Pc lent rapport hijackthis

Résolu
Bonjour,
mon pc est lent,on m'a conseillé de faire un hijackthis
j' ai fait ce programme mais un peut novice je ne sais pas quoi coché pour fair fix
voici le rapport
une personne pourrai til m'aider?
CORDIALEMENT
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:39:17, on 21/02/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
C:\Program Files\Orange\AntivirusFirewall\Anti-Virus\fsgk32st.exe
C:\Program Files\Orange\AntivirusFirewall\Anti-Virus\FSGK32.EXE
C:\Program Files\Orange\AntivirusFirewall\Common\FSMA32.EXE
C:\WINDOWS\System32\FTRTSVC.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Orange\AntivirusFirewall\Common\FSMB32.EXE
C:\Program Files\Controle Parental\bin\optproxy.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Orange\AntivirusFirewall\Common\FCH32.EXE
C:\Program Files\Orange\AntivirusFirewall\Anti-Virus\fsqh.exe
C:\Program Files\Orange\AntivirusFirewall\Common\FAMEH32.EXE
C:\Program Files\Orange\AntivirusFirewall\FSAUA\program\fsaua.exe
C:\Program Files\Orange\AntivirusFirewall\Anti-Virus\fssm32.exe
C:\Program Files\Orange\AntivirusFirewall\FWES\Program\fsdfwd.exe
C:\Program Files\Orange\AntivirusFirewall\FSAUA\program\fsus.exe
C:\Program Files\Orange\AntivirusFirewall\Anti-Virus\fsav32.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Phoenix Technologies Ltd\RecoverPro_XP\VBPTASK.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Ulead Systems\Ulead Photo Express 5 SE\calcheck.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Program Files\Fichiers communs\Logitech\LComMgr\Communications_Helper.exe
C:\Program Files\Logitech\QuickCam10\QuickCam10.exe
C:\Program Files\Fichiers communs\Logitech\LComMgr\LVComSX.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE
C:\PROGRA~1\CONTRO~1\bin\optgui.exe
C:\Program Files\Orange\AntivirusFirewall\Common\FSM32.EXE
C:\Program Files\Search Settings\SearchSettings.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\Orange\AntivirusFirewall\FSGUI\fsguidll.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Documents and Settings\CAPIAUX LAURENT\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
C:\Program Files\Logitech\QuickCam10\COCIManager.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\PROGRA~1\Wanadoo\Watch.exe
C:\Documents and Settings\CAPIAUX LAURENT\Mes documents\Sandrine CAPIAUX\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.theprizeday.com/today.php
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb128\SearchSettings.dll
O2 - BHO: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\DealioToolbarIE.dll
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_6_2_0.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Automated Content Enhancer - {1D74E9DD-8987-448b-B2CB-67FFF2B8A932} - C:\Program Files\Automated Content Enhancer\4.1.0.5050\ACEIEAddOn.dll
O2 - BHO: Customized Platform Advancer - {42C7C39F-3128-4a17-BDB7-91C46032B5B9} - (no file)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb128\SearchSettings.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O2 - BHO: Web Search Operator - {EB4A577D-BCAD-4b1c-8AF2-9A74B8DD3431} - C:\Program Files\Web Search Operator\3.1.0.1800\wso.dll
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_6_2_0.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\DealioToolbarIE.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: (no name) - {D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2} - (no file)
O4 - HKLM\..\Run: [RestoreIT!] "C:\Program Files\Phoenix Technologies Ltd\RecoverPro_XP\VBPTASK.EXE" VBStart
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Controleur de calendrier pour Ulead Photo Express] C:\Program Files\Ulead Systems\Ulead Photo Express 5 SE\calcheck.exe
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe"
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\Logitech\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam10\QuickCam10.exe" /hide
O4 - HKLM\..\Run: [LVCOMSX] "C:\Program Files\Fichiers communs\Logitech\LComMgr\LVComSX.exe"
O4 - HKLM\..\Run: [EPSON Stylus DX4200 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE /P26 "EPSON Stylus DX4200 Series" /O6 "USB001" /M "Stylus DX4200"
O4 - HKLM\..\Run: [OPTENET_GUI] C:\PROGRA~1\CONTRO~1\bin\optgui.exe
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Orange\AntivirusFirewall\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Orange\AntivirusFirewall\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe
O4 - HKLM\..\Run: [Internet Today Task] "C:\Program Files\Internet Today\1.1.0.1090\InternetToday.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Notification de cadeaux MSN.lnk = C:\Documents and Settings\CAPIAUX LAURENT\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O16 - DPF: {22492231-AEF0-49FC-9180-CE8969AB1273} (F-Secure Online Scanner Launcher) - http://download.sp.f-secure.com/ols/f-secure-rtm/resources/fslauncher.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {6EBC6744-5383-4213-AD5E-66434ECA1812} (F-Secure Online Scanner Launcher) - http://download.sp.f-secure.com/ols/nordnet/orange/so-4.1/resources/fslauncher.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {79E0C1C0-316D-11D5-A72A-006097BFA1AC} (EPSON Web Printer-SelfTest Control Class) - https://www.epson.eu/support/
O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - https://www.f-secure.com/en/home/support
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {E1E73B44-2D20-47A9-9CA2-B534CEBBF856} (F-Secure Health Check 1.0) - http://orange.securitoo.com/pchc/fscax.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O18 - Protocol: bw+0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\Orange\AntivirusFirewall\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\Orange\AntivirusFirewall\FSAUA\program\fsaua.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Orange\AntivirusFirewall\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Orange\AntivirusFirewall\Common\FSMA32.EXE
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\Logitech\SrvLnch\SrvLnch.exe
O23 - Service: Orange Contrôle Parental (OPTENET_FILTER) - Orange - C:\Program Files\Controle Parental\bin\optproxy.exe
O23 - Service: PsShutdown (PsShutdownSvc) - Systems Internals - C:\WINDOWS\System32\PSSDNSVC.EXE

--
End of file - 25619 bytes
Configuration: Windows XP sp3 navigateur orange

13 réponses

Résumé de la discussion

Problème de lenteur du PC exposé après utilisation de HijackThis sur Windows XP, le rapport détaillé invite à obtenir de l'aide pour interpréter les éléments et effectuer des corrections. Le diagnostic met en évidence de nombreuses entrées de démarrage et barres d’outils potentiellement indésirables issues de Wanadoo/Orange, Logitech et d’outils publicitaires, nécessitant une évaluation attentive plutôt qu’un simple fix. Pour agir, créer un point de restauration, sauvegarder le rapport, puis désactiver ou supprimer les éléments de démarrage suspectés et réinitialiser les paramètres du navigateur après exécution d’un antivirus à jour et d’un antimalware fiable. D'autres éléments du log peuvent être légitimes selon l'usage et le matériel, il faut distinguer les composants système des applications potentiellement indésirables.

