Virus introuvable

voila le log.tex

Logfile of random's system information tool 1.06 (written by random/random)
Run by anthony at 2010-02-20 11:39:40
Microsoft® Windows Vista™ Édition Familiale Premium
System drive C: has 67 GB (29%) free of 230 GB
Total RAM: 2046 MB (52% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:39:49, on 20/02/2010
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16982)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Common Files\aol\1136148254\ee\aolsoftware.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Common Files\logishrd\LComMgr\Communications_Helper.exe
C:\Program Files\Logitech\QuickCam\Quickcam.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Canon\Memory Card Utility\iP6700D\PDUiP6700DMon.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
C:\Users\anthony\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Windows\System32\rundll32.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
c:\program files\logitech\quickcam\lu\lulnchr.exe
C:\program files\logitech\quickcam\lu\LogitechUpdate.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Internet Explorer\IEUser.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\anthony\Downloads\RSIT.exe
C:\Program Files\trend micro\anthony.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1136148254\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [PDUiP6700DMon] C:\Program Files\Canon\Memory Card Utility\iP6700D\PDUiP6700DMon.exe
O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [AutoStartNPSAgent] C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - Startup: Notification de cadeaux MSN.lnk = C:\Users\anthony\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: OFFICE One Startup v7.lnk = ?
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - Cmdmapping - (no file) (HKCU)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - http://download.eset.com/special/eos/OnlineScanner.cab
O18 - Protocol: bw+0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: FsUsbExService - Teruten - C:\Windows\system32\FsUsbExService.Exe
O23 - Service: Service Google Update (gupdate1c9c6963507928a) (gupdate1c9c6963507928a) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

