2b9fdc49bc3de96282cd69d,C:\WINDOWS\System32\Drivers\atapi.sys

      %%%% HASHDEEP-1.0
      %%%% size,md5,sha256,filename
      ## Invoked from: C:\Documents and Settings\HP_Propriétaire\Local Settings\Temp\1C.tmp
      ## C:\> hashdeep C:\WINDOWS\System32\DllCache\atapi.sys
      ##
      95360,cdfe4411a69c224bd1d11b2da92dac51,0e6b23a80f171550575bebc56f7500cd87a5cf03b2b9fdc49bc3de96282cd69d,C:\WINDOWS\System32\DllCache\atapi.sys

      Sources
      =======

      C:\WINDOWS\SoftwareDistribution\Download\44b6174a4a693136d02d4a7ecd7cbd54\atapi.sys
      C:\WINDOWS\system32\dllcache\atapi.sys
      C:\WINDOWS\system32\drivers\atapi.sys
      C:\WINDOWS\system32\ReinstallBackups\0000\DriverFiles\i386\atapi.sys

      Référence :
      ==========

      Win XP_32b : a64013e98426e1877cb653685c5c0009
      Win XP_SP2_32b : CDFE4411A69C224BD1D11B2DA92DAC51
      Win XP_SP3_32b : 9F3A2F5AA6875C72BF062C712CFA2674
      Vista_32b : e03e8c99d15d0381e02743c36afc7c6f
      Vista_SP1_32b : 2d9c903dc76a66813d350a562de40ed9
      Vista_SP2_32b : 1F05B78AB91C9075565A9D8A4B880BC4
      Vista_SP2_64b : 1898FAE8E07D97F2F6C2D5326C633FAC
      Windows 7_32b : 80C40F7FDFC376E4C5FEEC28B41C119E
      Windows 7_64b : 02062C0B390B7729EDC9E69C680A6F3C


      D:\Autorun.inf :
      ----------------
      [AUTORUN]
      ShellExecute=Info.exe protect.ed 480 480

      =======
      Drive :
      =======

      D‚fragmenteur de disque Windows
      Copyright (c) 2001 Microsoft Corp. et Executive Software International Inc.

      Rapport d'analyse
      143 Go total, 115 Go libre (80%), 6% fragment‚ (fragmentation du fichier 13%)

      Il ne vous est pas n‚cessaire de d‚fragmenter ce volume.

      ¤¤¤¤¤¤¤¤¤¤ Files/folders :

      Present !! : C:\Documents and Settings\All Users\Application Data\QTSBandwidthCache
      Present !! : C:\WINDOWS\bwUnin-7.2.0.137-8876480SL.exe
      Present !! : C:\WINDOWS\System32\drivers\etc\hosts.msn
      Present !! : C:\WINDOWS\System32\ps2.bat
      Present !! : C:\Documents and Settings\HP_Propri‚taire\Application Data\wklnhst.dat
      Present !! : C:\Documents and Settings\HP_Propri‚taire\Application Data\wklnhst.dat
      Present !! : C:\Documents and Settings\HP_Propri‚taire\LOCAL Settings\Temp\BrowserPlus.exe
      Present !! : C:\Documents and Settings\HP_Propri‚taire\LOCAL Settings\Temp\~gu-ver.dat

      ¤¤¤¤¤¤¤¤¤¤ Keys :

      Present !! : "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Install.exe"
      Present !! : "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Setup.exe"
      Present !! : "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File execution Options\taskmgr.exe"
      Present !! : HKCR\CLSID\{248dd896-bb45-11cf-9abc-0080c7e7b78d}
      Present !! : HKCR\CLSID\{248dd897-bb45-11cf-9abc-0080c7e7b78d}
      Present !! : HKCR\CLSID\{2b96d5cc-c5b5-49a5-a69d-cc0a30f9028c}
      Present !! : HKCR\Interface\{248dd892-bb45-11cf-9abc-0080c7e7b78d}
      Present !! : HKCR\Interface\{248dd893-bb45-11cf-9abc-0080c7e7b78d}
      Present !! : HKCR\TypeLib\{248dd890-bb45-11cf-9abc-0080c7e7b78d}

      ============

      catchme 0.3.1398.3 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
      Rootkit scan 2010-02-03 19:25:14
      Windows 5.1.2600 Service Pack 2 NTFS

      scanning hidden processes ...

      scanning hidden services & system hive ...

      scanning hidden registry entries ...

      scanning hidden files ...

      scan completed successfully
      hidden processes: 0
      hidden services: 0
      hidden files: 0


      Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

      device: opened successfully
      user: MBR read successfully
      kernel: MBR read successfully
      user & kernel MBR OK

      ==========
      Programs
      ==========

      Abbyy FineReader 6.0 Sprint
      Adobe
      adslTV
      Alwil Software
      Apple Software Update
      ArcSoft
      ATI Technologies
      CodeStuff
      Comptes et Budget Free V5.0
      Core Design
      Digital Video
      DivX
      Documents To Go
      Easy Internet signup
      El Juky
      eMule
      ffdshow
      Fichiers communs
      FileZilla
      FreeDial
      Future Pinball
      Glary Utilities
      Google
      Harmony Assistant
      Heredis 7
      Hewlett-Packard
      HighMAT CD Writing Wizard
      HP
      HPQ
      IncrediMail
      InstallShield Installation Information
      Internet Explorer
      InterVideo
      iPod(2)
      iTunes(2)
      Java
      JRE
      Lavasoft
      Lexmark 2500 Series
      Lexmark Fax Solutions
      Lexmark Toolbar
      List_Kill'em
      Logitech
      Lx_cats
      Messenger
      Micro Application
      Microsoft
      Microsoft CAPICOM 2.1.0.2
      microsoft frontpage
      Microsoft Office
      Microsoft Works
      Movie Maker
      Mozilla Firefox
      MSBuild
      MSN
      MSN Gaming Zone
      MSXML 6.0
      MUSICMATCH
      muvee Technologies
      My Free Mahjong
      MyFreeTV
      NetMeeting
      OLYMPUS
      Online Services
      OpenOffice.org 2.4
      OpenOffice.org 3
      Outlook Express
      palmOne
      PhotoBox
      Picasa2
      PIXELA
      POP Peeper
      QuickTime
      Real
      Reference Assemblies
      Rocket Division Software
      Roll 'm Up
      Services en ligne
      Skype
      Sonic
      Spybot - Search & Destroy
      Sudokult Version 1.1
      Trend Micro
      T‚l‚chargement PHOTOWAYS
      Windows Defender
      Windows Live
      Windows Live SkyDrive
      Windows Media Connect 2
      Windows Media Player
      Windows NT
      xerox

      ============
      Drive C:
      ============

      1aeff0c1bc87cef9fcfa48
      9affc2796a70fd3a53bf6e
      aaw7boot.log
      Ad-Remover
      Ad-Report-CLEAN[1].log
      ALBUM.PVM
      AUTOEXEC.BAT
      Binaries
      BOOT.BAK
      boot.ini
      Bootfont.bin
      BrowserPlusPlugins
      cddrvinstall.log
      cmdcons
      cmldr
      Config.Msi
      CONFIG.SYS
      DCIM
      Documents and Settings
      drivers
      error.log
      faxendPdoc.log
      formreader6.log
      hp
      IO.SYS
      Kill'em
      List'em.txt
      LogiSetup.log
      LOGITECH
      logs
      lxdd.log
      Mes DVD
      MSDOS.SYS
      NTDETECT.COM
      ntldr
      OLALB
      orange.bmp
      P4140007.JPG
      pagefile.sys
      Program Files
      pscp.exe
      Python22
      RECYCLER
      setupfax.log
      sysprep
      System Volume Information
      system.sav
      temp.txt
      WINDOWS

      ¤¤¤¤¤¤¤¤¤¤ Cracks | Keygens | Serials

      C:\Program Files\Heredis 7\Models\Patchwork.hm7
      C:\Documents and Settings\HP_Propri‚taire\Mes documents\H‚r‚dis\Install.exe
      C:\hp\bin\PE_Patch.exe
      C:\hp\bin\Works\Install.exe
      D:\I386\SYSTEM32\OwnerPatch.exe
      D:\I386\Apps\APP29655\src\Install.exe
      D:\MiniNT\system32\OwnerPatch.exe




      ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤( EOF )¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
      0
  4. gen-hackman
     
    ▶ Relance List&Kill'em(soit en clic droit pour vista),avec le raccourci sur ton bureau.
    mais cette fois-ci :