Bobot (l’IA à votre service)
  1. Contributeur sécurité
    Salut cycliste62

    C'est justement ma configuration, Antivir, ZoneAlarm et MBAM et pas de souci :))

    @++ :)
    1. Contributeur sécurité
      Salut cycliste 62

      Les deux rapports sont propres, as-tu d'autre souci?

      @++ :)
      1. bonjour dédétraqué

        je peux supprimer les dossiers inffectés de MBAM qui sont en quarantaine?
        je peux supprimer le virus qui est en quarantaine?
        je peux supprimer tout les programmes que tu m' as fais télécharger?
        comment faire pour mettre en problème résolu?
        quelle manipulation je dois faire pour que tout les programmes ne démarres pas a chaque fois quand j'allume mon pc?
        quelle manipulation que je dois faire pour passer a internet exploreur sans passer par le navigateur orange?
        encore merci pour avoir pris le temps de résoudre mon problème
        bonne continuation
        cordialement
      2. bonjour dédétraqué
        peux tu me repondre avant de clotorer?
        cordilement
    2. Contributeur sécurité
      Salut cycliste62

      [*]Télécharge AD-Remover (de Cyrildu17 / C_XX) sur ton Bureau.
      http://pagesperso-orange.fr/NosTools/C_XX/AD-R.exe

      Déconnecte-toi et ferme toutes applications en cours

      [*]Double-clique sur le programme d'installation, installe-le dans son emplacement par défaut (C:\Program files).
      [*]Double-clique sur l'icône AD-Remover située sur ton Bureau
      [*]Au menu principal, choisis l'option L.
      [*]Poste le rapport qui apparaît à la fin.

      (Le rapport est sauvegardé aussi sous C:\Ad-report(date).log)

      (CTRL+A pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)

      Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus comme une infection, ne pas en tenir compte, il s'agit d'un faux positif, continue la procédure

      Aide : https://kerio.probb.fr/t3786-tuto-ad-remover

      @++ :)
      1. bonjour Dédétraqué
        j'ai bien télécharger le programme
        quand le pc s'arrete et redemarre le scan se fait mais au bout d'une heure seulement 4% de fait!!!
        je crois que quand il redemarre les programmes s'executes
        donc quelle manip pour que les programmes ne se lance pas au redemarrage et que je puisse les relancer apres le scan?
        CORDIALEMENT
    3. Contributeur sécurité
      Salut cycliste62

      On va faire un analyse plus complète de PC, télécharge RSIT (de random/random) sur le bureau ici :
      http://images.malwareremoval.com/random/RSIT.exe

      - Double clique sur RSIT.exe qui est sur le bureau
      - Clique sur Continue dans la fenêtre
      - RSIT téléchargera HijackThis si il n’est pas présent où détecté, alors il faudra accepter la licence
      - Poste le contenue des deux rapports, log.txt et info.txt(réduit dans la barre des tâches) à la fin de l’analyse

      Les rapports sont dans le dossier ici C:\rsit

      @++ :)
      1. salut dédétraqué
        voici le rapport rsit
        je pense avoir mis les 2 rapport
        cordialement
        info.txt logfile of random's system information tool 1.06 2010-02-23 18:48:19