j'ai trouver info.txt


info.txt logfile of random's system information tool 1.06 2009-09-30 19:37:46

======Uninstall list======

-->C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
-->MsiExec.exe /I{0394CDC8-FABD-4ed8-B104-03393876DFDF}
-->MsiExec.exe /I{0D330013-4A99-46D6-83C6-2C959C68DBFF}
-->MsiExec.exe /I{0D397393-9B50-4c52-84D5-77E344289F87}
-->MsiExec.exe /I{35E1EC43-D4FC-4E4A-AAB3-20DDA27E8BB0}
-->MsiExec.exe /I{619CDD8A-14B6-43a1-AB6C-0F4EE48CE048}
-->MsiExec.exe /I{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}
-->MsiExec.exe /I{83FFCFC7-88C6-41c6-8752-958A45325C82}
-->MsiExec.exe /I{C8B0680B-CDAE-4809-9F91-387B6DE00F7C}
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{57FA4E0F-82C9-417D-87BC-0186D6CB7A44}\setup.exe" -l0x40c
Adobe Flash Player 10 ActiveX-->C:\Windows\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\Windows\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Reader 9 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A90000000001}
AirPlus G-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2B7E4354-0492-460A-BDB1-1F59EE141025}\setup.exe" -l0x40c -removeonly
Aladdin-->"C:\Program Files\Aladdin\unins000.exe"
AOL - Assistant de désinstallation-->C:\Program Files\Common Files\AOL\uninstaller.exe
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Assistant de connexion Windows Live-->MsiExec.exe /I{D3116CC7-24DC-4CA3-9CE1-23FED836E9F2}
Audacity 1.2.6-->"C:\Program Files\Audacity\unins000.exe"
avast! Antivirus-->C:\Program Files\Alwil Software\Avast4\aswRunDll.exe "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll",RunSetup
Canon iP6700D Memory Card Utility-->"C:\Program Files\Canon\Memory Card Utility\iP6700D\Maint.exe" /UninstallRemove C:\Program Files\Canon\Memory Card Utility\iP6700D\uninst.ini
Canon iP6700D-->"C:\Windows\system32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_iP6700D\DelDrv.exe" /U:{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_iP6700D /L0x000c
Canon Utilities Easy-PhotoPrint-->C:\Program Files\Canon\Easy-PhotoPrint\uninst.exe uninst.ini
Canon Utilities Easy-PrintToolBox-->C:\Program Files\Canon\Easy-PrintToolBox\uninst.exe uninst.ini
CD-LabelPrint-->"C:\Program Files\Canon\CD-LabelPrint\Uninstal.exe" Canon.CDLabelPrint.Application
Ciel Devis Factures 6.0-->MsiExec.exe /I{F29DDAD0-447D-4BDB-80CB-4276B4D5C9A7}
Coffret de pilotes Logitech Legacy USB Camera-->"C:\Program Files\Common Files\LogiShrd\LogiDriverStore\legacyqcam\10.00.1438\LgDrvInst.exe" -remove -instdir"C:\Program Files\Common Files\LogiShrd\LogiDriverStore\legacyqcam\" -enumdelay=2000 -enabledifx -forcedelete -usbhubsfirst -forceremove -cumulativeremove -arpregkey"legacyqcam_10.00" /clone_wait /hide_progress
Coffret de pilotes Logitech QuickCam-->"C:\Program Files\Common Files\LogiShrd\LogiDriverStore\lvdrivers\11.80.1048\LgDrvInst.exe" -remove -instdir"C:\Program Files\Common Files\LogiShrd\LogiDriverStore\lvdrivers\" -enumdelay=2000 -enabledifx -forcedelete -usbhubsfirst -forceremove -cumulativeremove -arpregkey"lvdrivers_11.80" /clone_wait /hide_progress
Colin McRae Rally 04-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F8718F95-21A1-44B9-97EC-679C93020BAE}\setup.exe" -l0x40c
Compatibility Pack for the 2007 Office system-->MsiExec.exe /X{90120000-0020-040C-0000-0000000FF1CE}
Creator 9-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *CREATOR9*
Deer Hunter - The 2005 Season Demo-->"C:\Program Files\Atari\Deer Hunter 2005 Demo\unins000.exe"
Dolet Light for Finale 2005-->MsiExec.exe /X{7D1BB8B3-5965-4D57-BC5D-C71F56DB4CAD}
EA SPORTS Rugby 2005-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{38420AB3-8788-4DA2-A296-E8B6F328876F}\setup.exe" -l0x40c
Earth Worm Jim 1.0-->"C:\Program Files\Earth Worm Jim\unins000.exe"
Enregistrement utilisateur de Canon iP6700D-->C:\Program Files\Canon\IJEREG\iP6700D\UNINST.EXE
Favorit-->c:\users\anthony\appdata\local\dzqgftj.bat
Favorit-->c:\users\anthony\appdata\local\sgtyer.bat
Finale 2005b-->C:\Windows\unvise32.exe C:\Program Files\Finale 2005b\uninstal.log
Finale Performance Assessment-->C:\Windows\unvise32.exe C:\Program Files\Finale Performance Assessment\uninstal.log
Ford Racing 3-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{797E03F8-C8A0-47ED-AA9F-D7076276E491}\setup.exe"
Foxit Reader-->C:\Program Files\Foxit Software\Foxit Reader\Uninstall.exe
GameSpy Arcade-->C:\PROGRA~1\GAMESP~1\UNWISE.EXE C:\PROGRA~1\GAMESP~1\INSTALL.LOG
Gestionnaire de disques amovible Creative-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{57FA4E0F-82C9-417D-87BC-0186D6CB7A44}\setup.exe" -l0x40c /remove
Google Chrome-->"C:\Program Files\Google\Chrome\Application\3.0.195.21\Installer\setup.exe" --uninstall --system-level
Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
HP Imaging Device Functions 9.0-->C:\Program Files\HP\Digital Imaging\DeviceManagement\hpzscr01.exe -datfile hpqbud01.dat
HP OCR Software 9.0-->C:\Program Files\HP\Digital Imaging\OCR\hpzscr01.exe -datfile hpqbud11.dat
HP Product Assistant-->MsiExec.exe /I{36FDBE6E-6684-462B-AE98-9A39A1B200CC}
HP Scanjet G2410 9.0-->C:\Program Files\HP\Digital Imaging\{A2F87459-E525-46ec-8FFB-88D451A2B2C8}\setup\hpzscr01.exe -datfile hpgscr31.dat
HP Solution Center 9.0-->C:\Program Files\HP\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat
HP Update-->MsiExec.exe /X{8C6027FD-53DC-446D-BB75-CACD7028A134}
Icy Tower v1.2 (11kHz)-->c:\games\icytower1.2\unins000.exe
Indoor Kartracing-->C:\Program Files\Kartracing\clean.exe C:\Program Files\Kartracing\UNINST.INI
Infocentre Rev. 2.0-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *Infocentre*
InternetGameBox -->C:\Program Files\InternetGameBox\uninst.exe
Java(TM) 6 Update 13-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
Java(TM) 6 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050}
Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
Jeu de Tir-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{40DD2EE5-AF2E-4FBF-A3F2-75B266A81DFB}\setup.exe" -l0x40c -removeonly
Jungle Book-->"C:\Program Files\Jungle Book\unins000.exe"
LimeWire 5.2.13-->"C:\Users\anthony\LimeWire\uninstall.exe"
Logitech Desktop Messenger-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{900B1197-53F5-4F46-A882-2CFFFE2EEDCB}\Setup.exe" -l0x40c UNINSTALL
Logitech QuickCam-->MsiExec.exe /X{3AF8FCCD-F51A-4014-9002-F195E1CBC876}
MAGIX Audio Cleanic SE 9.0.2.0 (F)-->C:\Program Files\MAGIX\MCLab2008_SE\unwise.exe
Medal of Honor débarquement allié-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0DEA94ED-915A-4834-A87E-388D012C8E02}\Setup.exe" -l0x40c
Messenger Plus! Live-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe"
Micro Application - Vos Photos à la Télé sur CD-DVD 2007 Edition Deluxe-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AC50A61F-327F-4FD4-9CC3-9B491FA7E802}\SETUP.EXE" -l0x40c
Microsoft .NET Framework 1.1 Hotfix (KB929729)-->"C:\Windows\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\Windows\Microsoft.NET\Framework\v1.1.4322\Updates\M929729\M929729Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 3.5 Language Pack SP1 - fra-->MsiExec.exe /I{3E31821C-7917-367E-938E-E65FC413EA31}
Microsoft .NET Framework 3.5 SP1-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Office Professional Edition 2003-->MsiExec.exe /I{9011040C-6000-11D3-8CFE-0150048383C9}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7}
Module linguistique Microsoft .NET Framework 3.5 SP1- fra-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fra\setup.exe
MON LIVRE PHOTO by CEWE-->"C:\Program Files\PHOTO CARREFOUR\MON LIVRE PHOTO by CEWE\uninstall.exe"
Moorhuhn Kart 3-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BB36A40D-8429-4DB5-AF07-1DB178D90AF1}\setup.exe" -l0x40c
Movie Converter (remove only)-->"C:\Program Files\iriver\Movie Converter\uninstall.exe"
Mozilla Firefox (3.0.14)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB941833)-->MsiExec.exe /I{C523D256-313D-4866-B36A-F3DE528246EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
Nemrod 1.0-->"C:\Program Files\Nemrod\unins000.exe"
NIS2007-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *NIS2007_FR*
NVIDIA Drivers-->C:\Windows\system32\NVUNINST.EXE UninstallGUI
OFFICE One 150 Templates v7-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BA147801-8946-4BBE-BE17-A2199CE52C81}\setup.exe" -l0x40c -removeonly
OFFICE One 7.0-->MsiExec.exe /I{1EF377AC-035A-48BE-8EF7-D18D36308CE9}
OFFICE One ClipArt v7-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B8F3555E-B918-445E-97D1-BC4861C4EF59}\setup.exe" -l0x40c -removeonly
OFFICE One Fonts v7-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CC0C788C-7C68-47A9-BFBF-0DF7B205B4CC}\setup.exe" -l0x40c -removeonly
OFFICE One License v7-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E1A7B28B-AA31-442C-A4FA-598B65A7F5DA}\setup.exe" -l0x40c -removeonly
OFFICE One Menu v7-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{85C5827E-106F-4497-8066-B7CFEBBEA91D}\setup.exe" -l0x40c -removeonly
OFFICE One Notes v7-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5D2683BE-2C44-4DB5-BECD-87B324077A7F}\setup.exe" -l0x40c -removeonly
OFFICE One QuickZip v7-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{87DEF84E-51A5-4A0E-91C2-E012E92DE69B}\setup.exe" -l0x40c -removeonly
OFFICE One Safety-Box v7-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B243ABE9-57C2-4B97-BA6B-37DF6C0208ED}\setup.exe" -l0x40c -removeonly
OFFICE One Startup v7-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FEC30F06-A382-47D1-B828-859AC641EB1D}\setup.exe" -l0x40c -removeonly
Office One-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *OFFICE*
Packard Bell - Skype 2.5-->"C:\Program Files\Skype\Phone\unins000.exe"
Packard Bell Updator-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *Updator*
QuickTime-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{C21D5524-A970-42FA-AC8A-59B8C7CDCA31} /l1036
RealPlayer-->C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
Realtek HD Audio V6.0.1.5322-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *AUDIO_REALTEK*
Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -l0x40c -removeonly
Roxio Creator 9 LE-->MsiExec.exe /I{B7FB0C86-41A4-4402-9A33-912C462042A0}
RTC Client API v1.2-->MsiExec.exe /X{44CDBD1B-89FB-4E02-8319-2A4C550F664A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
SEGA Rally-->"C:\Program Files\InstallShield Installation Information\{4A05FF52-4AA8-4681-BC06-5EE7F812A441}\setup.exe" -runfromtemp -l0x040c -removeonly
SEGA Rally-->MsiExec.exe /I{4A05FF52-4AA8-4681-BC06-5EE7F812A441}
SetUp My PC-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *SETUPMYPC_FR*
Skype 2.5.2.151-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *SKYPE*
Sonic the Hedgehog 1.0-->"C:\Program Files\Sonic the Hedgehog\unins000.exe"
Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
Starsky & Hutch-->C:\Program Files\Empire Interactive\Starsky & Hutch\Uninstall.exe
Tux Paint 0.9.18-->"C:\Program Files\TuxPaint\unins000.exe"
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
Video NVIDIA v97.19-->"C:\Program Files\Packard Bell\Smart Restore\SmartRestore.exe" /MSADDREM *VIDEO_NVIDIA*
VLC media player 0.9.8a-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Windows Live installer-->MsiExec.exe /X{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390}
Windows Live Mail-->MsiExec.exe /I{C514C594-23AA-4F13-A070-DB8BDB27594F}
Windows Live Messenger-->MsiExec.exe /X{BADF6744-3787-48F6-B8C9-4C4995401D65}
XviD 1.1 final uninstall-->"C:\Program Files\XviD\unins000.exe"

======Hosts File======

127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com

======Security center information======

AV: Avira AntiVir PersonalEdition (outdated)
AV: avast! antivirus 4.8.1351 [VPS 090929-0]
AS: Spyware Doctor
AS: Avira AntiVir PersonalEdition (outdated)
AS: Windows Defender
AS: avast! antivirus 4.8.1351 [VPS 090929-0]

======System event log======

Computer Name: PC-de-anthony
Event Code: 7000
Message: Le service Planificateur LiveUpdate automatique n'a pas pu démarrer en raison de l'erreur :
Le chemin d'accès spécifié est introuvable.
Record Number: 229349
Source Name: Service Control Manager
Time Written: 20090930170140.000000-000
Event Type: Erreur
User:

Computer Name: PC-de-anthony
Event Code: 4001
Message: Le Service d’autoconfiguration WLAN s’est arrêté correctement.