    ▶ choisis l'option 2 = Mode Suppression

    laisse travailler l'outil.

    en fin de scan un rapport s'ouvre

    ▶ colle le contenu dans ta reponse
    0
    1. cm
       
      et voilà :)
      Kill'em by g3n-h@ckm@n 1.2.2.0



      ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Processes running

      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\csrss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Windows Defender\MsMpEng.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Fichiers communs\ArcSoft\Connection Service\Bin\ACService.exe
      C:\WINDOWS\system32\bgsvcgen.exe
      C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\lxddserv.exe
      C:\WINDOWS\system32\lxddcoms.exe
      C:\WINDOWS\system32\HPZipm12.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\WINDOWS\System32\alg.exe
      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      C:\WINDOWS\system32\spider.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\Program Files\List_Kill'em\List_Kill'em.scr
      C:\WINDOWS\system32\cmd.exe
      C:\Documents and Settings\HP_Propriétaire\Local Settings\Temp\2A.tmp\ERUNT.EXE
      C:\Documents and Settings\HP_Propriétaire\Local Settings\Temp\2A.tmp\pv.exe

      Detections :
      ==========


      ¤¤¤¤¤¤¤¤¤¤ Files/folders :

      Quarantined & Deleted !! : C:\Documents and Settings\All Users\Application Data\QTSBandwidthCache
      Quarantined & Deleted !! : C:\WINDOWS\bwUnin-7.2.0.137-8876480SL.exe

      Quarantined & Deleted !! : C:\WINDOWS\System32\drivers\etc\hosts.msn
      Quarantined & Deleted !! : C:\WINDOWS\system32\ps2.bat
      Quarantined & Deleted !! : C:\Documents and Settings\HP_Propri‚taire\Application Data\wklnhst.dat
      Quarantined & Deleted !! : C:\Documents and Settings\HP_Propri‚taire\LOCAL Settings\Temp\BrowserPlus.exe
      Quarantined & Deleted !! : C:\Documents and Settings\HP_Propri‚taire\LOCAL Settings\Temp\~gu-ver.dat

      ==============
      host file OK !
      ==============

      ========
      Registry
      ========
      Deleted : "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Install.exe"
      Deleted : "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Setup.exe"
      Deleted : "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File execution Options\taskmgr.exe"
      Deleted : HKCR\CLSID\{248dd896-bb45-11cf-9abc-0080c7e7b78d}
      Deleted : HKCR\CLSID\{248dd897-bb45-11cf-9abc-0080c7e7b78d}
      Deleted : HKCR\CLSID\{2b96d5cc-c5b5-49a5-a69d-cc0a30f9028c}
      Deleted : HKCR\Interface\{248dd892-bb45-11cf-9abc-0080c7e7b78d}
      Deleted : HKCR\Interface\{248dd893-bb45-11cf-9abc-0080c7e7b78d}
      Deleted : HKCR\TypeLib\{248dd890-bb45-11cf-9abc-0080c7e7b78d}
      ¤¤¤¤¤¤¤¤¤¤ Services fonctionnels

      # Ndisuio : Start = 3
      # Ip6Fw -> Start = 2
      # SharedAccess -> Start = 2
      # windefend -> Start = 2
      # wuauserv -> Start = 2
      # wscsvc -> Start = 2

      ============
      Disk Cleaned
      ============

      ================
      Prefetch cleaned
      ================



      ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤( EOF )¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
      0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. gen-hackman
     
    ▶ Télécharge Zeb-Restoreet enregistre ce fichier sur le bureau.

    ▶-Clic droit Zeb-Restore.zip ==> Extraire tout choisis comme lieu d'enregistrement le bureau.

    ▶-Ouvre le dossier ZR_1.0.0.37 ==> double clic sur Zeb-Restore.exe

    ▶- Coche la case devant : sites de confiance

    ▶- Ne coche aucune autre case

    ▶-Clique sur Restaurer

    ▶-Redémarre ton PC

    ensuite :

    ▶ Clique sur le menu Demarrer /Panneau de configuration/Options des dossiers/ puis dans l'onglet Affichage
    * - Coche Afficher les fichiers et dossiers cachés
    * - Décoche Masquer les extensions des fichiers dont le type est connu
    * - Décoche Masquer les fichiers protégés du système d'exploitation (recommandé)

    ▶ clique sur Appliquer, puis OK.

    N'oublie pas de recacher à nouveau les fichiers cachés et protégés du système d'exploitation en fin de désinfection, c'est important

    Fais analyser le(s) fichier(s) suivants sur Virustotal :

    Virus Total

    * Clique sur Parcourir en haut, choisis Poste de travail et cherche ces fichiers :

    C:\WINDOWS\System32\TWAIN32d.dll

    * Clique maintenant sur Envoyer le fichier. et laisse travailler tant que "Situation actuelle : en cours d'analyse" est affiché.
    * Il est possible que le fichier soit mis en file d'attente en raison d'un grand nombre de demandes d'analyses. En ce cas, il te faudra patienter sans actualiser la page.
    * Lorsque l'analyse est terminée ("Situation actuelle: terminé"), clique sur Formaté
    * Une nouvelle fenêtre de ton navigateur va apparaître
    * Clique alors sur les deux fleches
    * Fais un clic droit sur la page, et choisis Sélectionner tout, puis copier
    * Enfin colle le résultat dans ta prochaine réponse.

    Note : Pour analyser un autre fichier, clique en bas sur Autre fichier.

    ensuite :

    ▶ doubleclic sur OTL.exe pour le lancer.

    ▶Copie la liste qui se trouve en gras ci-dessous,

    ▶ colle-la dans la zone sous Customs Scans/Fixes :


    :processes
    explorer.exe
    iexplore.exe
    firefox.exe
    msnmsgr.exe
    Teatimer.exe

    :OTL
    FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}:6.0.01
    FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}:6.0.02
    FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}:6.0
    FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}:6.0.05
    FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}:6.0.04
    FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}:6.0.03
    FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}:6.0.07
    FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}:6.0.11
    O3 - HKLM\..\Toolbar: (no name) - - No CLSID value found.
    O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/shockwave/cabs/flash/ultrashim.cab (Reg Error: Value error.)
    O16 - DPF: {CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0-windows-i586.cab (Reg Error: Key error.)
    O16 - DPF: {CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_05-windows-i586.cab (Reg Error: Key error.)
    O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab (Reg Error: Key error.)
    O16 - DPF: {CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_08-windows-i586.cab (Reg Error: Key error.)
    O16 - DPF: {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586.cab (Reg Error: Key error.)
    O16 - DPF: {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_10-windows-i586.cab (Reg Error: Key error.)
    O16 - DPF: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_11-windows-i586.cab (Reg Error: Key error.)
    O16 - DPF: {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0-windows-i586.cab (Reg Error: Key error.)
    O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab (Reg Error: Key error.)
    O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab (Reg Error: Key error.)
    O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Reg Error: Key error.)
    O16 - DPF: {CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_04-windows-i586.cab (Reg Error: Key error.)
    O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Reg Error: Key error.)
    O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Reg Error: Key error.)
    O16 - DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
    O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
    O18 - Protocol\Handler\bw+0 {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bw+0s {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bw-0 {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bw00 {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bw00s {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bw-0s {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bw10 {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bw10s {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bw20 {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bw20s {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bw30 {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bw30s {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bw40 {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bw40s {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bw50 {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bw50s {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bw60 {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bw60s {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bw70 {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bw70s {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bw80 {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bw80s {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bw90 {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bw90s {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bwa0 {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bwa0s {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bwb0 {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bwb0s {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bwc0 {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bwc0s {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bwd0 {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bwd0s {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bwe0 {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bwe0s {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bwf0 {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bwf0s {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bwfile-8876480 {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bwg0 {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bwg0s {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bwh0 {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bwh0s {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bwi0 {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bwi0s {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bwj0 {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bwj0s {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bwk0 {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bwk0s {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bwl0 {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bwl0s {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bwm0 {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bwm0s {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bwn0 {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bwn0s {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bwo0 {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bwo0s {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bwp0 {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bwp0s {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bwq0 {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bwq0s {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bwr0 {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bwr0s {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bws0 {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bws0s {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bwt0 {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bwt0s {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bwu0 {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bwu0s {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bwv0 {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bwv0s {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bww0 {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bww0s {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bwx0 {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bwx0s {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bwy0 {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bwy0s {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bwz0 {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O18 - Protocol\Handler\bwz0s {8471f776-f013-46bf-91df-297e2c7db65c} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
    O20 - Winlogon\Notify\dimsntfy: DllName - Reg Error: Value error. - Reg Error: Value error. File not found
    O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} - CLSID or File not found.