        ======Uninstall list======

        -->"C:\Program Files\Orange\AntivirusFirewall\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Anti-Spyware Scanner"
        -->"C:\Program Files\Orange\AntivirusFirewall\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Anti-Spyware"
        -->"C:\Program Files\Orange\AntivirusFirewall\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Anti-Virus Client Security Installer"
        -->"C:\Program Files\Orange\AntivirusFirewall\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Anti-Virus"
        -->"C:\Program Files\Orange\AntivirusFirewall\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Automatic Update Agent"
        -->"C:\Program Files\Orange\AntivirusFirewall\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure DAAS"
        -->"C:\Program Files\Orange\AntivirusFirewall\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Diagnostics"
        -->"C:\Program Files\Orange\AntivirusFirewall\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure E-mail Scanning"
        -->"C:\Program Files\Orange\AntivirusFirewall\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure FWES"
        -->"C:\Program Files\Orange\AntivirusFirewall\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure GateKeeper Interface"
        -->"C:\Program Files\Orange\AntivirusFirewall\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Gemini"
        -->"C:\Program Files\Orange\AntivirusFirewall\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure GUI"
        -->"C:\Program Files\Orange\AntivirusFirewall\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Help"
        -->"C:\Program Files\Orange\AntivirusFirewall\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure HIPS"
        -->"C:\Program Files\Orange\AntivirusFirewall\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Internet Shield"
        -->"C:\Program Files\Orange\AntivirusFirewall\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Localization API"
        -->"C:\Program Files\Orange\AntivirusFirewall\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Management Agent"
        -->"C:\Program Files\Orange\AntivirusFirewall\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Pegasus Engine"
        -->"C:\Program Files\Orange\AntivirusFirewall\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Protocol Scanner"
        -->"C:\Program Files\Orange\AntivirusFirewall\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Spam Control"
        -->"C:\Program Files\Orange\AntivirusFirewall\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Spam Scanner"
        -->"C:\Program Files\Orange\AntivirusFirewall\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure TNB"
        -->"C:\Program Files\Orange\AntivirusFirewall\Uninstall\fsuninst.exe" /UninstRegKey:"F-Secure Uninstall"
        -->C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL
        -->C:\WINDOWS\IsUn040c.exe -fC:\WINDOWS\orun32.isu
        -->C:\WINDOWS\UNNeroVision.exe /UNINSTALL
        -->C:\WINDOWS\UNNMP.exe /UNINSTALL
        -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
        2000 Jeux XP-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1DCF26DF-2B3D-4EA7-9090-B842F7A404CA}\SETUP.EXE" -l0x40c
        Adobe Acrobat 4.0-->C:\WINDOWS\ISUNINST.EXE -f"C:\Program Files\Fichiers communs\Adobe\Acrobat 4.0\NT\Uninst.isu" -c"C:\Program Files\Fichiers communs\Adobe\Acrobat 4.0\NT\Uninst.dll"
        Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
        Adobe Reader 8.2.0 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A82000000003}
        Alien Battlecraft Arena v1.31-->"C:\Program Files\ABArena\unins000.exe"
        AntiVirus Firewall-->"C:\Program Files\Orange\AntivirusFirewall\FSGUI\PostInstall.exe" /tUnInstall
        Assistant de connexion Windows Live-->MsiExec.exe /I{D3116CC7-24DC-4CA3-9CE1-23FED836E9F2}
        ATI - Software Uninstall Utility-->C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe
        ATI Control Panel-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe"
        ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
        Backcountry Killers-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\InteracDEV Software\BKUninst.isu"
        Barre d'outils Outlook de Windows Live (Windows Live Toolbar)-->MsiExec.exe /X{6E15BEDF-7EB5-4010-998E-B430DB4EFE45}
        BenQ DC C510 Driver-->C:\PROGRA~1\BENQDC~1\UNWISE.EXE C:\PROGRA~1\BENQDC~1\INSTALL.LOG
        Bloqueur de fenêtres pop-up (Windows Live Toolbar)-->MsiExec.exe /X{A425C250-A0E1-4D78-B1C1-A5CBC7385E7C}
        Bombahman-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Bombahman\Uninst.isu"
        CCleaner-->"C:\Program Files\CCleaner\uninst.exe"
        Contrôle Parental-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{93094D10-9388-11D4-9886-0000B43F396D}\Setup.exe" -l0x40c
        Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
        Correctif pour Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
        Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
        Correctif pour Windows XP (KB961118)-->"C:\WINDOWS\$NtUninstallKB961118$\spuninst\spuninst.exe"
        Correctif pour Windows XP (KB970653-v3)-->"C:\WINDOWS\$NtUninstallKB970653-v3$\spuninst\spuninst.exe"
        Correctif pour Windows XP (KB976098-v2)-->"C:\WINDOWS\$NtUninstallKB976098-v2$\spuninst\spuninst.exe"
        Crow Hunting 1.0-->C:\WINDOWS\iun506.exe C:\Program Files\Crow Hunting\irunin.ini
        Dealio Toolbar v4.0.1-->MsiExec.exe /X{94C3BB3A-56A1-43DE-A242-8B41F46E97EF}
        Détecteur de flux Windows Live Toolbar (Windows Live Toolbar)-->MsiExec.exe /X{EFFCB0F1-CFEC-48D4-B793-EBFCAE852976}
        Digitale Huehnerjagd-->C:\PROGRA~1\DIGITA~1\UNWISE.EXE C:\PROGRA~1\DIGITA~1\INSTALL.LOG
        DJ Mix Lite-->C:\Program Files\DJ Mix Lite\uninstall.exe
        EPSON Attach To Email-->C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{20C45B32-5AB6-46A4-94EF-58950CAF05E5} /l1033 ADDREMOVEDLG
        EPSON Copy Utility 3-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{67EDD823-135A-4D59-87BD-950616D6E857}\SETUP.EXE" -l0x40c -UnInstall
        EPSON Easy Photo Print-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5DA7BC15-18D3-41A0-9F59-838DA3EAEF17}\SETUP.EXE" -l0x40c UNINST
        EPSON File Manager-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E86BC406-944E-41F6-ADE6-2C136734C96B}\Setup.exe" -l0x40c UNINST
        EPSON Image Clip Palette-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{314F6D08-A8B7-11D8-8446-0050BA1D384D}\Setup.exe" -l0x40c -u
        EPSON Scan Assistant-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2A88F1BF-7041-4E42-84B1-6B4ACB83AC64}\Setup.exe" -l0x40c -u
        EPSON Scan-->C:\Program Files\epson\escndv\setup\setup.exe /r
        EPSON Web-To-Page-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7F14F68C-17FA-4F88-B3FD-7F449C1EBF32}\SETUP.EXE" -l0x40c -anything
        ESDX4800_4200 Guide util.-->C:\Program Files\EPSON\TPMANUAL\ESDX4800_4200\USE_G\DOCUNINS.EXE
        Extension de Windows Live Toolbar (Windows Live Toolbar)-->MsiExec.exe /X{0CA6047C-D28B-4295-834A-07C52BA20C2D}
        Extension HighMAT pour l'Assistant Graver un CD de Microsoft Windows XP-->MsiExec.exe /X{FCE65C4E-B0E8-4FBD-AD16-EDCBE6CD591F}
        Fakeanoid-->"C:\Program Files\Fakeanoid\setup\setup.exe" /u
        FenAffiche-->C:\WINDOWS\st6unst.exe -n "C:\Program Files\FenAffiche\ST6UNST.LOG"
        Free Mp3 Wma Converter V 1.81-->"C:\Program Files\Free Audio Pack\unins000.exe"
        Galerie de photos Windows Live-->MsiExec.exe /X{B131E59D-202C-43C6-84C9-68F0C37541F1}
        Gestionnaire Internet-->C:\PROGRA~1\Wanadoo\uninstall.exe
        Grey Olltwit's Frantic Footy Game-->C:\Olltwit\Football\footyunins.exe
        GullBlaster 1.1-->"C:\Program Files\GullBlaster\unins000.exe"
        HijackThis 2.0.2-->"C:\Documents and Settings\CAPIAUX LAURENT\Mes documents\Sandrine CAPIAUX\HijackThis.exe" /uninstall
        Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
        Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
        Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
        Infinite Patience v2.2-->"C:\WINDOWS\UNISTB32.EXE" /U "C:\Games\Patience\UNINST0.000" "C:\Games\Patience\UNINST1.000"
        Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
        Installation Windows Live-->MsiExec.exe /I{46ABBC54-1872-4AA3-95E2-F2C063A63F31}
        InterActual Player-->C:\Program Files\InterActual\InterActual Player\inuninst.exe
        Junk Mail filter update-->MsiExec.exe /I{E2DFE069-083E-4631-9B6C-43C48E991DE5}
        Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
        livebox-->C:\Program Files\InstallShield Installation Information\{FC7DDAAE-7F2B-4270-9BFD-5A130B667E9E}\Setup.exe -runfromtemp -l0x040c -removeonly
        Logitech Audio Echo Cancellation Component-->MsiExec.exe /X{BEF726DD-4037-4214-8C6A-E625C02D2870}
        Logitech Desktop Messenger-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{900B1197-53F5-4F46-A882-2CFFFE2EEDCB}\Setup.exe" -l0x40c UNINSTALL
        Logitech QuickCam-->MsiExec.exe /X{EC42ED6A-751D-45C0-A4F9-8CD00E4690FC}
        Logitech Video Enumerator-->MsiExec.exe /X{EA516024-D84D-41F1-814F-83175A6188F2}
        Megacity Challenge-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C4C5AA47-D289-4507-811F-E036BA959334}\setup.exe" -l0x40c
        Menus intelligents (Windows Live Toolbar)-->MsiExec.exe /X{0CC70FEF-5068-4CD5-B4DE-86FFD98EC929}
        Micro Application - Tout pour réussir son année de CE2-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C39939C2-2B8E-49F9-B82A-CE17EB4DF7A5}\setup.exe" -l0x40c -uninst -removeonly
        Micro Application Marine Aquarium-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Micro Application\Aquarium\Uninst.isu"
        Micro Flight-->C:\Program Files\Micro Flight\uninstall.exe
        Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
        Microsoft .NET Framework 1.1 Security Update (KB953297)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M953297\M953297Uninstall.msp"
        Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
        Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
        Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
        Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
        Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
        Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
        Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
        Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
        Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
        Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