Record Number: 229391
Source Name: Microsoft-Windows-WLAN-AutoConfig
Time Written: 20090930170210.192000-000
Event Type: Avertissement
User: AUTORITE NT\SYSTEM

Computer Name: PC-de-anthony
Event Code: 4001
Message: Le Service d’autoconfiguration WLAN s’est arrêté correctement.

Record Number: 229406
Source Name: Microsoft-Windows-WLAN-AutoConfig
Time Written: 20090930170630.542875-000
Event Type: Avertissement
User: AUTORITE NT\SYSTEM

Computer Name: PC-de-anthony
Event Code: 1003
Message: Votre ordinateur n'a pas pu renouveler son adresse à partir du réseau (à partir du serveur DHCP) pour la carte réseau dont l'adresse réseau est 001E584AAF68. Il s'est produit l'erreur suivante :
L'opération a été annulée par l'utilisateur.. Votre ordinateur va continuer à essayer d'obtenir sa propre adresse auprès du serveur d'adresse réseau (DHCP).
Record Number: 229421
Source Name: Microsoft-Windows-Dhcp-Client
Time Written: 20090930170849.000000-000
Event Type: Avertissement
User:

Computer Name: PC-de-anthony
Event Code: 7000
Message: Le service Planificateur LiveUpdate automatique n'a pas pu démarrer en raison de l'erreur :
Le chemin d'accès spécifié est introuvable.
Record Number: 229470
Source Name: Service Control Manager
Time Written: 20090930170853.000000-000
Event Type: Erreur
User:

=====Application event log=====

Computer Name: PC-de-anthony
Event Code: 20227
Message: CoID={444AB4EB-85B1-4976-ADBB-2313EEF94537} : L'utilisateur PC-de-anthony\anthony a composé le numéro de la connexion Connexion haut débit. La connexion a échoué. Code d'erreur retourné : 0.
Record Number: 62690
Source Name: RasClient
Time Written: 20090930170402.000000-000
Event Type: Erreur
User:

Computer Name: PC-de-anthony
Event Code: 20227
Message: CoID={C3A6A6BA-6666-47D7-8574-7810B2579525} : L'utilisateur PC-de-anthony\anthony a composé le numéro de la connexion Connexion haut débit. La connexion a échoué. Code d'erreur retourné : 0.
Record Number: 62694
Source Name: RasClient
Time Written: 20090930170415.000000-000
Event Type: Erreur
User:

Computer Name: PC-de-anthony
Event Code: 20227
Message: CoID={AD2142DF-D6E2-4850-B0FA-EF9113F514A9} : L'utilisateur PC-de-anthony\anthony a composé le numéro de la connexion Connexion haut débit. La connexion a échoué. Code d'erreur retourné : 0.
Record Number: 62697
Source Name: RasClient
Time Written: 20090930170423.000000-000
Event Type: Erreur
User:

Computer Name: PC-de-anthony
Event Code: 20227
Message: CoID={5B676152-13FC-4DAE-80B5-44E05C604827} : L'utilisateur PC-de-anthony\anthony a composé le numéro de la connexion Connexion haut débit. La connexion a échoué. Code d'erreur retourné : 0.
Record Number: 62724
Source Name: RasClient
Time Written: 20090930170822.000000-000
Event Type: Erreur
User:

Computer Name: PC-de-anthony
Event Code: 20227
Message: CoID={B6F3F046-3911-465F-B72B-DE8356CDC9CB} : L'utilisateur PC-de-anthony\anthony a composé le numéro de la connexion Connexion haut débit. La connexion a échoué. Code d'erreur retourné : 815.
Record Number: 62728
Source Name: RasClient
Time Written: 20090930170911.000000-000
Event Type: Erreur
User:

=====Security event log=====

Computer Name: PC-de-anthony
Event Code: 1108
Message: Le service de journalisation des événements a rencontré une erreur lors du traitement d’un événement entrant publié à partir de Microsoft-Windows-Security-Auditing.
Record Number: 59644
Source Name: Microsoft-Windows-Eventlog
Time Written: 20090608101249.690875-000
Event Type: Succès de l'audit
User:

Computer Name: PC-de-anthony
Event Code: 4608
Message: Windows démarre.

Cet événement est journalisé lorsque LSASS.EXE démarre et que le sous-système d’audit est initialisé.
Record Number: 59645
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090608111101.281250-000
Event Type: Succès de l'audit
User:

Computer Name: PC-de-anthony
Event Code: 4624
Message: L’ouverture de session d’un compte s’est correctement déroulée.

Sujet :
ID de sécurité : S-1-0-0
Nom du compte : -
Domaine du compte : -
ID d’ouverture de session : 0x0

Type d’ouverture de session : 0

Nouvelle ouverture de session :
ID de sécurité : S-1-5-18
Nom du compte : SYSTEM
Domaine du compte : AUTORITE NT
ID d’ouverture de session : 0x3e7
GUID d’ouverture de session : {00000000-0000-0000-0000-000000000000}

Informations sur le processus :
ID du processus : 0x4
Nom du processus :

Informations sur le réseau :
Nom de la station de travail : -
Adresse du réseau source : -
Port source : -

Informations détaillées sur l’authentification :
Processus d’ouverture de session : -
Package d’authentification : -
Services en transit : -
Nom du package (NTLM uniquement) : -
Longueur de la clé : 0

Cet événement est généré lors de la création d’une ouverture de session. Il est généré sur l’ordinateur sur lequel l’ouverture de session a été effectuée.

Le champ Objet indique le compte sur le système local qui a demandé l’ouverture de session. Il s’agit le plus souvent d’un service, comme le service Serveur, ou un processus local tel que Winlogon.exe ou Services.exe.

Le champ Type d’ouverture de session indique le type d’ouverture de session qui s’est produit. Les types les plus courants sont 2 (interactif) et 3 (réseau).

Le champ Nouvelle ouverture de session indique le compte pour lequel la nouvelle ouverture de session a été créée, par exemple, le compte qui s’est connecté.

Les champs relatifs au réseau indiquent la provenance d’une demande d’ouverture de session à distance. Le nom de la station de travail n’étant pas toujours disponible, peut être laissé vide dans certains cas.

Les champs relatifs aux informations d’authentification fournissent des détails sur cette demande d’ouverture de session spécifique.
- Le GUID d’ouverture de session est un identificateur unique pouvant servir à associer cet événement à un événement KDC .
- Les services en transit indiquent les services intermédiaires qui ont participé à cette demande d’ouverture de session.
- Nom du package indique quel est le sous-protocole qui a été utilisé parmi les protocoles NTLM.
- La longueur de la clé indique la longueur de la clé de session générée. Elle a la valeur 0 si aucune clé de session n’a été demandée.
Record Number: 59646
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090608111101.281250-000
Event Type: Succès de l'audit
User:

Computer Name: PC-de-anthony
Event Code: 4902
Message: La table de stratégie d’audit par utilisateur a été créée.

Nombre d’éléments : 0
ID de la stratégie : 0x183a6
Record Number: 59647
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090608111101.750000-000
Event Type: Succès de l'audit
User:

Computer Name: PC-de-anthony
Event Code: 4648
Message: Tentative d’ouverture de session en utilisant des informations d’identification explicites.