    :files
    C:\Documents and Settings\All Users\Application Data\{00D89592-F643-4D8D-8F0F-AFAE0F14D4C3}
    C:\Documents and Settings\All Users\Application Data\{7972B2E5-3E09-4E5E-81B7-FE5819D6772F}
    C:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}

    :commands
    [emptytemp]
    [start explorer]
    [reboot]


    ▶ Clique sur RunFix pour lancer la suppression.

    ▶ Poste le rapport.
    0
    1. cm
       
      Voilà la page de virus total


      Fichier TWAIN32d.dll reçu le 2009.12.27 18:36:27 (UTC)
      Antivirus Version Dernière mise à jour Résultat
      a-squared 4.5.0.43 2009.12.27 -
      AhnLab-V3 5.0.0.2 2009.12.26 -
      AntiVir 7.9.1.122 2009.12.26 -
      Antiy-AVL 2.0.3.7 2009.12.25 -
      Authentium 5.2.0.5 2009.12.26 -
      Avast 4.8.1351.0 2009.12.27 -
      AVG 8.5.0.430 2009.12.27 -
      BitDefender 7.2 2009.12.27 -
      CAT-QuickHeal 10.00 2009.12.26 -
      ClamAV 0.94.1 2009.12.27 -
      Comodo 3387 2009.12.27 -
      DrWeb 5.0.1.12222 2009.12.27 -
      eSafe 7.0.17.0 2009.12.27 -
      eTrust-Vet 35.1.7198 2009.12.25 -
      F-Prot 4.5.1.85 2009.12.26 -
      F-Secure 9.0.15370.0 2009.12.27 -
      Fortinet 4.0.14.0 2009.12.27 -
      GData 19 2009.12.26 -
      Ikarus T3.1.1.79.0 2009.12.27 -
      Jiangmin 13.0.900 2009.12.27 -
      K7AntiVirus 7.10.931 2009.12.26 -
      Kaspersky 7.0.0.125 2009.12.27 -
      McAfee 5844 2009.12.27 -
      McAfee+Artemis 5844 2009.12.27 -
      McAfee-GW-Edition 6.8.5 2009.12.27 -
      Microsoft 1.5302 2009.12.26 -
      NOD32 4720 2009.12.27 -
      Norman 6.04.03 2009.12.27 -
      nProtect 2009.1.8.0 2009.12.27 -
      Panda 10.0.2.2 2009.12.15 -
      PCTools 7.0.3.5 2009.12.27 -
      Prevx 3.0 2009.12.27 -
      Rising 22.27.06.04 2009.12.27 -
      Sophos 4.49.0 2009.12.27 -
      Sunbelt 3.2.1858.2 2009.12.27 -
      Symantec 1.4.4.12 2009.12.27 -
      TheHacker 6.5.0.3.113 2009.12.26 -
      TrendMicro 9.120.0.1004 2009.12.27 -
      VBA32 3.12.12.0 2009.12.26 -
      ViRobot 2009.12.26.2109 2009.12.26 -
      VirusBuster 5.0.21.0 2009.12.27 -
      Information additionnelle
      File size: 65536 bytes
      MD5   : 9532edcd5793f542c96918f354446e3c
      SHA1  : ce6545dc7819ab0e54de0a41ca24501c7b9affe7
      SHA256: 3542231eefc333555ed92afef3dcdd8b9a2e7ac05485f51e5165f3da2350c286
      PEInfo: PE Structure information<br> <br> ( base data )<br> entrypointaddress.: 0x2E30<br> timedatestamp.....: 0x35FDE255 (Tue Sep 15 05:43:17 1998)<br> machinetype.......: 0x14C (Intel I386)<br> <br> ( 5 sections )<br> name viradd virsiz rawdsiz ntrpy md5<br> .text 0x1000 0x87BC 0x8800 6.46 7cb75bdd7c38b3546266a24be51ed84f<br>.rdata 0xA000 0x16F0 0x1800 5.28 9c5a0a3572ab61662e419295230065fb<br>.data 0xC000 0x5974 0x4200 2.60 86af9a19c4ebe83510dff67dc7198814<br>.idata 0x12000 0x946 0xA00 5.08 0ac612752c889d739c593eebcdf5c6bc<br>.reloc 0x13000 0xF2A 0x1000 5.04 fed921c2ade92cbed39cc21d7fbfc233<br> <br> ( 5 imports )<br> <br>> comdlg32.dll: GetOpenFileNameA, GetSaveFileNameA<br>> gdi32.dll: CreatePalette<br>> kernel32.dll: lstrcatA, GlobalUnlock, GlobalLock, LocalFree, LocalAlloc, FreeLibrary, GetProcAddress, LoadLibraryA, OutputDebugStringA, GlobalFree, lstrlenA, GetWindowsDirectoryA, _lclose, _lwrite, _hread, GlobalAlloc, _lread, OpenFile, SetLastError, GetACP, GetOEMCP, GetCPInfo, SetFilePointer, SetStdHandle, CloseHandle, FlushFileBuffers, GetLocaleInfoW, GetLocaleInfoA, LCMapStringA, LCMapStringW, GetStringTypeA, GetCommandLineA, GetModuleHandleA, GetVersion, ExitProcess, TerminateProcess, GetCurrentProcess, GetCurrentThreadId, TlsSetValue, TlsAlloc, TlsFree, lstrcpyA, TlsGetValue, GetLastError, SetHandleCount, GetStdHandle, GetFileType, GetStartupInfoA, DeleteCriticalSection, GetModuleFileNameA, GetStringTypeW, FreeEnvironmentStringsA, MultiByteToWideChar, FreeEnvironmentStringsW, GetEnvironmentStrings, GetEnvironmentStringsW, WideCharToMultiByte, HeapDestroy, HeapCreate, VirtualFree, WriteFile, InterlockedDecrement, InterlockedIncrement, InitializeCriticalSection, EnterCriticalSection, LeaveCriticalSection, HeapAlloc, HeapFree, VirtualAlloc<br>> msvfw32.dll: DrawDibDraw, DrawDibOpen, DrawDibClose<br>> user32.dll: EnableWindow, OpenClipboard, CloseClipboard, CreateWindowExA, IsWindow, MessageBoxA, wsprintfA, GetMessageA, TranslateMessage, DispatchMessageA, SetClipboardData, EmptyClipboard<br> <br> ( 1 exports )<br> <br>> DllMain, TWAIN_AbortAllPendingXfers, TWAIN_AcquireNative, TWAIN_AcquireToClipboard, TWAIN_AcquireToFilename, TWAIN_BreakModalLoop, TWAIN_CloseSource, TWAIN_CloseSourceManager, TWAIN_CreateDibPalette, TWAIN_DS, TWAIN_DibDepth, TWAIN_DibHeight, TWAIN_DibNumColors, TWAIN_DibWidth, TWAIN_DisableSource, TWAIN_DrawDibToDC, TWAIN_EasyVersion, TWAIN_EnableSource, TWAIN_EndXfer, TWAIN_ErrorBox, TWAIN_Fix32ToFloat, TWAIN_FreeNative, TWAIN_GetBitDepth, TWAIN_GetCapCurrent, TWAIN_GetConditionCode, TWAIN_GetCurrentResolution, TWAIN_GetCurrentUnits, TWAIN_GetHideUI, TWAIN_GetPixelType, TWAIN_GetResultCode, TWAIN_GetYResolution, TWAIN_IsAvailable, TWAIN_LoadNativeFromFile, TWAIN_LoadNativeFromFilename, TWAIN_LoadSourceManager, TWAIN_MessageHook, TWAIN_Mgr, TWAIN_ModalEventLoop, TWAIN_NegotiatePixelTypes, TWAIN_NegotiateXferCount, TWAIN_OpenDefaultSource, TWAIN_OpenSourceManager, TWAIN_RegisterApp, TWAIN_ReportLastError, TWAIN_SelectImageSource, TWAIN_SetBitDepth, TWAIN_SetBrightness, TWAIN_SetCapOneValue, TWAIN_SetContrast, TWAIN_SetCurrentPixelType, TWAIN_SetCurrentResolution, TWAIN_SetCurrentUnits, TWAIN_SetHideUI, TWAIN_SetXferMech, TWAIN_State, TWAIN_ToFix32, TWAIN_UnloadSourceManager, TWAIN_WaitForNativeXfer, TWAIN_WriteDibToFile, TWAIN_WriteNativeToFile, TWAIN_WriteNativeToFilename, TWAIN_XferMech
      TrID  : File type identification<br>Win32 Executable MS Visual C++ 4.x (64.8%)<br>Win32 Executable MS Visual C++ (generic) (18.1%)<br>Windows Screen Saver (6.3%)<br>Win32 Executable Generic (4.1%)<br>Win32 Dynamic Link Library (generic) (3.6%)
      ssdeep: 768:vKPXc9r4VW1Kr/hXn1U2TS7pcuXHmP+Wbt5S+jmTuhc07HBsNyygOdEL:vKURTM6D7uuXG2Wbt5S+jmT7+HBshgV
      PEiD  : -
      RDS   : NSRL Reference Data Set<br>-