        Microsoft Search Enhancement Pack-->MsiExec.exe /X{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}
        Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
        Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
        Microsoft Sync Framework Runtime Native v1.0 (x86)-->MsiExec.exe /I{8A74E887-8F0F-4017-AF53-CBA42211AAA5}
        Microsoft Sync Framework Services Native v1.0 (x86)-->MsiExec.exe /I{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
        Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
        Microsoft Works-->MsiExec.exe /I{A059DE09-1B49-4450-B340-7AE097EC3F04}
        Mise à jour critique pour Lecteur Windows Media 11 (KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Lecteur Windows Media (KB954155)-->"C:\WINDOWS\$NtUninstallKB954155_WM9$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Lecteur Windows Media (KB968816)-->"C:\WINDOWS\$NtUninstallKB968816_WM9$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Lecteur Windows Media (KB973540)-->"C:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Lecteur Windows Media 10 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP10$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Step by Step Interactive Training (KB923723)-->"C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows Internet Explorer 7 (KB942615)-->"C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows Internet Explorer 7 (KB944533)-->"C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows Internet Explorer 7 (KB963027)-->"C:\WINDOWS\ie7updates\KB963027-IE7\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows Internet Explorer 7 (KB969897)-->"C:\WINDOWS\ie7updates\KB969897-IE7\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows Internet Explorer 8 (KB969897)-->"C:\WINDOWS\ie8updates\KB969897-IE8\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows Internet Explorer 8 (KB971961)-->"C:\WINDOWS\ie8updates\KB971961-IE8\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows Internet Explorer 8 (KB972260)-->"C:\WINDOWS\ie8updates\KB972260-IE8\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows Internet Explorer 8 (KB974455)-->"C:\WINDOWS\ie8updates\KB974455-IE8\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows Internet Explorer 8 (KB976325)-->"C:\WINDOWS\ie8updates\KB976325-IE8\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows Internet Explorer 8 (KB978207)-->"C:\WINDOWS\ie8updates\KB978207-IE8\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB956744)-->"C:\WINDOWS\$NtUninstallKB956744$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB956844)-->"C:\WINDOWS\$NtUninstallKB956844$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB958869)-->"C:\WINDOWS\$NtUninstallKB958869$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB960859)-->"C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB961371)-->"C:\WINDOWS\$NtUninstallKB961371$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB968537)-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB969059)-->"C:\WINDOWS\$NtUninstallKB969059$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB969898)-->"C:\WINDOWS\$NtUninstallKB969898$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB969947)-->"C:\WINDOWS\$NtUninstallKB969947$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB970430)-->"C:\WINDOWS\$NtUninstallKB970430$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB971468)-->"C:\WINDOWS\$NtUninstallKB971468$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB971486)-->"C:\WINDOWS\$NtUninstallKB971486$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB971557)-->"C:\WINDOWS\$NtUninstallKB971557$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB971633)-->"C:\WINDOWS\$NtUninstallKB971633$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB971657)-->"C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB972270)-->"C:\WINDOWS\$NtUninstallKB972270$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB973346)-->"C:\WINDOWS\$NtUninstallKB973346$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB973354)-->"C:\WINDOWS\$NtUninstallKB973354$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB973507)-->"C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB973525)-->"C:\WINDOWS\$NtUninstallKB973525$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB973869)-->"C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB973904)-->"C:\WINDOWS\$NtUninstallKB973904$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB974112)-->"C:\WINDOWS\$NtUninstallKB974112$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB974318)-->"C:\WINDOWS\$NtUninstallKB974318$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB974392)-->"C:\WINDOWS\$NtUninstallKB974392$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB974571)-->"C:\WINDOWS\$NtUninstallKB974571$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB975025)-->"C:\WINDOWS\$NtUninstallKB975025$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB975467)-->"C:\WINDOWS\$NtUninstallKB975467$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB975560)-->"C:\WINDOWS\$NtUninstallKB975560$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB975713)-->"C:\WINDOWS\$NtUninstallKB975713$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB977165)-->"C:\WINDOWS\$NtUninstallKB977165$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB977914)-->"C:\WINDOWS\$NtUninstallKB977914$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB978037)-->"C:\WINDOWS\$NtUninstallKB978037$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB978251)-->"C:\WINDOWS\$NtUninstallKB978251$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB978262)-->"C:\WINDOWS\$NtUninstallKB978262$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB978706)-->"C:\WINDOWS\$NtUninstallKB978706$\spuninst\spuninst.exe"
        Mise à jour pour Windows Internet Explorer 8 (KB976749)-->"C:\WINDOWS\ie8updates\KB976749-IE8\spuninst\spuninst.exe"
        Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
        Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
        Mise à jour pour Windows XP (KB955759)-->"C:\WINDOWS\$NtUninstallKB955759$\spuninst\spuninst.exe"
        Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
        Mise à jour pour Windows XP (KB961503)-->"C:\WINDOWS\$NtUninstallKB961503$\spuninst\spuninst.exe"
        Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
        Mise à jour pour Windows XP (KB968389)-->"C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe"
        Mise à jour pour Windows XP (KB971737)-->"C:\WINDOWS\$NtUninstallKB971737$\spuninst\spuninst.exe"
        Mise à jour pour Windows XP (KB973687)-->"C:\WINDOWS\$NtUninstallKB973687$\spuninst\spuninst.exe"
        Mise à jour pour Windows XP (KB973815)-->"C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe"
        MSN-->C:\Program Files\MSN\MsnInstaller\msninst.exe /Action:ARP
        MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
        MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
        MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
        MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
        Navigateur Orange-->C:\PROGRA~1\Wanadoo\Shell.exe inst\uninst_FTBrowser.shl
        Navigation par onglets (Windows Live Toolbar)-->MsiExec.exe /X{E916E61F-DE9D-4EAF-91E1-CEB50016326A}
        Nero Suite-->C:\Program Files\Fichiers communs\Ahead\Uninstall\Setup.exe /uninstall
        NoLimits Demo (remove only)-->"C:\Games\NoLimits Demo v1.1\uninstall.EXE"
        OneCare Advisor (Windows Live Toolbar)-->MsiExec.exe /X{F242B06B-517F-4D62-B654-16B11564A912}
        Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
        Pacman 2002 1.1.0-->C:\WINDOWS\uPacman 2002.exe
        PIF DESIGNER-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B90450DF-E781-46FD-B1F1-0C86DA40E443}\SETUP.EXE" -l0x40c anything
        Poolster 1.1-->C:\WINDOWS\uninst.exe -f"C:\Program Files\J.H.C. SoftWare\Poolster 1.1\DeIsL8.isu"
        Programme de gestion Camera de Logitech®-->"C:\Program Files\Fichiers communs\Logitech\QCDRV\BIN\SETUP.EXE" UNINSTALL REMOVEPROMPT
        QuickTime-->C:\WINDOWS\unvise32qt.exe C:\WINDOWS\system32\QuickTime\Uninstall.log
        Realtek AC'97 Audio-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FB08F381-6533-4108-B7DD-039E11FBC27E}\setup.exe" -l0x40c -removeonly
        Recover Pro-->C:\Program Files\Phoenix Technologies Ltd\RecoverPro_XP\un_vback.exe
        Sagem Wi-Fi 11g USB adapter (driver)-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2ED60C17-4568-4CD5-830A-03C4688B09A1}\setup.exe" -l0x40c
        Search Settings 1.2.2-->MsiExec.exe /X{0B1AAC97-8563-41D9-AE47-58E6A222F0E1}
        Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
        Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
        Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
        Speedy Zone-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\SpeedyZone\Uninst.isu"
        Starship Ranger v1.7-->"C:\Program Files\Starship Ranger\unins000.exe"
        Ulead Photo Express 5 SE-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{31383A1D-FAE6-435A-9DBD-FDB61C7C8EC9}\Setup.exe" -l0x40c
        UMVPLStandalone-->MsiExec.exe /X{8AC049F7-1383-45C3-9E7D-F93CA667F9E1}
        Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
        Visionneuse Journal Windows Microsoft-->MsiExec.exe /X{43DCF766-6838-4F9A-8C91-D92DA586DFA7}
        Windows Imaging Component-->"C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
        Windows Internet Explorer 8-->"C:\WINDOWS\ie8\spuninst\spuninst.exe"
        Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
        Windows Live Communications Platform-->MsiExec.exe /I{ED00D08A-3C5F-488D-93A0-A04F21F23956}
        Windows Live Contrôle parental-->MsiExec.exe /X{D5D81435-B8DE-4CAF-867F-7998F2B92CFC}
        Windows Live Favorites pour Windows Live Toolbar-->MsiExec.exe /X{786C4AD1-DCBA-49A6-B0EF-B317A344BD66}
        Windows Live FolderShare-->MsiExec.exe /X{2075CB0A-D26F-4DAA-B424-5079296B43BA}
        Windows Live Mail-->MsiExec.exe /I{5DD76286-9BE7-4894-A990-E905E91AC818}
        Windows Live Messenger-->MsiExec.exe /X{770F1BEC-2871-4E70-B837-FB8525FFA3B1}
        Windows Live Toolbar-->MsiExec.exe /X{F7D27C70-90F5-49B9-B188-0A133C0CE353}
        Windows Live Writer-->MsiExec.exe /X{4634B21A-CC07-4396-890C-2B8168661FEA}
        Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
        Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
        Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
        Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
        Yahoo! Companion-->rundll32.exe C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\YCOMP5~1.DLL,DllCommand ui