Sujet :
ID de sécurité : S-1-5-18
Nom du compte : PC-DE-ANTHONY$
Domaine du compte : WORKGROUP
ID d’ouverture de session : 0x3e7
GUID d’ouverture de session : {00000000-0000-0000-0000-000000000000}

Compte dont les informations d’identification ont été utilisées :
Nom du compte : SYSTEM
Domaine du compte : AUTORITE NT
GUID d’ouverture de session : {00000000-0000-0000-0000-000000000000}

Serveur cible :
Nom du serveur cible : localhost
Informations supplémentaires : localhost

Informations sur le processus :
ID du processus : 0x244
Nom du processus : C:\Windows\System32\services.exe

Informations sur le réseau :
Adresse du réseau : -
Port : -

Cet événement est généré lorsqu’un processus tente d’ouvrir une session pour un compte en spécifiant explicitement les informations d’identification de ce compte. Ceci se produit le plus souvent dans les configurations par lot comme les tâches planifiées, ou avec l’utilisation de la commande RUNAS.
Record Number: 59648
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090608111102.203125-000
Event Type: Succès de l'audit
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\Common Files\Roxio Shared\DLLShared\;C:\Program Files\Common Files\Roxio Shared\9.0\DLLShared\;C:\Program Files\QuickTime\QTSystem\
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=x86
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 15 Stepping 6, GenuineIntel
"PROCESSOR_REVISION"=0f06
"NUMBER_OF_PROCESSORS"=2
"RoxioCentral"=C:\Program Files\Common Files\Roxio Shared\9.0\Roxio Central33\
"CLASSPATH"=.;C:\Program Files\Java\jre1.6.0_07\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre1.6.0_07\lib\ext\QTJava.zip

-----------------EOF-----------------


voila

voila :



Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:43:37, on 20/02/2010
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16982)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Common Files\aol\1136148254\ee\aolsoftware.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Common Files\logishrd\LComMgr\Communications_Helper.exe
C:\Program Files\Logitech\QuickCam\Quickcam.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Canon\Memory Card Utility\iP6700D\PDUiP6700DMon.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
C:\Users\anthony\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Windows\System32\rundll32.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
c:\program files\logitech\quickcam\lu\lulnchr.exe
C:\program files\logitech\quickcam\lu\LogitechUpdate.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Users\anthony\Downloads\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1136148254\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [PDUiP6700DMon] C:\Program Files\Canon\Memory Card Utility\iP6700D\PDUiP6700DMon.exe
O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [AutoStartNPSAgent] C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - Startup: Notification de cadeaux MSN.lnk = C:\Users\anthony\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: OFFICE One Startup v7.lnk = ?
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - Cmdmapping - (no file) (HKCU)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - http://download.eset.com/special/eos/OnlineScanner.cab
O18 - Protocol: bw+0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {109C7F7F-01EB-4096-8899-0E0972DCF7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: FsUsbExService - Teruten - C:\Windows\system32\FsUsbExService.Exe
O23 - Service: Service Google Update (gupdate1c9c6963507928a) (gupdate1c9c6963507928a) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

malwarebyte est en route par contre le virus empêche tout scan en ligne j'arrive pas a les faire démarré il me dit que les mise en ligne ne se realise pas ...

voila le rapport de malwarebyte


Malwarebytes' Anti-Malware 1.44
Version de la base de données: 3766
Windows 6.0.6000
Internet Explorer 7.0.6000.16982

20/02/2010 13:22:46
mbam-log-2010-02-20 (13-22-46).txt

Type de recherche: Examen complet (C:\|D:\|G:\|H:\|I:\|J:\|)
Eléments examinés: 272136
Temps écoulé: 1 hour(s), 8 minute(s), 8 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 1
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 1

Processus mémoire infecté(s):
(Aucun élément nuisible détecté

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\.fsharproj (Trojan.BHO) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
D:\Tools\dxsetup.exe (Trojan.VkHost) -> Delete on reboot.

bonjour voila le rapport de bitdefender jattend vos demarche a suivre
merci encore


BitDefender Free Edition v10
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~



Copyright (c) 2007 SOFTWIN

BitDefender Free Edition v10 est un puissant outil antivirus et antispyware qui
répond au mieux à vos besoins en matière de sécurité. Facilité d'utilisation
et mises à jour automatique font de BitDefender Antivirus un produit de type
"installez et oubliez".



CONTENTS
========
1. Fonctions principales
2. Autres Fonctions
3. Configuration requise
4. Plateforme d'exploitation
5. Tester BitDefender Antivirus
6. Notes
7. Problèmes de compatibilité connus lors de l'utilisation
8. Contacts



1. Fonctions principales
========================

Antivirus:
La mission du module Antivirus est d'assurer la détection et la
suppression de tous les virus en circulation. L'Antivirus BitDefender
utilise des moteurs d'analyse robustes, certifié par ICSA Labs, Virus
Bulletin, Checkmark, CheckVir et TÜV.

AMELIORE Détection proactive:
B-HAVE émule un ordinateur virtuel dans un ordinateur où des morceaux de
logiciel sont lancés de manière à vérifier leur comportement
potentiellement malveillant. Cette technologie propriétaire de
BitDefender représente un nouveau modèle de sécurité qui permet de
conserver son système d'exploitation à l'abri de virus inconnus en
détectant les morceaux de code malicieux pour lesquels des signatures
n'ont pas encore été créées.


2. Autres Fonctions
===================

AMELIORE Déploiement et utilisation:
Un assistant démarre immédiatement après l'installation, aidant les
utilisateurs à sélectionner les paramètres de mise à jour les plus
apppropriés, à sélectionner une analyse programmée et à enregistrer et
activer rapidement le produit.

AMELIORE Expérience utilisateur:
BitDefender a redéfini son interface utilisateur dans l'optique de
simplifier la prise en main du produit. Désormais, les différents
modules de BitDefender v10 nécessitent moins d'interventions de
l'utilisateur, en utilisant des automatisations judicieuses et des
systèmes d'apprentissage.

Support technique 24H/24 et 7J/7:
Assuré en ligne par des représentants support qualifiés et par une base
de donnée en ligne répondant aux questions les plus fréquemment posées.

Disque de Secours:
BitDefender Free Edition v10 est fourni sur un CD bootable, qui
peut être utilisé pour désinfecter un système qui ne pouvait plus
démarrer.



3. Configuration requise
========================

* Processeur Pentium 800 MHz ou supérieur
* Mémoire minimum 64Mo de RAM (128Mo recommandés)
* Au moins 40Mo d'espace disque disponible.



4. Plateforme d'exploitation
============================

* Système d'exploitation: Windows 98/NT-SP6/Me/2000/XP/Vista RC2 32 bits, build 5744 (ou version supérieure)
* Internet Explorer 5.5 (ou version supérieure)



5. Tester BitDefender Antivirus
===============================

Vous pouvez tester que BitDefender fonctionne correctement à l'aide d'un
fichier spécial connu sous le nom de EICAR Standard Anti-virus Test. EICAR
signifie European Institute of Computer Anti-virus Research, c'est un
fichier de test détecté par les produits antivirus.

Aucune raison de s'inquiéter ce fichier n'étant pas un vrai virus. L'unique
action de 'EICAR.COM' quand il est exécuté est d'afficher le texte
'EICAR-STANDARD-ANTIVIRUS-TEST-FILE' et de quitter.

Nous n'incluons pas le fichier en question pour éviter les fausses alertes
pour les utilisateurs de BitDefender et d'autres produits. Cependant, le
fichier peut être généré en utilisant un éditeur de texte à partir du moment
où le fichier est sauvegardé en format ASCII MS-DOS et fait 68 octets de
long. Il peut aussi faire 70 octets si l'éditeur met un CR/LF à la fin. Le
fichier doit contenir la ligne suivante:

X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

Copiez cette ligne et sauvegardez le fichier sous n'importe quel nom, avec
une extension '.COM', comme par exmple 'EICAR.COM'. Vous pouvez ensuite
garder le fichier 'EICAR.COM' dans un emplacement sûr et tester
périodiquement la protection du système.



6. Notes
========

BitDefender Antivirus n'analyse pas le traffic POP3 de Lotus Notes.