      Antivirus Version Dernière mise à jour Résultat
      a-squared 4.5.0.43 2009.12.27 -
      AhnLab-V3 5.0.0.2 2009.12.26 -
      AntiVir 7.9.1.122 2009.12.26 -
      Antiy-AVL 2.0.3.7 2009.12.25 -
      Authentium 5.2.0.5 2009.12.26 -
      Avast 4.8.1351.0 2009.12.27 -
      AVG 8.5.0.430 2009.12.27 -
      BitDefender 7.2 2009.12.27 -
      CAT-QuickHeal 10.00 2009.12.26 -
      ClamAV 0.94.1 2009.12.27 -
      Comodo 3387 2009.12.27 -
      DrWeb 5.0.1.12222 2009.12.27 -
      eSafe 7.0.17.0 2009.12.27 -
      eTrust-Vet 35.1.7198 2009.12.25 -
      F-Prot 4.5.1.85 2009.12.26 -
      F-Secure 9.0.15370.0 2009.12.27 -
      Fortinet 4.0.14.0 2009.12.27 -
      GData 19 2009.12.26 -
      Ikarus T3.1.1.79.0 2009.12.27 -
      Jiangmin 13.0.900 2009.12.27 -
      K7AntiVirus 7.10.931 2009.12.26 -
      Kaspersky 7.0.0.125 2009.12.27 -
      McAfee 5844 2009.12.27 -
      McAfee+Artemis 5844 2009.12.27 -
      McAfee-GW-Edition 6.8.5 2009.12.27 -
      Microsoft 1.5302 2009.12.26 -
      NOD32 4720 2009.12.27 -
      Norman 6.04.03 2009.12.27 -
      nProtect 2009.1.8.0 2009.12.27 -
      Panda 10.0.2.2 2009.12.15 -
      PCTools 7.0.3.5 2009.12.27 -
      Prevx 3.0 2009.12.27 -
      Rising 22.27.06.04 2009.12.27 -
      Sophos 4.49.0 2009.12.27 -
      Sunbelt 3.2.1858.2 2009.12.27 -
      Symantec 1.4.4.12 2009.12.27 -
      TheHacker 6.5.0.3.113 2009.12.26 -
      TrendMicro 9.120.0.1004 2009.12.27 -
      VBA32 3.12.12.0 2009.12.26 -
      ViRobot 2009.12.26.2109 2009.12.26 -
      VirusBuster 5.0.21.0 2009.12.27 -

      Information additionnelle
      File size: 65536 bytes
      MD5   : 9532edcd5793f542c96918f354446e3c
      SHA1  : ce6545dc7819ab0e54de0a41ca24501c7b9affe7
      SHA256: 3542231eefc333555ed92afef3dcdd8b9a2e7ac05485f51e5165f3da2350c286
      PEInfo: PE Structure information<br> <br> ( base data )<br> entrypointaddress.: 0x2E30<br> timedatestamp.....: 0x35FDE255 (Tue Sep 15 05:43:17 1998)<br> machinetype.......: 0x14C (Intel I386)<br> <br> ( 5 sections )<br> name viradd virsiz rawdsiz ntrpy md5<br> .text 0x1000 0x87BC 0x8800 6.46 7cb75bdd7c38b3546266a24be51ed84f<br>.rdata 0xA000 0x16F0 0x1800 5.28 9c5a0a3572ab61662e419295230065fb<br>.data 0xC000 0x5974 0x4200 2.60 86af9a19c4ebe83510dff67dc7198814<br>.idata 0x12000 0x946 0xA00 5.08 0ac612752c889d739c593eebcdf5c6bc<br>.reloc 0x13000 0xF2A 0x1000 5.04 fed921c2ade92cbed39cc21d7fbfc233<br> <br> ( 5 imports )<br> <br>> comdlg32.dll: GetOpenFileNameA, GetSaveFileNameA<br>> gdi32.dll: CreatePalette<br>> kernel32.dll: lstrcatA, GlobalUnlock, GlobalLock, LocalFree, LocalAlloc, FreeLibrary, GetProcAddress, LoadLibraryA, OutputDebugStringA, GlobalFree, lstrlenA, GetWindowsDirectoryA, _lclose, _lwrite, _hread, GlobalAlloc, _lread, OpenFile, SetLastError, GetACP, GetOEMCP, GetCPInfo, SetFilePointer, SetStdHandle, CloseHandle, FlushFileBuffers, GetLocaleInfoW, GetLocaleInfoA, LCMapStringA, LCMapStringW, GetStringTypeA, GetCommandLineA, GetModuleHandleA, GetVersion, ExitProcess, TerminateProcess, GetCurrentProcess, GetCurrentThreadId, TlsSetValue, TlsAlloc, TlsFree, lstrcpyA, TlsGetValue, GetLastError, SetHandleCount, GetStdHandle, GetFileType, GetStartupInfoA, DeleteCriticalSection, GetModuleFileNameA, GetStringTypeW, FreeEnvironmentStringsA, MultiByteToWideChar, FreeEnvironmentStringsW, GetEnvironmentStrings, GetEnvironmentStringsW, WideCharToMultiByte, HeapDestroy, HeapCreate, VirtualFree, WriteFile, InterlockedDecrement, InterlockedIncrement, InitializeCriticalSection, EnterCriticalSection, LeaveCriticalSection, HeapAlloc, HeapFree, VirtualAlloc<br>> msvfw32.dll: DrawDibDraw, DrawDibOpen, DrawDibClose<br>> user32.dll: EnableWindow, OpenClipboard, CloseClipboard, CreateWindowExA, IsWindow, MessageBoxA, wsprintfA, GetMessageA, TranslateMessage, DispatchMessageA, SetClipboardData, EmptyClipboard<br> <br> ( 1 exports )<br> <br>> DllMain, TWAIN_AbortAllPendingXfers, TWAIN_AcquireNative, TWAIN_AcquireToClipboard, TWAIN_AcquireToFilename, TWAIN_BreakModalLoop, TWAIN_CloseSource, TWAIN_CloseSourceManager, TWAIN_CreateDibPalette, TWAIN_DS, TWAIN_DibDepth, TWAIN_DibHeight, TWAIN_DibNumColors, TWAIN_DibWidth, TWAIN_DisableSource, TWAIN_DrawDibToDC, TWAIN_EasyVersion, TWAIN_EnableSource, TWAIN_EndXfer, TWAIN_ErrorBox, TWAIN_Fix32ToFloat, TWAIN_FreeNative, TWAIN_GetBitDepth, TWAIN_GetCapCurrent, TWAIN_GetConditionCode, TWAIN_GetCurrentResolution, TWAIN_GetCurrentUnits, TWAIN_GetHideUI, TWAIN_GetPixelType, TWAIN_GetResultCode, TWAIN_GetYResolution, TWAIN_IsAvailable, TWAIN_LoadNativeFromFile, TWAIN_LoadNativeFromFilename, TWAIN_LoadSourceManager, TWAIN_MessageHook, TWAIN_Mgr, TWAIN_ModalEventLoop, TWAIN_NegotiatePixelTypes, TWAIN_NegotiateXferCount, TWAIN_OpenDefaultSource, TWAIN_OpenSourceManager, TWAIN_RegisterApp, TWAIN_ReportLastError, TWAIN_SelectImageSource, TWAIN_SetBitDepth, TWAIN_SetBrightness, TWAIN_SetCapOneValue, TWAIN_SetContrast, TWAIN_SetCurrentPixelType, TWAIN_SetCurrentResolution, TWAIN_SetCurrentUnits, TWAIN_SetHideUI, TWAIN_SetXferMech, TWAIN_State, TWAIN_ToFix32, TWAIN_UnloadSourceManager, TWAIN_WaitForNativeXfer, TWAIN_WriteDibToFile, TWAIN_WriteNativeToFile, TWAIN_WriteNativeToFilename, TWAIN_XferMech
      TrID  : File type identification<br>Win32 Executable MS Visual C++ 4.x (64.8%)<br>Win32 Executable MS Visual C++ (generic) (18.1%)<br>Windows Screen Saver (6.3%)<br>Win32 Executable Generic (4.1%)<br>Win32 Dynamic Link Library (generic) (3.6%)
      ssdeep: 768:vKPXc9r4VW1Kr/hXn1U2TS7pcuXHmP+Wbt5S+jmTuhc07HBsNyygOdEL:vKURTM6D7uuXG2Wbt5S+jmT7+HBshgV
      PEiD  : -
      RDS   : NSRL Reference Data Set<br>-
      0
  7. gen-hackman
     