        ======Hosts File======

        127.0.0.1 www.007guard.com
        127.0.0.1 007guard.com
        127.0.0.1 008i.com
        127.0.0.1 www.008k.com
        127.0.0.1 008k.com
        127.0.0.1 www.00hq.com
        127.0.0.1 00hq.com
        127.0.0.1 010402.com
        127.0.0.1 www.032439.com
        127.0.0.1 032439.com

        ======Security center information======

        AV: AntiVirus Firewall 7.03
        FW: AntiVirus Firewall 7.03

        ======System event log======

        Computer Name: LOLA
        Event Code: 59
        Message: Generate Activation Context a échoué pour C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_dec6ddd2\MFC80.DLL.
        Message d'erreur de référence : Opération réussie.
        .

        Record Number: 84958
        Source Name: SideBySide
        Time Written: 20100207101502.000000+060
        Event Type: erreur
        User:

        Computer Name: LOLA
        Event Code: 59
        Message: Resolve Partial Assembly a échoué pour Microsoft.VC80.MFCLOC.
        Message d'erreur de référence : L'assemblage référencé n'est pas installé sur votre système.
        .

        Record Number: 84957
        Source Name: SideBySide
        Time Written: 20100207101502.000000+060
        Event Type: erreur
        User:

        Computer Name: LOLA
        Event Code: 32
        Message: L'assemblage dépendant Microsoft.VC80.MFCLOC ne peut pas être trouvé. La dernière erreur était L'assemblage référencé n'est pas installé sur votre système.

        Record Number: 84956
        Source Name: SideBySide
        Time Written: 20100207101502.000000+060
        Event Type: erreur
        User:

        Computer Name: LOLA
        Event Code: 59
        Message: Generate Activation Context a échoué pour C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_dec6ddd2\MFC80.DLL.
        Message d'erreur de référence : Opération réussie.
        .

        Record Number: 84955
        Source Name: SideBySide
        Time Written: 20100207101502.000000+060
        Event Type: erreur
        User:

        Computer Name: LOLA
        Event Code: 59
        Message: Resolve Partial Assembly a échoué pour Microsoft.VC80.MFCLOC.
        Message d'erreur de référence : L'assemblage référencé n'est pas installé sur votre système.
        .

        Record Number: 84954
        Source Name: SideBySide
        Time Written: 20100207101502.000000+060
        Event Type: erreur
        User:

        =====Application event log=====

        Computer Name: LOLA
        Event Code: 2002
        Message:
        Record Number: 17631
        Source Name: EAPOL
        Time Written: 20091029115009.000000+060
        Event Type: Informations
        User:

        Computer Name: LOLA
        Event Code: 2003
        Message:
        Record Number: 17630
        Source Name: EAPOL
        Time Written: 20091029115009.000000+060
        Event Type: Informations
        User:

        Computer Name: LOLA
        Event Code: 103
        Message:
        Record Number: 17629
        Source Name: F-Secure Anti-Virus
        Time Written: 20091029092838.000000+060
        Event Type: erreur
        User:

        Computer Name: LOLA
        Event Code: 2002
        Message:
        Record Number: 17628
        Source Name: EAPOL
        Time Written: 20091029092648.000000+060
        Event Type: Informations
        User:

        Computer Name: LOLA
        Event Code: 2003
        Message:
        Record Number: 17627
        Source Name: EAPOL
        Time Written: 20091029092648.000000+060
        Event Type: Informations
        User:

        ======Environment variables======

        "ComSpec"=%SystemRoot%\system32\cmd.exe
        "Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\ATI Technologies\ATI Control Panel;C:\Program Files\Fichiers communs\Ulead Systems\MPEG
        "windir"=%SystemRoot%
        "FP_NO_HOST_CHECK"=NO
        "OS"=Windows_NT
        "PROCESSOR_ARCHITECTURE"=x86
        "PROCESSOR_LEVEL"=15
        "PROCESSOR_IDENTIFIER"=x86 Family 15 Model 4 Stepping 3, GenuineIntel
        "PROCESSOR_REVISION"=0403
        "NUMBER_OF_PROCESSORS"=2
        "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
        "TEMP"=%SystemRoot%\TEMP
        "TMP"=%SystemRoot%\TEMP

        -----------------EOF-----------------
        Logfile of random's system information tool 1.06 (written by random/random)
        Run by CAPIAUX LAURENT at 2010-02-23 18:47:52
        Microsoft Windows XP Édition familiale Service Pack 3
        System drive C: has 162 GB (79%) free of 205 GB
        Total RAM: 2046 MB (67% free)

        Logfile of Trend Micro HijackThis v2.0.2
        Scan saved at 18:48:16, on 23/02/2010
        Platform: Windows XP SP3 (WinNT 5.01.2600)
        MSIE: Internet Explorer v8.00 (8.00.6001.18702)
        Boot mode: Normal