7. Problèmes de compatibilité connus lors de l'utilisation
===========================================================

7.1. Antivirus
--------------

* SpyBot Search and Destroy
* A2 - Solutions de sécurité
* Norton Clean Sweep
* Nero Imagedrive - et autres applications semblables (uniquement sur
Windows 9x)



8. Contacts
===========

Adresse: Editions Profil, 49 rue de la Vanne, 92120 Montrouge
Support technique : <sav.bitdefender@editions-profil.fr>
Aide en ligne 24H/24 et 7J/7: http://www.editions-profil.fr/support/
Service commercial : <commercial@editions-profil.fr>
Product web site: https://www.bitdefender.fr/

SOFTWIN
5th Fabrica de Glucoza St.
PO BOX 52-93
Bucharest
ROMANIA

ca se trouve ou ???

voila le rapport

BitDefender QuickScan Beta 32-bit v0.9.9.5
------------------------------------------

Date de l'analyse : Tue Feb 23 18:33:16 2010
ID de la machine : 787F7233



Aucune infection détectée.
----------------------------


Processus
---------
<non signé> Bitdefender 10 1836 C:\Program Files\Softwin\BitDefender10\bdagent.exe
<non signé> BitDefender 10 1920 C:\Program Files\Softwin\BitDefender10\bdmcon.exe
<non signé> HD Audio Control Panel 1948 C:\Windows\RtHDVCpl.exe
<non signé> hp digital imaging - hp all-in-one seri 972 C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
<non signé> Notification de cadeaux MSN 2420 C:\Users\anthony\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe
<non signé> QuickTime 1024 C:\Program Files\QuickTime\qttask.exe
<non signé> TODO: <제품 이름> 2096 C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe

<verifié> AOL Service Libraries 2008 C:\Program Files\Common Files\aol\1136148254\ee\aolsoftware.exe
<verifié> avast! Antivirus 636 C:\Program Files\Alwil Software\Avast4\ashDisp.exe
<verifié> Communications_Helper.exe 1816 C:\Program Files\Common Files\logishrd\LComMgr\Communications_Helper.exe
<verifié> Firefox 5628 C:\Program Files\Mozilla Firefox\firefox.exe
<verifié> Java(TM) Platform SE 6 U13 1340 C:\Program Files\Java\jre6\bin\jusched.exe
<verifié> Logitech QuickCam 4732 C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
<verifié> Logitech QuickCam 3204 C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
<verifié> Logitech Updater (LU) 4480 C:\program files\logitech\quickcam\lu\LogitechUpdate.exe
<verifié> Logitech Updater (LU) 4380 C:\program files\logitech\quickcam\lu\lulnchr.exe
<verifié> Memory Card Utility 948 C:\Program Files\Canon\Memory Card Utility\iP6700D\PDUiP6700DMon.exe
<verifié> Microsoft® Windows® Operating System 2232 C:\Windows\ehome\ehmsas.exe
<verifié> Microsoft® Windows® Operating System 1176 C:\Windows\ehome\ehtray.exe
<verifié> Microsoft® Windows® Operating System 4124 C:\Windows\system32\wuauclt.exe
<verifié> Quickcam.exe 632 C:\Program Files\Logitech\QuickCam\Quickcam.exe
<verifié> SUPERAntiSpyware 2116 C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE
<verifié> Système d'exploitation Microsoft® Windo 4524 C:\Program Files\Internet Explorer\IEUser.exe
<verifié> Système d'exploitation Microsoft® Windo 2056 C:\Program Files\Windows Media Player\wmpnscfg.exe
<verifié> Système d'exploitation Microsoft® Windo 1672 C:\Program Files\Windows Sidebar\sidebar.exe
<verifié> Système d'exploitation Microsoft® Windo 1772 C:\Windows\Explorer.EXE
<verifié> Système d'exploitation Microsoft® Windo 1740 C:\Windows\system32\Dwm.exe
<verifié> Système d'exploitation Microsoft® Windo 1996 C:\Windows\System32\rundll32.exe
<verifié> Système d'exploitation Microsoft® Windo 2072 C:\Windows\system32\taskeng.exe
<verifié> Windows Defender 1936 C:\Program Files\Windows Defender\MSASCui.exe
<verifié> Windows Live Communications Platform 5392 C:\Program Files\Windows Live\Contacts\wlcomm.exe
<verifié> Windows Live Messenger 2984 C:\Program Files\Windows Live\Messenger\msnmsgr.exe


Activité du réseau
------------------
Processus msnmsgr.exe (2984) connecté sur le port 1863 (MSN) - sn1msg1010621.phx.gbl
Processus msnmsgr.exe (2984) connecté sur le port 2060 - cha51-3-88-164-106-181.fbx.proxad.net
Processus msnmsgr.exe (2984) connecté sur le port 1863 (MSN) - sn1msg2010510.phx.gbl
Processus msnmsgr.exe (2984) connecté sur le port 443 (HTTP over SSL) - by2msg1030120.gateway.edge.messenger.live.com



Fichiers critiques et Autorun
-----------------------------
<non signé> Bitdefender 10 C:\Program Files\Softwin\BitDefender10\bdagent.exe
<non signé> BitDefender 10 C:\Program Files\Softwin\BitDefender10\bdmcon.exe
<non signé> HD Audio Control Panel C:\Windows\RtHDVCpl.exe
<non signé> hp digital imaging - hp all-in-one seri C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
<non signé> Logitech Desktop Messenger C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
<non signé> Macrovision Update Service C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
<non signé> Macrovision Update Service C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe
<non signé> Nemrod2 D:\setup.exe
<non signé> QuickTime C:\Program Files\QuickTime\qttask.exe
<non signé> SuperAntiSpyware c:\program files\superantispyware\sasseh.dll
<non signé> SUPERAntiSpyware WinLogon Processor C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
<non signé> TODO: <제품 이름> C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe

<verifié> Adobe Acrobat C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
<verifié> AOL Service Libraries C:\Program Files\Common Files\aol\1136148254\ee\aolsoftware.exe
<verifié> avast! Antivirus C:\Program Files\Alwil Software\Avast4\ashDisp.exe
<verifié> BJPSMAIN.EXE C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE
<verifié> CommonSDK C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
<verifié> Communications_Helper.exe C:\Program Files\Common Files\logishrd\LComMgr\Communications_Helper.exe
<verifié> Java(TM) Platform SE 6 U13 C:\Program Files\Java\jre6\bin\jusched.exe
<verifié> Malwarebytes' Anti-Malware C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
<verifié> Master CD/DVD Checker C:\Program Files\Packard Bell\SetupMyPc\MCDCheck.exe
<verifié> Memory Card Utility C:\Program Files\Canon\Memory Card Utility\iP6700D\PDUiP6700DMon.exe
<verifié> Microsoft® Windows® Operating System C:\Windows\ehome\ehtray.exe
<verifié> NVIDIA Compatible Windows 2000 Display C:\Windows\System32\nvcpl.dll
<verifié> NVIDIA Driver Helper Service, Version 9 C:\Windows\System32\nvsvc.dll
<verifié> NVIDIA Media Center Library C:\Windows\system32\NvMcTray.dll
<verifié> PB Care C:\Program Files\Packard Bell\SetupmyPC\PBCarNot.exe
<verifié> Quickcam.exe C:\Program Files\Logitech\QuickCam\Quickcam.exe
<verifié> SUPERAntiSpyware C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE
<verifié> Système d'exploitation Microsoft® Windo C:\Program Files\Windows Media Player\wmpnscfg.exe
<verifié> Système d'exploitation Microsoft® Windo C:\Program Files\Windows Sidebar\sidebar.exe
<verifié> Système d'exploitation Microsoft® Windo C:\Windows\System32\browseui.dll
<verifié> Système d'exploitation Microsoft® Windo c:\windows\system32\userinit.exe
<verifié> Windows Defender C:\Program Files\Windows Defender\MSASCui.exe
<verifié> Windows® Internet Explorer C:\Windows\System32\webcheck.dll