    ok la suite ;)
    0
    1. cm
       
      je ne trouve pas le dernier rapport avec OLT. Pour faire redémarrer l'ordinateur j'ai du le faire manuellement (arrêter et redémarrer) olt s'est rouvert mais j'ai du cliquer sur la "croix" en haut à droite pour fermer la fenêtre afin que l'ordi continue de démarrer. J'ai pas eu de rapport ou je ne sais pas où le trouver
      0
  8. gen-hackman
     
    l ordi aurait redemarré apres OTL
    0
    1. cm
       
      Zut, j'ai raté quelque chose . Est-ce qu'il faut que je recommence ?
      0
  9. gen-hackman
     
    tu dois avoir un rapport ici :

    C:\_OTL\Moved files\la_date_et_l'heure_de_la_suppression
    0
    1. cm
       
      Ca y est, le voilà ::))

      All processes killed
      ========== PROCESSES ==========
      No active process named explorer.exe was found!
      No active process named iexplore.exe was found!
      No active process named firefox.exe was found!
      No active process named msnmsgr.exe was found!
      No active process named Teatimer.exe was found!
      ========== OTL ==========
      Registry delete failed. HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Starting removal of ActiveX control {8FFBE65D-2C9C-4669-84BD-5829DC0B603C}
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      File move failed. C:\WINDOWS\Downloaded Program Files\erma.inf scheduled to be moved on reboot.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found.
      Starting removal of ActiveX control {CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}\ not found.
      Starting removal of ActiveX control {CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}\ not found.
      Starting removal of ActiveX control {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}\ not found.
      Starting removal of ActiveX control {CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA}
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA}\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA}\ not found.
      Starting removal of ActiveX control {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}\ not found.
      Starting removal of ActiveX control {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}\ not found.
      Starting removal of ActiveX control {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}\ not found.
      Starting removal of ActiveX control {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}\ not found.
      Starting removal of ActiveX control {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}\ not found.
      Starting removal of ActiveX control {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}\ not found.
      Starting removal of ActiveX control {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}\ not found.
      Starting removal of ActiveX control {CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}\ not found.
      Starting removal of ActiveX control {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}\ not found.
      Starting removal of ActiveX control {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ not found.
      Starting removal of ActiveX control {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}\ not found.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      File move failed. C:\WINDOWS\system32\mshtml.dll scheduled to be moved on reboot.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\about\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\WINDOWS\system32\mshtml.dll
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      File move failed. C:\WINDOWS\system32\mshtml.dll scheduled to be moved on reboot.
      C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll moved successfully.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw+0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw+0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw-0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw00\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw00s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw-0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw10\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw10s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw20\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw20s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw30\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw30s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw40\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw40s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw50\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw50s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw60\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw60s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw70\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw70s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw80\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw80s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw90\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw90s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwa0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwa0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwb0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwb0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwc0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwc0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwd0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwd0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwe0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwe0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwf0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwf0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll moved successfully.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwfile-8876480\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwg0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwg0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwh0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwh0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwi0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwi0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwj0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwj0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwk0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwk0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwl0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwl0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwm0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwm0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwn0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwn0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwo0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwo0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwp0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwp0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwq0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwq0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwr0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwr0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bws0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bws0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwt0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwt0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwu0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwu0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwv0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwv0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bww0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bww0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwx0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwx0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwy0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwy0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwz0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwz0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\dimsntfy\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\CDBurn scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{fbeb8a05-beee-4442-804e-409d6c4515e9}\ not found.
      ========== FILES ==========
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Folder move failed. C:\Documents and Settings\All Users\Application Data\{00D89592-F643-4D8D-8F0F-AFAE0F14D4C3}\x86 scheduled to be moved on reboot.
      Folder move failed. C:\Documents and Settings\All Users\Application Data\{00D89592-F643-4D8D-8F0F-AFAE0F14D4C3} scheduled to be moved on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Folder move failed. C:\Documents and Settings\All Users\Application Data\{7972B2E5-3E09-4E5E-81B7-FE5819D6772F} scheduled to be moved on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Folder move failed. C:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}\x86 scheduled to be moved on reboot.
      Folder move failed. C:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906} scheduled to be moved on reboot.
      ========== COMMANDS ==========

      [EMPTYTEMP]

      User: All Users

      User: Default User
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      ->Temp folder emptied: 18090 bytes
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      ->Temporary Internet Files folder emptied: 32902 bytes

      User: HP_Propriétaire

      User: LocalService
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      ->Temp folder emptied: 115616 bytes
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      ->Temporary Internet Files folder emptied: 32969 bytes
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      ->FireFox cache emptied: 43109790 bytes

      User: NetworkService
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      ->Temp folder emptied: 763604 bytes
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to loca
      0
  10. gen-hackman
     
    ok salut refais un scan OTL comme demandé plus haut via cijoint
    0
    1. cm
       
      Comme dans le message où je devais copier des lignes de programme ?
      0
    2. cm
       
      En réfléchissant je pense que c'est ce que je devais faire Il se trouve là
      http://www.cijoint.fr/cjlink.php?file=cj201002/cijbFu50sA.txt

      Merci
      0
  11. cm
     
    et voici la suite :
    http://www.cijoint.fr/cjlink.php?file=cj201002/cijFjxSc0n.txt
    0
  12. gen-hackman
     
    tu es administrateur de l ordinateur ?

    refais la manip de suppression avec OTL en collant tout le texte en gras precedemment cité , mais avec le clic droit "executer en tant qu'administrateur" stp
    0
    1. cm
       
      voilà le rapport après la manip. J'ai exécuté OTL en tant qu'administrateur :

      All processes killed
      ========== PROCESSES ==========
      No active process named explorer.exe was found!
      No active process named iexplore.exe was found!
      No active process named firefox.exe was found!
      No active process named msnmsgr.exe was found!
      No active process named Teatimer.exe was found!
      ========== OTL ==========
      Registry delete failed. HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Starting removal of ActiveX control {8FFBE65D-2C9C-4669-84BD-5829DC0B603C}
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      File move failed. C:\WINDOWS\Downloaded Program Files\erma.inf scheduled to be moved on reboot.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found.
      Starting removal of ActiveX control {CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}\ not found.
      Starting removal of ActiveX control {CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}\ not found.
      Starting removal of ActiveX control {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}\ not found.
      Starting removal of ActiveX control {CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA}
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA}\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA}\ not found.
      Starting removal of ActiveX control {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}\ not found.
      Starting removal of ActiveX control {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}\ not found.
      Starting removal of ActiveX control {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}\ not found.
      Starting removal of ActiveX control {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}\ not found.
      Starting removal of ActiveX control {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}\ not found.
      Starting removal of ActiveX control {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}\ not found.
      Starting removal of ActiveX control {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}\ not found.
      Starting removal of ActiveX control {CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}\ not found.
      Starting removal of ActiveX control {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}\ not found.
      Starting removal of ActiveX control {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ not found.
      Starting removal of ActiveX control {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}\ not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}\ not found.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      File move failed. C:\WINDOWS\system32\mshtml.dll scheduled to be moved on reboot.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\about\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\WINDOWS\system32\mshtml.dll
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      File move failed. C:\WINDOWS\system32\mshtml.dll scheduled to be moved on reboot.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw+0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw+0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw-0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw00\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw00s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw-0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw10\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw10s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw20\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw20s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw30\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw30s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw40\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw40s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw50\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw50s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw60\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw60s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw70\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw70s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw80\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw80s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw90\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw90s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwa0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwa0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwb0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwb0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwc0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwc0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwd0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwd0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwe0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwe0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwf0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwf0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwfile-8876480\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwg0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwg0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwh0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwh0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwi0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwi0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwj0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwj0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwk0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwk0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwl0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwl0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwm0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwm0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwn0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwn0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwo0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwo0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwp0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwp0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwq0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwq0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwr0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwr0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bws0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bws0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwt0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwt0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwu0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwu0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwv0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwv0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bww0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bww0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwx0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwx0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwy0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwy0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwz0\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwz0s\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\dimsntfy\ scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\CDBurn scheduled to be deleted on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{fbeb8a05-beee-4442-804e-409d6c4515e9}\ not found.
      ========== FILES ==========
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Folder move failed. C:\Documents and Settings\All Users\Application Data\{00D89592-F643-4D8D-8F0F-AFAE0F14D4C3}\x86 scheduled to be moved on reboot.
      Folder move failed. C:\Documents and Settings\All Users\Application Data\{00D89592-F643-4D8D-8F0F-AFAE0F14D4C3} scheduled to be moved on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Folder move failed. C:\Documents and Settings\All Users\Application Data\{7972B2E5-3E09-4E5E-81B7-FE5819D6772F} scheduled to be moved on reboot.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Folder move failed. C:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}\x86 scheduled to be moved on reboot.
      Folder move failed. C:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906} scheduled to be moved on reboot.
      ========== COMMANDS ==========