        Running processes:
        C:\WINDOWS\System32\smss.exe
        C:\WINDOWS\system32\winlogon.exe
        C:\WINDOWS\system32\services.exe
        C:\WINDOWS\system32\lsass.exe
        C:\WINDOWS\system32\Ati2evxx.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\system32\spoolsv.exe
        c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
        C:\Program Files\Orange\AntivirusFirewall\Anti-Virus\fsgk32st.exe
        C:\Program Files\Orange\AntivirusFirewall\Anti-Virus\FSGK32.EXE
        C:\Program Files\Orange\AntivirusFirewall\Common\FSMA32.EXE
        C:\WINDOWS\System32\FTRTSVC.exe
        C:\WINDOWS\System32\svchost.exe
        C:\Program Files\Controle Parental\bin\optproxy.exe
        C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
        C:\WINDOWS\system32\svchost.exe
        C:\Program Files\Orange\AntivirusFirewall\Common\FSMB32.EXE
        C:\Program Files\Orange\AntivirusFirewall\Common\FCH32.EXE
        C:\WINDOWS\system32\Ati2evxx.exe
        C:\WINDOWS\Explorer.EXE
        C:\Program Files\Orange\AntivirusFirewall\Anti-Virus\fsqh.exe
        C:\Program Files\Orange\AntivirusFirewall\Common\FAMEH32.EXE
        C:\Program Files\Phoenix Technologies Ltd\RecoverPro_XP\VBPTASK.EXE
        C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
        C:\WINDOWS\SOUNDMAN.EXE
        C:\Program Files\QuickTime\qttask.exe
        C:\Program Files\Ulead Systems\Ulead Photo Express 5 SE\calcheck.exe
        C:\Program Files\Microsoft IntelliPoint\ipoint.exe
        C:\Program Files\Fichiers communs\Logitech\LComMgr\Communications_Helper.exe
        C:\Program Files\Logitech\QuickCam10\QuickCam10.exe
        C:\Program Files\Fichiers communs\Logitech\LComMgr\LVComSX.exe
        C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE
        C:\PROGRA~1\CONTRO~1\bin\optgui.exe
        C:\Program Files\Orange\AntivirusFirewall\Common\FSM32.EXE
        C:\Program Files\Orange\AntivirusFirewall\FSGUI\fsguidll.exe
        C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
        C:\Program Files\Search Settings\SearchSettings.exe
        C:\WINDOWS\system32\ctfmon.exe
        C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
        C:\Program Files\Windows Media Player\WMPNSCFG.exe
        C:\Documents and Settings\CAPIAUX LAURENT\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
        C:\Program Files\Orange\AntivirusFirewall\FSAUA\program\fsaua.exe
        C:\Program Files\Orange\AntivirusFirewall\Anti-Virus\fssm32.exe
        C:\Program Files\Orange\AntivirusFirewall\FWES\Program\fsdfwd.exe
        C:\Program Files\Orange\AntivirusFirewall\FSAUA\program\fsus.exe
        C:\Program Files\Logitech\QuickCam10\COCIManager.exe
        C:\Program Files\Orange\AntivirusFirewall\Anti-Virus\fsav32.exe
        C:\Documents and Settings\CAPIAUX LAURENT\Bureau\rsit.exe
        C:\Documents and Settings\CAPIAUX LAURENT\Mes documents\Sandrine CAPIAUX\CAPIAUX LAURENT.exe

        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
        R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
        R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
        R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
        R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
        R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb128\SearchSettings.dll
        O2 - BHO: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\DealioToolbarIE.dll
        O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_6_2_0.dll
        O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
        O2 - BHO: Automated Content Enhancer - {1D74E9DD-8987-448b-B2CB-67FFF2B8A932} - C:\Program Files\Automated Content Enhancer\4.1.0.5050\ACEIEAddOn.dll
        O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
        O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
        O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
        O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb128\SearchSettings.dll
        O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
        O2 - BHO: Web Search Operator - {EB4A577D-BCAD-4b1c-8AF2-9A74B8DD3431} - C:\Program Files\Web Search Operator\3.1.0.1800\wso.dll
        O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_6_2_0.dll
        O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
        O3 - Toolbar: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\DealioToolbarIE.dll
        O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
        O3 - Toolbar: (no name) - {D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2} - (no file)
        O4 - HKLM\..\Run: [RestoreIT!] "C:\Program Files\Phoenix Technologies Ltd\RecoverPro_XP\VBPTASK.EXE" VBStart
        O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
        O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
        O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
        O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
        O4 - HKLM\..\Run: [Controleur de calendrier pour Ulead Photo Express] C:\Program Files\Ulead Systems\Ulead Photo Express 5 SE\calcheck.exe
        O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe"
        O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\Logitech\LComMgr\Communications_Helper.exe"
        O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam10\QuickCam10.exe" /hide
        O4 - HKLM\..\Run: [LVCOMSX] "C:\Program Files\Fichiers communs\Logitech\LComMgr\LVComSX.exe"
        O4 - HKLM\..\Run: [EPSON Stylus DX4200 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE /P26 "EPSON Stylus DX4200 Series" /O6 "USB001" /M "Stylus DX4200"
        O4 - HKLM\..\Run: [OPTENET_GUI] C:\PROGRA~1\CONTRO~1\bin\optgui.exe
        O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Orange\AntivirusFirewall\Common\FSM32.EXE" /splash
        O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Orange\AntivirusFirewall\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
        O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
        O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
        O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe
        O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
        O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
        O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
        O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
        O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
        O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
        O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
        O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
        O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
        O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
        O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
        O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
        O4 - Startup: Notification de cadeaux MSN.lnk = C:\Documents and Settings\CAPIAUX LAURENT\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
        O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
        O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
        O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
        O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
        O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
        O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
        O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
        O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
        O16 - DPF: {22492231-AEF0-49FC-9180-CE8969AB1273} (F-Secure Online Scanner Launcher) - http://download.sp.f-secure.com/ols/f-secure-rtm/resources/fslauncher.cab
        O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
        O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
        O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
        O16 - DPF: {6EBC6744-5383-4213-AD5E-66434ECA1812} (F-Secure Online Scanner Launcher) - http://download.sp.f-secure.com/ols/nordnet/orange/so-4.1/resources/fslauncher.cab
        O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
        O16 - DPF: {79E0C1C0-316D-11D5-A72A-006097BFA1AC} (EPSON Web Printer-SelfTest Control Class) - https://www.epson.eu/support/
        O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - https://www.f-secure.com/en/home/support
        O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
        O16 - DPF: {E1E73B44-2D20-47A9-9CA2-B534CEBBF856} (F-Secure Health Check 1.0) - http://orange.securitoo.com/pchc/fscax.cab
        O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
        O18 - Protocol: bw+0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw+0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw-0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw-0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw00 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw00s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw10 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw10s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw20 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw20s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw30 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw30s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw40 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw40s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw50 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw50s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw60 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw60s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw70 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw70s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw80 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw80s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw90 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw90s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwa0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwa0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwb0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwb0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwc0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwc0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwd0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwd0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwe0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwe0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwf0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwf0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
        O18 - Protocol: bwg0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwg0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwh0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwh0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwi0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwi0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwj0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwj0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwk0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwk0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwl0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwl0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwm0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwm0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwn0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwn0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwo0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwo0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwp0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwp0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwq0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwq0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwr0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwr0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bws0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bws0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwt0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwt0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwu0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwu0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwv0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwv0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bww0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bww0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwx0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwx0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwy0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol:
    4. Contributeur sécurité
      Salut cycliste62

      Ton rapport(log.txt) n'est pas complet, utilise cjoint.com pour poster en lien ton rapport :
      https://www.cjoint.com/

      - Clique sur Parcourir pour aller chercher le rapport
      - Clique sur Ouvrir ensuite sur Créer le lien Cjoint

      - Fais un copier/coller du lien qui est devant Le lien a été créé: dans ta prochaine réponse.