Plugins du navigateur
---------------------
<non signé> bdoscandel.exe C:\Windows\bdoscandel.exe
<non signé> bdscanonline C:\Windows\Downloaded Program Files\oscan82.ocx
<non signé> InstallShield Update Service C:\Windows\Downloaded Program Files\dwusplay.dll
<non signé> InstallShield Update Service C:\Windows\Downloaded Program Files\dwusplay.exe
<non signé> InstallShield Update Service C:\Windows\Downloaded Program Files\isusweb.dll
<non signé> ipsupd.dll C:\Windows\Downloaded Program Files\ipsupd.dll
<non signé> Java(TM) Platform SE 6 U13 c:\program files\java\jre6\bin\jp2ssv.dll
<non signé> QuickTime Plug-in 7.1 C:\Program Files\Internet Explorer\plugins\npqtplugin.dll
<non signé> QuickTime Plug-in 7.1 C:\Program Files\Internet Explorer\plugins\npqtplugin2.dll
<non signé> QuickTime Plug-in 7.1 C:\Program Files\Internet Explorer\plugins\npqtplugin3.dll
<non signé> QuickTime Plug-in 7.1 C:\Program Files\Internet Explorer\plugins\npqtplugin4.dll
<non signé> QuickTime Plug-in 7.1 C:\Program Files\Internet Explorer\plugins\npqtplugin5.dll
<non signé> QuickTime Plug-in 7.1 C:\Program Files\Internet Explorer\plugins\npqtplugin6.dll
<non signé> QuickTime Plug-in 7.1 C:\Program Files\Internet Explorer\plugins\npqtplugin7.dll

<verifié> AcroIEHelperShim Library c:\program files\common files\adobe\acrobat\activex\acroiehelpershim.dll
<verifié> BitDefender QuickScan C:\Users\anthony\AppData\Roaming\Mozilla\Firefox\Profiles/kmqm3bi5.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}\components\qscanff.dll
<verifié> BitDefender QuickScan C:\Users\anthony\AppData\Roaming\Mozilla\Firefox\Profiles/kmqm3bi5.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}\plugins\npqscan.dll
<verifié> Google Update C:\Program Files\Google\Update\1.2.183.13\npGoogleOneClick8.dll
<verifié> Microsoft® Windows Live Login Helper c:\program files\common files\microsoft shared\windows live\windowslivelogin.dll
<verifié> Microsoft® Windows Media Player Firefox C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll
<verifié> Microsoft® Windows® Operating System C:\Windows\System32\nlaapi.dll
<verifié> Microsoft® Windows® Operating System C:\Windows\System32\winrnr.dll
<verifié> Mozilla Default Plug-in C:\Program Files\Mozilla Firefox\plugins\npnul32.dll
<verifié> NPSWF32.dll C:\Windows\System32\Macromed\Flash\NPSWF32.dll
<verifié> Panda ActiveScan 2.0 C:\Program Files\Panda Security\ActiveScan 2.0\npwrapper.dll
<verifié> Panda ActiveScan 2.0 C:\Windows\Downloaded Program Files\as2stubie.dll
<verifié> SDHelper.dll C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
<verifié> Système d'exploitation Microsoft® Windo C:\Windows\System32\mswsock.dll
<verifié> Système d'exploitation Microsoft® Windo C:\Windows\System32\NapiNSP.dll
<verifié> Système d'exploitation Microsoft® Windo C:\Windows\System32\pnrpnsp.dll
<verifié> Windows Presentation Foundation c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
<verifié> Windows® Internet Explorer C:\Windows\System32\ieframe.dll