      [EMPTYTEMP]

      User: All Users

      User: Default User
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      ->Temp folder emptied: 18090 bytes
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      ->Temporary Internet Files folder emptied: 32902 bytes

      User: HP_Propriétaire

      User: LocalService
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      ->Temp folder emptied: 115616 bytes
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      ->Temporary Internet Files folder emptied: 32969 bytes
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      ->FireFox cache emptied: 43109790 bytes

      User: NetworkService
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      ->Temp folder emptied: 769292 bytes
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software\OldTimer Tools\OTL key.
      Unable to locate HKLM\Software
      0
  13. gen-hackman
     
    y a un truc qui bloque là.....

    ▶ Télécharge : Gmer (by Przemyslaw Gmerek)

    ▶ Dezippe gmer ,cliques sur l'onglet rootkit,lances le scan,des lignes rouges vont apparaitre.

    ▶ Les lignes rouges indiquent la presence d'un rootkit.Postes moi le rapport gmer (cliques sur copy,puis vas dans demarrer ,puis ouvres le bloc note,vas dans edition et cliques sur coller,le rapport gmer va apparaitre,postes moi le)

    Ensuite

    ▶ sur les lignes rouge:

    ▶ Services:cliques droit delete service
    ▶ Process:cliques droit kill process
    ▶ Adl ,file:cliques droit delete files
    0
    1. cm
       
      voilà le rapport gmer :


      Code \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwCreateProcessEx [0xEEA5952A]
      Code \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwCreateSection [0xEEA5934E]
      Code \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwLoadDriver [0xEEA59488]
      Code \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) NtCreateSection
      Code \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ObInsertObject
      Code \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ObMakeTemporaryObject

      ---- Devices - GMER 1.0.15 ----

      Device \FileSystem\Ntfs \Ntfs aswSP.SYS (avast! self protection module/ALWIL Software)

      AttachedDevice \FileSystem\Ntfs \Ntfs aswMon2.SYS (avast! File System Filter Driver for Windows XP/ALWIL Software)

      Device \FileSystem\Fastfat \Fat aswSP.SYS (avast! self protection module/ALWIL Software)

      AttachedDevice \FileSystem\Fastfat \Fat fltMgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)
      AttachedDevice \FileSystem\Fastfat \Fat aswMon2.SYS (avast! File System Filter Driver for Windows XP/ALWIL Software)
      AttachedDevice \Driver\Tcpip \Device\Ip aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)
      AttachedDevice \Driver\Tcpip \Device\Tcp aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)
      AttachedDevice \Driver\Tcpip \Device\Udp aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)
      AttachedDevice \Driver\Tcpip \Device\RawIp aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)
      AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 lkbdfltr.sys (Logitech Keyboard Filter Driver/Logitech)

      ---- EOF - GMER 1.0.15 ----
      0
    2. cm
       
      je me suis trompée :( Je viens de comprendre ce que je devais faire. Ca va arriver
      0
    3. cm
       
      voilà le rapport :

      GMER 1.0.15.15281 - http://www.gmer.net
      Rootkit scan 2010-02-04 22:07:13
      Windows 5.1.2600 Service Pack 2
      Running: gmer.exe; Driver: C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp\pwryquog.sys


      ---- System - GMER 1.0.15 ----

      SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwClose [0xEEA4CC78]
      SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwCreateKey [0xEEA4CB34]
      SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwDeleteKey [0xEEA4D0E8]
      SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwDeleteValueKey [0xEEA4D012]
      SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwDuplicateObject [0xEEA4C70A]
      SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwOpenKey [0xEEA4CC0E]
      SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwOpenProcess [0xEEA4C64A]
      SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwOpenThread [0xEEA4C6AE]
      SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwQueryValueKey [0xEEA4CD2E]
      SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwRenameKey [0xEEA4D1B6]
      SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwRestoreKey [0xEEA4CCEE]
      SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwSetValueKey [0xEEA4CE6E]

      Code \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwCreateProcessEx [0xEEA5952A]
      Code \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwCreateSection [0xEEA5934E]
      Code \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwLoadDriver [0xEEA59488]
      Code \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) NtCreateSection
      Code \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ObInsertObject
      Code \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ObMakeTemporaryObject

      ---- Kernel code sections - GMER 1.0.15 ----

      .text ntkrnlpa.exe!ZwCallbackReturn + 2428 80501318 4 Bytes CALL AF3EB7ED
      PAGE ntkrnlpa.exe!ZwLoadDriver 80578664 7 Bytes JMP EEA5948C \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software)
      PAGE ntkrnlpa.exe!NtCreateSection 8059F568 7 Bytes JMP EEA59352 \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software)
      PAGE ntkrnlpa.exe!ObMakeTemporaryObject 805B0A74 5 Bytes JMP EEA554E6 \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software)
      PAGE ntkrnlpa.exe!ObInsertObject 805B7762 5 Bytes JMP EEA5699E \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software)
      PAGE ntkrnlpa.exe!ZwCreateProcessEx 805C5F66 7 Bytes JMP EEA5952E \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software)

      ---- User IAT/EAT - GMER 1.0.15 ----

      IAT C:\WINDOWS\system32\services.exe[596] @ C:\WINDOWS\system32\services.exe [ADVAPI32.dll!CreateProcessAsUserW] 00380002
      IAT C:\WINDOWS\system32\services.exe[596] @ C:\WINDOWS\system32\services.exe [KERNEL32.dll!CreateProcessW] 00380000

      ---- Devices - GMER 1.0.15 ----

      Device \FileSystem\Ntfs \Ntfs aswSP.SYS (avast! self protection module/ALWIL Software)

      AttachedDevice \FileSystem\Ntfs \Ntfs aswMon2.SYS (avast! File System Filter Driver for Windows XP/ALWIL Software)

      Device \FileSystem\Fastfat \FatCdrom aswSP.SYS (avast! self protection module/ALWIL Software)

      AttachedDevice \Driver\Tcpip \Device\Ip aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)
      AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 lkbdfltr.sys (Logitech Keyboard Filter Driver/Logitech)
      AttachedDevice \Driver\Tcpip \Device\Tcp aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)
      AttachedDevice \Driver\Tcpip \Device\Udp aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)
      AttachedDevice \Driver\Tcpip \Device\RawIp aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)

      Device \FileSystem\Fastfat \Fat aswSP.SYS (avast! self protection module/ALWIL Software)

      AttachedDevice \FileSystem\Fastfat \Fat fltMgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)
      AttachedDevice \FileSystem\Fastfat \Fat aswMon2.SYS (avast! File System Filter Driver for Windows XP/ALWIL Software)

      Device \FileSystem\Cdfs \Cdfs EB62D400
      0
    4. cm
       
      Je n'ai pas compris la réponse
      0
  14. gen-hackman
     
    mets a jour vers le sp3
    0
    1. cm
       
      alors là ça me pose un pb : à chaque fois que je l'ai fais ça n'arrête pas de redémarrer (ordinateur HP). J'ai du l'enlever à chaque fois pour rester en sp2 et pouvoir utiliser l'ordi sans redémarrage intempestif
      0
  15. gen-hackman
     
    salut

    tu as le cd de windows ?
    0
    1. cm
       
      J'ai les cd de restauration que j'ai fait quand j'ai acheté l'unité centrale HP Pavillon
      0
  16. gen-hackman
     
    as-tu ce dossier :?