      @++ :)
    5. Contributeur sécurité
      Salut cycliste62

      Double clique sur le raccourci d'HijackThis sur ton Bureau, clique sur Do a scan system only coche la case devant la(les) ligne(s) suivante(s) si présente(s)
      Si pas de raccourci sur le bureau, il ce trouve ici :
      C:\Documents and Settings\CAPIAUX LAURENT\Mes documents\Sandrine CAPIAUX\CAPIAUX LAURENT.exe

      R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb128\SearchSettings.dll
      O2 - BHO: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\DealioToolbarIE.dll
      O2 - BHO: Automated Content Enhancer - {1D74E9DD-8987-448b-B2CB-67FFF2B8A932} - C:\Program Files\Automated Content Enhancer\4.1.0.5050\ACEIEAddOn.dll
      O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb128\SearchSettings.dll
      O2 - BHO: Web Search Operator - {EB4A577D-BCAD-4b1c-8AF2-9A74B8DD3431} - C:\Program Files\Web Search Operator\3.1.0.1800\wso.dll
      O3 - Toolbar: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\DealioToolbarIE.dll
      O3 - Toolbar: (no name) - {D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2} - (no file)
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe
      O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
      O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
      O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe


      - Ferme les fenêtres en cours sauf HijackThis, clique sur Fix checked

      - Quitte HijackThis

      -----

      Télécharge OTM (de Old_Timer) sur le bureau :

      http://www.geekstogo.com/forum/files/file/402-otm-oldtimers-move-it/

      Double-clique sur OTM.exe sur le bureau

      - Copie le texte qui se trouve en gras ci-dessous et colle le dans le cadre de gauche de OTM nommé Paste Instructions for Items to be Moved

      :files
      C:\Program Files\Dealio Toolbar
      C:\Program Files\Automated Content Enhancer
      C:\Program Files\Search Settings
      C:\Program Files\Web Search Operator

      :commands
      [purity]
      [emptytemp]
      [reboot]


      - Clique sur MoveIt! pour lancer la suppression.
      - Ferme OTM

      Ton PC va redémarrer pour finir la suppression, si il ne le fais pas lui-même, redémarre le.

      Poste le rapport de OTMoveIt qui se trouve dans C:\_OTM\MovedFiles.

      -----

      Télécharge et installe MalwareByte's Anti-Malware
      http://www.malwarebytes.org/mbam/program/mbam-setup.exe

      - Mets le à jour

      ---

      - Redémarre en mode sans échec :

      Au redémarrage de ton PC tapote sur la touche F8 ou F5, sur l'écran suivant déplace toi avec les flèches de direction et choisis Mode sans échec. Choisis ta session habituelle et non la session Administrateur

      ---

      - Double clique sur le raccourci de MalwareByte's Anti-Malware qui est sur le bureau.
      - Sélectionne Exécuter un examen complet si ce n'est pas déjà fait
      - clique sur Rechercher

      - Une fois le scan terminé, une fenêtre s'ouvre, clique sur sur OK

      - Si MalwareByte's n'a rien détecté, clique sur OK Un rapport va apparaître ferme-le.

      - Si MalwareByte's a détecté des infections, clique sur Afficher les résultats ensuite sur Supprimer la sélection

      - Enregistre le rapport sur ton Bureau comme cela il sera plus facile à retrouver, poste ensuite ce rapport.

      Note : Si MalwareByte's a besoin de redémarrer pour terminer la suppression, accepte en cliquant sur OK

      Tutoriel pour MalwareByte's ici :
      https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

      @++ :)
      1. bonjour Dédétraqué
        pour commencer merci d'avoir détaillé les démarches a accomplir
        j'ai fait exactement les démarche que vous avez cité
        hijackthis puis otm petit momment de panique car f secure a bloqué l'application mais ça a passé et pour finir malwarebyte's
        le pc a redemarré sans probléme et comme convenu le rapport
        a parrement j'avais pas mal de fichiers espions
        pour finir y a t il encore des manipulation a effectué?
        CORDIALEMENT
        Malwarebytes' Anti-Malware 1.44
        Version de la base de données: 3785
        Windows 5.1.2600 Service Pack 3 (Safe Mode)
        Internet Explorer 8.0.6001.18702

        27/02/2010 15:59:22
        mbam-log-2010-02-27 (15-59-18).txt

        Type de recherche: Examen complet (C:\|)
        Eléments examinés: 201944
        Temps écoulé: 1 hour(s), 13 minute(s), 18 second(s)

        Processus mémoire infecté(s): 0
        Module(s) mémoire infecté(s): 0
        Clé(s) du Registre infectée(s): 29
        Valeur(s) du Registre infectée(s): 4
        Elément(s) de données du Registre infecté(s): 0
        Dossier(s) infecté(s): 23
        Fichier(s) infecté(s): 101

        Processus mémoire infecté(s):
        (Aucun élément nuisible détecté)

        Module(s) mémoire infecté(s):
        (Aucun élément nuisible détecté)