Analyse
-------
<non signé> MD5: 6ca1292225b47a5421e941b3cfef48af C:\Program Files\Alwil Software\Avast4\Aavm4h.dll
<non signé> MD5: f3eac60879ae425d81dba70c3da76d13 C:\Program Files\Alwil Software\Avast4\AavmRpch.dll
<non signé> MD5: 02bd0feacaa1a65f77806a3c3debd046 C:\Program Files\Alwil Software\Avast4\AhRuiMai.dll
<non signé> MD5: 27bb54223d4aaebbeb0e65df776cf6c2 C:\Program Files\Alwil Software\Avast4\ahRuiMes.dll
<non signé> MD5: 99c120153031fbd057d4fa0499fff755 C:\Program Files\Alwil Software\Avast4\AhRuiNS.dll
<non signé> MD5: 9625471205dfc433fb73e231fc9cbb01 C:\Program Files\Alwil Software\Avast4\AhRuiOut.dll
<non signé> MD5: e5c7e4c34e43bfd68de1cf2034fe9af8 C:\Program Files\Alwil Software\Avast4\ahRuiP2P.dll
<non signé> MD5: cb39a7024be54e75e3b696272fdc0987 C:\Program Files\Alwil Software\Avast4\AhRuiStd.dll
<non signé> MD5: 8f933065a585eafd798dd5e49598cdcb C:\Program Files\Alwil Software\Avast4\AhRuiWS.dll
<non signé> MD5: e8b0edd5c8518d9a1f73ac0c54a94d7c C:\Program Files\Alwil Software\Avast4\ashBase.dll
<non signé> MD5: 0b9dbfe71f4eb4355985ee60e6a1dc3f C:\Program Files\Alwil Software\Avast4\ashTask.dll
<non signé> MD5: fce48f51523e38c5e74969766b353d73 C:\Program Files\Alwil Software\Avast4\ashUInt.dll
<non signé> MD5: 8ea778943b7e155991ae9e3c818269ab C:\Program Files\Alwil Software\Avast4\aswAux.dll
<non signé> MD5: f8df17a0090f29ee330b34145152f38a C:\Program Files\Alwil Software\Avast4\aswCmnB.dll
<non signé> MD5: 6d6416fa182fa865d265dffa5a03c3c2 C:\Program Files\Alwil Software\Avast4\aswCmnOS.dll
<non signé> MD5: 7d79cd441ed208d062b326145c7b3aed C:\Program Files\Alwil Software\Avast4\aswCmnS.dll
<non signé> MD5: 144137d2e91504f551e82135673d89ae C:\Program Files\Alwil Software\Avast4\aswEngin.dll
<non signé> MD5: 9fb2179200238536b788cb4046c61c24 C:\Program Files\Alwil Software\Avast4\aswScan.dll
<non signé> MD5: b92db3055595951335a5bf0f8681390a C:\Program Files\Alwil Software\Avast4\FRENCH\Base.dll
<non signé> MD5: be9e7ea7441740a5b7d2a3c995487d3c C:\Program Files\Alwil Software\Avast4\FRENCH\Lang.dll
<non signé> MD5: 6c08604b5465de19eaac58c6a537d0bf C:\Program Files\Alwil Software\Avast4\XT1922.dll
<non signé> MD5: 2bcd9dbd5a86367417cb09ae74ad08a0 C:\Program Files\Common Files\aol\1136148254\ee\AOLHostMgr.dll
<non signé> MD5: 41a8998fcc2f57a4fedc42071cd2e47c C:\Program Files\Common Files\aol\1136148254\ee\AOLSvcMgr.dll
<non signé> MD5: 2e1aded81ec644e0da6f735948c2722d C:\Program Files\Common Files\aol\1136148254\ee\services\aolsystrayservice\ver3_0_11_1\AOLSysTrayService.dll
<non signé> MD5: 40dccdae78237af1f20acbbaf474a2a3 C:\Program Files\Common Files\aol\1136148254\ee\services\basics\ver8_0_4_1\basics.dll
<non signé> MD5: ef41c9635b27182b5dec6166a23c43c8 C:\Program Files\Common Files\aol\1136148254\ee\services\localStorage\ver7_0_3_1\clsSvc.dll
<non signé> MD5: 502f30577e6fdece1ca6f0f3da1f1b32 C:\Program Files\Common Files\aol\1136148254\ee\services\metrics\ver3_6_15_1\cmls.dll
<non signé> MD5: da8cff2e849bb7c09bf4a6e170615e35 C:\Program Files\Common Files\aol\1136148254\ee\services\notification\ver6_2_6_1\Notify.dll
<non signé> MD5: 1337ef044854f38b9dfd085e56ebc3a2 C:\Program Files\Common Files\aol\1136148254\ee\services\os\ver5_2_1_1\AOLIdleMon.dll
<non signé> MD5: 483302397a9a1334fb9d44dd16638898 C:\Program Files\Common Files\aol\1136148254\ee\services\os\ver5_2_1_1\os.dll
<non signé> MD5: ba7ebf4728361de241fbdfec18d21792 C:\Program Files\Common Files\aol\1136148254\ee\services\suiteFramework\ver3_1_3_1\suiteFramework.dll
<non signé> MD5: f6c4a32176e848aa714c5e03d574f83a C:\Program Files\Common Files\aol\1136148254\ee\xprt5.dll
<non signé> MD5: 37a6b872632d595ff35745a72b612547 C:\Program Files\Common Files\aol\AOLDiag\tbdiag.dll
<non signé> MD5: 1cf03c69b49acb70c722df92755c0c8c C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
<non signé> MD5: 0711524e77be0747927d18385468d36e C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
<non signé> MD5: 5dc7b7f1dd7b9ed4066a6b065f0ce329 C:\Program Files\Common Files\Softwin\BitDefender Communicator\xcommsvr.exe
<non signé> MD5: 9ea18931c1e9e29d27b9dfbe60278477 C:\Program Files\Common Files\Softwin\BitDefender Scan Server\bdss.exe
<non signé> MD5: 4ebbc3d88ec7fd5ee60edc7ba3c9433e C:\Program Files\Common Files\Softwin\BitDefender Update Service\livesrv.exe
<non signé> MD5: 51778fd315c9882f1cbd932743e62a72 C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
<non signé> MD5: 58d4765ab87347db835d5693adf652c1 C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll
<non signé> MD5: 7af5a466cf4aeca28e3dcbcf5b6fd220 C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
<non signé> MD5: f0bdeff9b7f447bd7d14bf7f8b80ad01 C:\Program Files\Internet Explorer\plugins\npqtplugin.dll
<non signé> MD5: f0bdeff9b7f447bd7d14bf7f8b80ad01 C:\Program Files\Internet Explorer\plugins\npqtplugin2.dll
<non signé> MD5: f0bdeff9b7f447bd7d14bf7f8b80ad01 C:\Program Files\Internet Explorer\plugins\npqtplugin3.dll
<non signé> MD5: f0bdeff9b7f447bd7d14bf7f8b80ad01 C:\Program Files\Internet Explorer\plugins\npqtplugin4.dll
<non signé> MD5: f0bdeff9b7f447bd7d14bf7f8b80ad01 C:\Program Files\Internet Explorer\plugins\npqtplugin5.dll
<non signé> MD5: f0bdeff9b7f447bd7d14bf7f8b80ad01 C:\Program Files\Internet Explorer\plugins\npqtplugin6.dll
<non signé> MD5: f0bdeff9b7f447bd7d14bf7f8b80ad01 C:\Program Files\Internet Explorer\plugins\npqtplugin7.dll
<non signé> MD5: 96a225c7f5346a9e81fc3dfa89a900c0 c:\program files\java\jre6\bin\jp2ssv.dll
<non signé> MD5: 909c14c2b962740d8099242fe2bde71c C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
<non signé> MD5: 6256684495c499b22dcdba266e4f2494 C:\Program Files\Messenger Plus! Live\Detoured.dll
<non signé> MD5: 75430d2f8b2e204814247d62d9445ce4 C:\Program Files\Messenger Plus! Live\lame_enc.dll
<non signé> MD5: 00742b11f1492d15a0a8ff25e36ab9be C:\Program Files\Messenger Plus! Live\libsndfile.dll
<non signé> MD5: 462e2f4886a0b389d4fda12a15f8219a C:\Program Files\Mozilla Firefox\freebl3.dll
<non signé> MD5: 52d4d6ec27a57313ab9f90e242c3cfa4 C:\Program Files\Mozilla Firefox\nssdbm3.dll
<non signé> MD5: a87b04299a14747bbcbe8cb4147612c2 C:\Program Files\Mozilla Firefox\softokn3.dll
<non signé> MD5: bcdaa234977a83ebe9d6ba24bbc26ced C:\Program Files\OFFICE One v7\OFFICE One QuickZip v7\ooquickziprcv7.dll
<non signé> MD5: fa9a2c87e768f16de048b2b44e5194ea C:\Program Files\OFFICE One v7\OFFICE One Safety-Box v7\oosafetyboxrightclickv7.dll
<non signé> MD5: 383145864f6543c97a7e1b78505d2f1c C:\Program Files\QuickTime\qttask.exe
<non signé> MD5: e95615629ebed809b5289a3e702d8ca6 C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
<non signé> MD5: e8aef78784beb54fc14da8b864e3266f C:\Program Files\Softwin\BitDefender10\agentreg.dll
<non signé> MD5: 2c1912e2322df21df5a3c37fd093098c C:\Program Files\Softwin\BitDefender10\antivirus.dll
<non signé> MD5: 2ffa83a15bc21c5b3f336d96f19b47e6 C:\Program Files\Softwin\BitDefender10\bdagent.exe
<non signé> MD5: fabddb481fece68ca3ce504abd9f6779 C:\Program Files\Softwin\BitDefender10\bdch.dll
<non signé> MD5: 28d8a4f8c7190f105a74bf1d9ccd1a03 C:\Program Files\Softwin\BitDefender10\bdGUICtl.dll
<non signé> MD5: 0595cccf2e5babfc6d5052cfeffa96f6 C:\Program Files\Softwin\BitDefender10\bdmcon.exe
<non signé> MD5: f0db5b73f531f02a7f6873ab8f8a3794 C:\Program Files\Softwin\BitDefender10\bdshelxt.dll
<non signé> MD5: 8d72a62b037194548cd8dd283a3d31c8 C:\Program Files\Softwin\BitDefender10\bdsubmit.dll
<non signé> MD5: 634f3557c054b95dbbb77b0c6d8210cb C:\Program Files\Softwin\BitDefender10\bdusers.dll
<non signé> MD5: f6cfd8551c7c96b4c9b093cb274d65f2 C:\Program Files\Softwin\BitDefender10\BDUtils.dll
<non signé> MD5: 9804cb8f120baa3a00419eb805a802d9 C:\Program Files\Softwin\BitDefender10\getfile.dll
<non signé> MD5: b6d606bffcc7d6eb0b6b66e437b3fbb9 C:\Program Files\Softwin\BitDefender10\live.dll
<non signé> MD5: 531c95ed9d33ec745d86fbe1d3e82c90 C:\Program Files\Softwin\BitDefender10\main.dll
<non signé> MD5: 1c98761d5b20703ef3a09735224bdf63 C:\Program Files\Softwin\BitDefender10\nag.dll
<non signé> MD5: 2430eb90a61095474df0691c2b9deb83 C:\Program Files\Softwin\BitDefender10\NTTools.dll
<non signé> MD5: e59145fb0718653049389be7dcaacba1 C:\Program Files\Softwin\BitDefender10\popup.dll
<non signé> MD5: a4eb2ab47361d59282a893a158fb03e6 C:\Program Files\Softwin\BitDefender10\procinf.dll
<non signé> MD5: 8d0dfcdc94a5a74fbf437684da8f2345 C:\Program Files\Softwin\BitDefender10\quar.dll
<non signé> MD5: 071283f5fe6b5e6f3d9bc0f4b0c1121c C:\Program Files\Softwin\BitDefender10\quarcore.dll
<non signé> MD5: d98d019abf466be7f80b0fe403d20141 C:\Program Files\Softwin\BitDefender10\txmlx.dll
<non signé> MD5: 791d9863078518147b270d23e45da93f C:\Program Files\Softwin\BitDefender10\txtools.dll
<non signé> MD5: fdea48dc0fd400ff4a0d990e4a86c50a C:\Program Files\Softwin\BitDefender10\vscan.dll
<non signé> MD5: 1cc4d4287c7f5eac453f33c7db24455c C:\Program Files\Softwin\BitDefender10\vsserv.exe
<non signé> MD5: ec78f8e299f79832ec2d0cf006211554 C:\Program Files\Softwin\BitDefender10\WSLib.dll
<non signé> MD5: 31a7aa2dedefbd3927b0cade051aac2c C:\Program Files\SUPERAntiSpyware\deupx.dll
<non signé> MD5: d617404d119b1db10366692447d8a648 C:\Program Files\SUPERAntiSpyware\SASCTXMN.DLL
<non signé> MD5: ecd5517a6633826057d4f050927ddf56 c:\program files\superantispyware\sasseh.dll
<non signé> MD5: 482e8f6fd557d5a0df7363f72df145fe C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
<non signé> MD5: 45f2c61bd30137f7bd7f5339a34df601 C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe
<non signé> MD5: bc9c9be7bb74d629362608ace470e7da C:\Users\anthony\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe
<non signé> MD5: 031ccdff85a57172f3402cb99b3e9d46 C:\Users\anthony\AppData\Roaming\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll
<non signé> MD5: 11ab72d5d603db401c190b454fb935a7 C:\Users\anthony\AppData\Roaming\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL
<non signé> MD5: b75e2a565ae6b03dd3941a5dd4e2f31c C:\Windows\bdoscandel.exe
<non signé> MD5: 3fea9d2edf23b0283c7a66c8dea380bd C:\Windows\Downloaded Program Files\dwusplay.dll
<non signé> MD5: cdbe35ea59bc9223e4f800bd1db82d27 C:\Windows\Downloaded Program Files\dwusplay.exe
<non signé> MD5: 2b1c4c87eb20addba59dca975e28dffb C:\Windows\Downloaded Program Files\ipsupd.dll
<non signé> MD5: 68cdc33d31f1952c80a915677d7b7796 C:\Windows\Downloaded Program Files\isusweb.dll
<non signé> MD5: 47ba7d3dfd1dcc97302833043a0880d5 C:\Windows\Downloaded Program Files\oscan82.ocx
<non signé> MD5: a503a47a5e7ea8024379a8cc6059b74a C:\Windows\RtHDVCpl.exe
<non signé> MD5: 99825c8aed2fa0ac76aa0fad770f44c1 C:\Windows\System32\actskin4.ocx
<non signé> MD5: a6919138f29ae45e90e99fa94737e04c C:\Windows\system32\DRIVERS\LVPr2Mon.sys
<non signé> MD5: feffcfdc528764a04c8ed63d5fa6e711 C:\Windows\System32\Drivers\PxHelp20.sys
<non signé> MD5: a47b2875680ad67b35c6150bd0203056 C:\Windows\system32\drivers\RTKVHDA.sys
<non signé> MD5: d63a9e3cb27c5f98f01850b414ef65ff C:\Windows\system32\FsUsbExDisk.SYS
<non signé> MD5: d3f9205cc4cb07553f2f9472c767ea87 C:\Windows\system32\FsUsbExService.Exe
<non signé> MD5: f35a584e947a5b401feb0fe01db4a0d7 C:\Windows\System32\mfc71.dll
<non signé> MD5: e1f8293b0cdd3febd80a4879ca53b771 C:\Windows\System32\MFC71FRA.DLL
<non signé> MD5: 561fa2abb31dfa8fab762145f81667c2 C:\Windows\System32\msvcp71.dll
<non signé> MD5: 3ecfff6c69a056b0bead2cd7f96f9961 C:\Windows\System32\RtkAPO.dll
<non signé> MD5: e4bfbee58c3f20f4a22a206dfd6e21cb C:\Windows\System32\xcomm.dll
<non signé> MD5: ccc2e312486ae6b80970211da472268b C:\Windows\winsxs\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.762_none_0c178a139ee2a7ed\mfc80u.dll
<non signé> MD5: eec2f9e4d790bccdbc542715ab613579 C:\Windows\winsxs\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.762_none_43efccf17831d131\mfc80FRA.dll