    C:\I386
    0
    1. cm
       
      Je viens de trouver un dossier "1386" sur le dvd de restauration
      0
  17. gen-hackman
     
    quel poids fait-il ?
    0
    1. cm
       
      taille = 1.99 Go
      11 945 fichiers
      561 dossiers
      0
  18. gen-hackman
     
    je ne pense pas que cela fonctionne mais on essaie :

    demarrer / executer puis tape : SFC /SCANNOW (espace avec le "/") puis entrée

    si un fichier est altéré , il te demandera de mettre le CD , et tu selectionnes le dvd de restauration

    tiens moi au courant
    0
    1. cm
       
      Je viens de le faire mais la petite fenêtre noire s'ouvre mais se ferme aussitôt donc, je n'ai pas le temps de lire ce qu'il y a écrit dessus
      0
  19. gen-hackman
     
    ▶ Clique sur le menu Demarrer /Panneau de configuration/Options des dossiers/ puis dans l'onglet Affichage
    * - Coche Afficher les fichiers et dossiers cachés
    * - Décoche Masquer les extensions des fichiers dont le type est connu
    * - Décoche Masquer les fichiers protégés du système d'exploitation (recommandé)

    ▶ clique sur Appliquer, puis OK.

    N'oublie pas de recacher à nouveau les fichiers cachés et protégés du système d'exploitation en fin de désinfection, c'est important

    Fais analyser le(s) fichier(s) suivants sur Virustotal :

    Virus Total

    * Clique sur Parcourir en haut, choisis Poste de travail et cherche ces fichiers :

    c:\pscp.exe

    * Clique maintenant sur Envoyer le fichier. et laisse travailler tant que "Situation actuelle : en cours d'analyse" est affiché.
    * Il est possible que le fichier soit mis en file d'attente en raison d'un grand nombre de demandes d'analyses. En ce cas, il te faudra patienter sans actualiser la page.
    * Lorsque l'analyse est terminée ("Situation actuelle: terminé"), clique sur Formaté
    * Une nouvelle fenêtre de ton navigateur va apparaître
    * Clique alors sur les deux fleches
    * Fais un clic droit sur la page, et choisis Sélectionner tout, puis copier
    * Enfin colle le résultat dans ta prochaine réponse.

    Note : Pour analyser un autre fichier, clique en bas sur Autre fichier.
    0
    1. cm
       
      voici le rapport d'analyse :


      Fichier pscp.exe reçu le 2010.02.05 07:37:40 (UTC)
      Antivirus Version Dernière mise à jour Résultat
      a-squared 4.5.0.50 2010.02.02 -
      AhnLab-V3 5.0.0.2 2010.02.01 -
      AntiVir 7.9.1.156 2010.02.02 -
      Antiy-AVL 2.0.3.7 2010.02.02 -
      Authentium 5.2.0.5 2010.02.02 -
      Avast 4.8.1351.0 2010.02.02 -
      AVG 9.0.0.730 2010.02.01 -
      BitDefender 7.2 2010.02.02 -
      CAT-QuickHeal 10.00 2010.02.02 -
      ClamAV 0.96.0.0-git 2010.02.02 -
      Comodo 3790 2010.02.02 -
      DrWeb 5.0.1.12222 2010.02.02 -
      eSafe 7.0.17.0 2010.02.02 Win32.Looked.BK
      eTrust-Vet 35.2.7276 2010.02.02 -
      F-Prot 4.5.1.85 2010.02.01 -
      F-Secure 9.0.15370.0 2010.02.02 -
      Fortinet 4.0.14.0 2010.02.02 -
      GData 19 2010.02.02 -
      Ikarus T3.1.1.80.0 2010.02.02 -
      Jiangmin 13.0.900 2010.02.02 -
      K7AntiVirus 7.10.962 2010.02.01 -
      Kaspersky 7.0.0.125 2010.02.02 -
      McAfee 5879 2010.02.01 -
      McAfee+Artemis 5879 2010.02.01 -
      McAfee-GW-Edition 6.8.5 2010.02.02 -
      Microsoft 1.5406 2010.02.02 -
      NOD32 4827 2010.02.02 -
      Norman 6.04.03 2010.02.02 -
      nProtect 2009.1.8.0 2010.02.02 -
      Panda 10.0.2.2 2010.02.01 -
      PCTools 7.0.3.5 2010.02.02 -
      Prevx 3.0 2010.02.05 -
      Rising 22.33.01.04 2010.02.02 -
      Sophos 4.50.0 2010.02.02 -
      Sunbelt 3.2.1858.2 2010.02.02 -
      TheHacker 6.5.1.0.176 2010.02.02 -
      TrendMicro 9.120.0.1004 2010.02.02 -
      VBA32 3.12.12.1 2010.02.01 -
      ViRobot 2010.2.2.2168 2010.02.02 -
      VirusBuster 5.0.21.0 2010.02.01 -
      Information additionnelle
      File size: 274432 bytes
      MD5...: dad4ab99f805222093a434b257385645
      SHA1..: 299e72ad3f57ad4da7f3e4d0dcc936a43091cc9b
      SHA256: e5cd16cb698ecf2d9e5e9a137563e150c6a67ecf4edfa78cb6d3418532ba8221
      ssdeep: 6144:rgCfkeifUKppBDi2xOXwUITqW9/mCKq6YFrrYhMzWZc:0CcefcpiITrdm1q<br>DyZ<br>
      PEiD..: -
      PEInfo: PE Structure information<br><br>( base data )<br>entrypointaddress.: 0x2a299<br>timedatestamp.....: 0x4252ea48 (Tue Apr 05 19:43:04 2005)<br>machinetype.......: 0x14c (I386)<br><br>( 4 sections )<br>name viradd virsiz rawdsiz ntrpy md5<br>.text 0x1000 0x30f01 0x31000 6.70 7b6e6f8477b065e15a30fd809dd48917<br>.rdata 0x32000 0xe868 0xf000 6.40 3d3c1df681e133664f07799c27891bca<br>.data 0x41000 0x5c04 0x1000 3.46 c6b38b3c7f8d71fb7a536a04c018d69f<br>.rsrc 0x47000 0x510 0x1000 1.10 e2c505e59e2e6030273357b81dd51c22<br><br>( 3 imports ) <br>> ADVAPI32.dll: GetUserNameA, RegCloseKey, RegCreateKeyA, RegSetValueExA, RegOpenKeyA, RegQueryValueExA<br>> USER32.dll: MsgWaitForMultipleObjects, PostMessageA, SendMessageA, FindWindowA, GetForegroundWindow, GetCapture, GetClipboardOwner, GetQueueStatus, GetCursorPos<br>> KERNEL32.dll: SetEndOfFile, SetEnvironmentVariableA, CompareStringW, CompareStringA, HeapSize, GetLocaleInfoA, InterlockedExchange, RtlUnwind, SetStdHandle, SetFilePointer, GetTickCount, ReadFile, SetConsoleMode, GetConsoleMode, GetStdHandle, WriteFile, GetVersionExA, GetProcAddress, LoadLibraryA, FreeLibrary, GetSystemTimeAdjustment, GetSystemTime, GetProcessTimes, GetCurrentProcess, GetThreadTimes, GetCurrentThread, GlobalMemoryStatus, QueryPerformanceCounter, FindClose, FindNextFileA, FindFirstFileA, GetWindowsDirectoryA, CloseHandle, UnmapViewOfFile, MapViewOfFile, CreateFileMappingA, GetCurrentThreadId, SleepEx, GetLastError, GetFileTime, GetFileSize, CreateFileA, SetFileTime, GetFileAttributesA, CreateDirectoryA, CreateEventA, GetEnvironmentVariableA, GetLocalTime, GetModuleFileNameA, GetTimeFormatA, GetDateFormatA, HeapAlloc, HeapReAlloc, HeapFree, GetSystemTimeAsFileTime, ExitProcess, GetModuleHandleA, TerminateProcess, GetCommandLineA, FlushFileBuffers, WideCharToMultiByte, GetTimeZoneInformation, VirtualProtect, VirtualAlloc, GetSystemInfo, VirtualQuery, SetHandleCount, GetFileType, GetStartupInfoA, GetStringTypeA, MultiByteToWideChar, GetStringTypeW, LCMapStringA, LCMapStringW, HeapDestroy, HeapCreate, VirtualFree, UnhandledExceptionFilter, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, GetCurrentProcessId, GetACP, GetOEMCP, GetCPInfo<br><br>( 0 exports ) <br>
      RDS...: NSRL Reference Data Set<br>-
      pdfid.: -
      trid..: Win32 Executable MS Visual C++ (generic) (65.2%)<br>Win32 Executable Generic (14.7%)<br>Win32 Dynamic Link Library (generic) (13.1%)<br>Generic Win/DOS Executable (3.4%)<br>DOS Executable Generic (3.4%)
      sigcheck:<br>publisher....: n/a<br>copyright....: n/a<br>product......: n/a<br>description..: n/a<br>original name: n/a<br>internal name: n/a<br>file version.: n/a<br>comments.....: n/a<br>signers......: -<br>signing date.: -<br>verified.....: Unsigned<br>

      Antivirus Version Dernière mise à jour Résultat
      a-squared 4.5.0.50 2010.02.02 -
      AhnLab-V3 5.0.0.2 2010.02.01 -
      AntiVir 7.9.1.156 2010.02.02 -
      Antiy-AVL 2.0.3.7 2010.02.02 -
      Authentium 5.2.0.5 2010.02.02 -
      Avast 4.8.1351.0 2010.02.02 -
      AVG 9.0.0.730 2010.02.01 -
      BitDefender 7.2 2010.02.02 -
      CAT-QuickHeal 10.00 2010.02.02 -
      ClamAV 0.96.0.0-git 2010.02.02 -
      Comodo 3790 2010.02.02 -
      DrWeb 5.0.1.12222 2010.02.02 -
      eSafe 7.0.17.0 2010.02.02 Win32.Looked.BK
      eTrust-Vet 35.2.7276 2010.02.02 -
      F-Prot 4.5.1.85 2010.02.01 -
      F-Secure 9.0.15370.0 2010.02.02 -
      Fortinet 4.0.14.0 2010.02.02 -
      GData 19 2010.02.02 -
      Ikarus T3.1.1.80.0 2010.02.02 -
      Jiangmin 13.0.900 2010.02.02 -
      K7AntiVirus 7.10.962 2010.02.01 -
      Kaspersky 7.0.0.125 2010.02.02 -
      McAfee 5879 2010.02.01 -
      McAfee+Artemis 5879 2010.02.01 -
      McAfee-GW-Edition 6.8.5 2010.02.02 -
      Microsoft 1.5406 2010.02.02 -
      NOD32 4827 2010.02.02 -
      Norman 6.04.03 2010.02.02 -
      nProtect 2009.1.8.0 2010.02.02 -
      Panda 10.0.2.2 2010.02.01 -
      PCTools 7.0.3.5 2010.02.02 -
      Prevx 3.0 2010.02.05 -
      Rising 22.33.01.04 2010.02.02 -
      Sophos 4.50.0 2010.02.02 -
      Sunbelt 3.2.1858.2 2010.02.02 -
      TheHacker 6.5.1.0.176 2010.02.02 -
      TrendMicro 9.120.0.1004 2010.02.02 -
      VBA32 3.12.12.1 2010.02.01 -
      ViRobot 2010.2.2.2168 2010.02.02 -
      VirusBuster 5.0.21.0 2010.02.01 -

      Information additionnelle
      File size: 274432 bytes
      MD5...: dad4ab99f805222093a434b257385645
      SHA1..: 299e72ad3f57ad4da7f3e4d0dcc936a43091cc9b
      SHA256: e5cd16cb698ecf2d9e5e9a137563e150c6a67ecf4edfa78cb6d3418532ba8221
      ssdeep: 6144:rgCfkeifUKppBDi2xOXwUITqW9/mCKq6YFrrYhMzWZc:0CcefcpiITrdm1q<br>DyZ<br>
      PEiD..: -
      PEInfo: PE Structure information<br><br>( base data )<br>entrypointaddress.: 0x2a299<br>timedatestamp.....: 0x4252ea48 (Tue Apr 05 19:43:04 2005)<br>machinetype.......: 0x14c (I386)<br><br>( 4 sections )<br>name viradd virsiz rawdsiz ntrpy md5<br>.text 0x1000 0x30f01 0x31000 6.70 7b6e6f8477b065e15a30fd809dd48917<br>.rdata 0x32000 0xe868 0xf000 6.40 3d3c1df681e133664f07799c27891bca<br>.data 0x41000 0x5c04 0x1000 3.46 c6b38b3c7f8d71fb7a536a04c018d69f<br>.rsrc 0x47000 0x510 0x1000 1.10 e2c505e59e2e6030273357b81dd51c22<br><br>( 3 imports ) <br>> ADVAPI32.dll: GetUserNameA, RegCloseKey, RegCreateKeyA, RegSetValueExA, RegOpenKeyA, RegQueryValueExA<br>> USER32.dll: MsgWaitForMultipleObjects, PostMessageA, SendMessageA, FindWindowA, GetForegroundWindow, GetCapture, GetClipboardOwner, GetQueueStatus, GetCursorPos<br>> KERNEL32.dll: SetEndOfFile, SetEnvironmentVariableA, CompareStringW, CompareStringA, HeapSize, GetLocaleInfoA, InterlockedExchange, RtlUnwind, SetStdHandle, SetFilePointer, GetTickCount, ReadFile, SetConsoleMode, GetConsoleMode, GetStdHandle, WriteFile, GetVersionExA, GetProcAddress, LoadLibraryA, FreeLibrary, GetSystemTimeAdjustment, GetSystemTime, GetProcessTimes, GetCurrentProcess, GetThreadTimes, GetCurrentThread, GlobalMemoryStatus, QueryPerformanceCounter, FindClose, FindNextFileA, FindFirstFileA, GetWindowsDirectoryA, CloseHandle, UnmapViewOfFile, MapViewOfFile, CreateFileMappingA, GetCurrentThreadId, SleepEx, GetLastError, GetFileTime, GetFileSize, CreateFileA, SetFileTime, GetFileAttributesA, CreateDirectoryA, CreateEventA, GetEnvironmentVariableA, GetLocalTime, GetModuleFileNameA, GetTimeFormatA, GetDateFormatA, HeapAlloc, HeapReAlloc, HeapFree, GetSystemTimeAsFileTime, ExitProcess, GetModuleHandleA, TerminateProcess, GetCommandLineA, FlushFileBuffers, WideCharToMultiByte, GetTimeZoneInformation, VirtualProtect, VirtualAlloc, GetSystemInfo, VirtualQuery, SetHandleCount, GetFileType, GetStartupInfoA, GetStringTypeA, MultiByteToWideChar, GetStringTypeW, LCMapStringA, LCMapStringW, HeapDestroy, HeapCreate, VirtualFree, UnhandledExceptionFilter, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, GetCurrentProcessId, GetACP, GetOEMCP, GetCPInfo<br><br>( 0 exports ) <br>
      RDS...: NSRL Reference Data Set<br>-
      pdfid.: -
      trid..: Win32 Executable MS Visual C++ (generic) (65.2%)<br>Win32 Executable Generic (14.7%)<br>Win32 Dynamic Link Library (generic) (13.1%)<br>Generic Win/DOS Executable (3.4%)<br>DOS Executable Generic (3.4%)
      sigcheck:<br>publisher....: n/a<br>copyright....: n/a<br>product......: n/a<br>description..: n/a<br>original name: n/a<br>internal name: n/a<br>file version.: n/a<br>comments.....: n/a<br>signers......: -<br>signing date.: -<br>verified.....: Unsigned<br>
      0
    2. cm
       
      Pas du tout ! Il a été acheté neuf mais c'est vrai que j'utilise les mêmes clés usb à la maison et au travail et que j'ai accès à une partie du réseau de mon travail depuis chez moi
      0
    3. cm
       
      J'ai oublié de dire qu'il était en réseau avec mon ordinateur portable qui avaient des virus (problème traité par "capalou" sur ce forum mercredi)
      0
    4. cm
       
      J'ai la taille suivante : 268 Ko
      0
    5. cm
       
      Dans l'infobulle, j'ai

      dans le dossier : C:\
      Date de création : 25/12/2005 11:05
      Taille 268 Ko

      Je précise que je ne sais plus ce que j'ai fait le 25/12/2005 ::)) Je plaisante, bien sur J'en profite pour vous remercier pour votre ténacité et votre savoir
      0
  • 1
  • 2