Le(s) fichier(s) suivant(s) doit/doivent être téléchargé(s) pour une analyse côté serveur:
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe

Le téléchargement vers le serveur a démarré - 1 fichier(s)
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe (36864)
Vitesse de téléchargement vers le serveur - 15 KB/s
Téléchargement vers le serveur terminé - 1 téléchargés vers le serveur, 0 ont échoué

Le(s) fichier(s) téléchargé(s) vers le serveur est/sont sain(s)

Analyse terminée - la communication a duré 7 secondes
Trafic total - 0.11 Mo envoyés, 3.19 Ko reçus
1223 fichiers et modules analysés - 178 seconds

un win32.agt detecte par spybot et que n'arrive pas supprimer et donc que ta pas vu sur les rappport

j'ai supprimer et desinstaller spybot eteind lordi et reinstaller spybot
j'ai rescan et il ya toujour ce trojan : win32.angent.fbx
et il ne veut pas se supprimer il y a un message derreure qui apparait


voila le rapport de spybot merci

Win32.Agent.fbx: [SBI $86BD92BA] Réglages (Clé du registre, fixing failed)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\jcfborn


--- Spybot - Search & Destroy version: 1.6.2 (build: 20090126) ---

2009-01-26 blindman.exe (1.0.0.8)
2009-01-26 SDFiles.exe (1.6.1.7)
2009-01-26 SDMain.exe (1.0.0.6)
2009-01-26 SDShred.exe (1.0.2.5)
2009-01-26 SDUpdate.exe (1.6.0.12)
2009-01-26 SDWinSec.exe (1.0.0.12)
2009-01-26 SpybotSD.exe (1.6.2.46)
2009-01-26 TeaTimer.exe (1.6.4.26)
2010-02-24 unins000.exe (51.49.0.0)
2009-01-26 Update.exe (1.6.0.7)
2009-01-26 advcheck.dll (1.6.2.15)
2007-04-02 aports.dll (2.1.0.0)
2008-06-14 DelZip179.dll (1.79.11.1)
2009-01-26 SDHelper.dll (1.6.2.14)
2008-06-19 sqlite3.dll
2009-01-26 Tools.dll (2.1.6.10)
2009-01-16 UninsSrv.dll (1.0.0.0)
2009-10-08 Includes\Adware.sbi (*)
2010-02-23 Includes\AdwareC.sbi (*)
2010-01-25 Includes\Cookies.sbi (*)
2009-11-03 Includes\Dialer.sbi (*)
2010-02-23 Includes\DialerC.sbi (*)
2010-01-25 Includes\HeavyDuty.sbi (*)
2009-05-26 Includes\Hijackers.sbi (*)
2010-02-23 Includes\HijackersC.sbi (*)
2010-01-20 Includes\Keyloggers.sbi (*)
2010-02-23 Includes\KeyloggersC.sbi (*)
2004-11-29 Includes\LSP.sbi (*)
2010-02-10 Includes\Malware.sbi (*)
2010-02-23 Includes\MalwareC.sbi (*)
2009-03-25 Includes\PUPS.sbi (*)
2010-02-23 Includes\PUPSC.sbi (*)
2010-01-25 Includes\Revision.sbi (*)
2009-01-13 Includes\Security.sbi (*)
2010-02-23 Includes\SecurityC.sbi (*)
2008-06-03 Includes\Spybots.sbi (*)
2008-06-03 Includes\SpybotsC.sbi (*)
2009-11-03 Includes\Spyware.sbi (*)
2010-02-23 Includes\SpywareC.sbi (*)
2009-06-08 Includes\Tracks.uti
2010-02-16 Includes\Trojans.sbi (*)
2010-02-23 Includes\TrojansC.sbi (*)
2008-03-04 Plugins\Chai.dll
2008-03-05 Plugins\Fennel.dll
2008-02-26 Plugins\Mate.dll
2007-12-24 Plugins\TCPIPAddress.dll