        Clé(s) du Registre infectée(s):
        HKEY_CLASSES_ROOT\explorerbar.funexplorer (Adware.Agent) -> No action taken.
        HKEY_CLASSES_ROOT\explorerbar.funexplorer.1 (Adware.Agent) -> No action taken.
        HKEY_CLASSES_ROOT\explorerbar.funredirector (Adware.Agent) -> No action taken.
        HKEY_CLASSES_ROOT\explorerbar.funredirector.1 (Adware.Agent) -> No action taken.
        HKEY_CLASSES_ROOT\Interface\{480098c6-f6ad-4c61-9b5c-2bae228a34d1} (Adware.DoubleD) -> No action taken.
        HKEY_CLASSES_ROOT\Interface\{6160f76a-1992-4b17-a32d-0c706d159105} (Adware.DoubleD) -> No action taken.
        HKEY_CLASSES_ROOT\CLSID\{8ceb185e-81a5-46d3-bc20-c555d605afbd} (Adware.DoubleD) -> No action taken.
        HKEY_CLASSES_ROOT\CLSID\{a72522ba-9ff3-4c83-abc6-9b476728a396} (Adware.DoubleD) -> No action taken.
        HKEY_CLASSES_ROOT\CLSID\{c5762628-ae15-4ca6-96c4-b00dd17f3419} (Adware.DoubleD) -> No action taken.
        HKEY_CLASSES_ROOT\CLSID\{d062e03e-65ca-49e4-9b15-31938ba98922} (Adware.DoubleD) -> No action taken.
        HKEY_CLASSES_ROOT\Typelib\{883dfc00-8a21-411d-956c-73a4e4b7d16f} (Adware.DoubleD) -> No action taken.
        HKEY_CLASSES_ROOT\Typelib\{ac5ab953-ed25-4f9c-87f0-b086b0178ffa} (Adware.DoubleD) -> No action taken.
        HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{42c7c39f-3128-4a17-bdb7-91c46032b5b9} (Adware.Agent) -> No action taken.
        HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1d74e9dd-8987-448b-b2cb-67fff2b8a932} (Adware.Agent) -> No action taken.
        HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{eb4a577d-bcad-4b1c-8af2-9a74b8dd3431} (Adware.Agent) -> No action taken.
        HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{d45817b8-3ead-4d1d-8fca-ec63a8e35de2} (Adware.DoubleD) -> No action taken.
        HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{42c7c39f-3128-4a17-bdb7-91c46032b5b9} (Adware.Agent) -> No action taken.
        HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{1d74e9dd-8987-448b-b2cb-67fff2b8a932} (Adware.Agent) -> No action taken.
        HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{eb4a577d-bcad-4b1c-8af2-9a74b8dd3431} (Adware.Agent) -> No action taken.
        HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{d45817b8-3ead-4d1d-8fca-ec63a8e35de2} (Adware.DoubleD) -> No action taken.
        HKEY_CURRENT_USER\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2} (Adware.DoubleD) -> No action taken.
        HKEY_LOCAL_MACHINE\SOFTWARE\AppDataLow\SOFTWARE\Internet Today (Adware.DoubleD) -> No action taken.
        HKEY_LOCAL_MACHINE\SOFTWARE\Automated Content Enhancer (Adware.DoubleD) -> No action taken.
        HKEY_LOCAL_MACHINE\SOFTWARE\Customized Platform Advancer (Adware.DoubleD) -> No action taken.
        HKEY_LOCAL_MACHINE\SOFTWARE\Web Search Operator (Adware.DoubleD) -> No action taken.
        HKEY_CURRENT_USER\SOFTWARE\Automated Content Enhancer (Adware.DoubleD) -> No action taken.
        HKEY_CURRENT_USER\SOFTWARE\Customized Platform Advancer (Adware.DoubleD) -> No action taken.
        HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\MenuExt\&Funband Serach (Adware.DoubleD) -> No action taken.
        HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\MenuExt\&Funband Serach (Adware.DoubleD) -> No action taken.

        Valeur(s) du Registre infectée(s):
        HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{d45817b8-3ead-4d1d-8fca-ec63a8e35de2} (Adware.DoubleD) -> No action taken.
        HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\Extensions\{8141440e-08f0-4339-9959-5c31c6a69f23} (Adware.DoubleD) -> No action taken.
        HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\Extensions\{e63605fc-d583-4c81-867f-9457bdb3ea1b} (Adware.DoubleD) -> No action taken.
        HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\Extensions\{e889f097-b0be-471b-89ad-b86b6f04b506} (Adware.DoubleD) -> No action taken.

        Elément(s) de données du Registre infecté(s):
        (Aucun élément nuisible détecté)

        Dossier(s) infecté(s):
        C:\Program Files\Internet Today\1.1.0.1090 (Adware.Agent) -> No action taken.
        C:\Program Files\Internet Today (Adware.Agent) -> No action taken.
        C:\Program Files\Customized Platform Advancer\3.1.0.1520 (Adware.Agent) -> No action taken.
        C:\Program Files\Customized Platform Advancer\3.1.0.1520\Data (Adware.Agent) -> No action taken.
        C:\Program Files\Customized Platform Advancer\3.1.0.1520\FF (Adware.Agent) -> No action taken.
        C:\Program Files\Customized Platform Advancer\3.1.0.1520\FF\chrome (Adware.Agent) -> No action taken.
        C:\Program Files\Customized Platform Advancer\3.1.0.1520\FF\chrome\content (Adware.Agent) -> No action taken.
        C:\Program Files\Customized Platform Advancer\3.1.0.1520\FF\components (Adware.Agent) -> No action taken.
        C:\Program Files\Customized Platform Advancer (Adware.Agent) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050 (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX CORENTIN\Local Settings\Application Data\Automated Content Enhancer (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX CORENTIN\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050 (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Customized Platform Advancer (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Customized Platform Advancer\3.1.0.1520 (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\HottieStar Toolbar (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Internet Today (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX SANDRINE\Local Settings\Application Data\Internet Today (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX CORENTIN\Local Settings\Application Data\Internet Today (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Web Search Operator (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Web Search Operator\3.1.0.1800 (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX CORENTIN\Local Settings\Application Data\Web Search Operator (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX CORENTIN\Local Settings\Application Data\Web Search Operator\3.1.0.1800 (Adware.DoubleD) -> No action taken.

        Fichier(s) infecté(s):
        C:\Program Files\Internet Today\1.1.0.1090\InternetToday.ico (Adware.Agent) -> No action taken.
        C:\Program Files\Internet Today\1.1.0.1090\InternetToday.skf (Adware.Agent) -> No action taken.
        C:\Program Files\Internet Today\1.1.0.1090\mfc80.dll (Adware.Agent) -> No action taken.
        C:\Program Files\Internet Today\1.1.0.1090\Microsoft.VC80.MFC.manifest (Adware.Agent) -> No action taken.
        C:\Program Files\Internet Today\1.1.0.1090\PixelLogExe.exe (Adware.Agent) -> No action taken.
        C:\Program Files\Internet Today\1.1.0.1090\SkinCrafterDll.dll (Adware.Agent) -> No action taken.
        C:\Program Files\Internet Today\1.1.0.1090\unins000.dat (Adware.Agent) -> No action taken.
        C:\Program Files\Internet Today\1.1.0.1090\unins000.exe (Adware.Agent) -> No action taken.
        C:\Program Files\Customized Platform Advancer\3.1.0.1520\CPACommon.dll (Adware.Agent) -> No action taken.
        C:\Program Files\Customized Platform Advancer\3.1.0.1520\CPAHelper.exe (Adware.Agent) -> No action taken.
        C:\Program Files\Customized Platform Advancer\3.1.0.1520\CPAIEAddOnSub.dll (Adware.Agent) -> No action taken.
        C:\Program Files\Customized Platform Advancer\3.1.0.1520\CPAIEAddOnSubL.dll (Adware.Agent) -> No action taken.
        C:\Program Files\Customized Platform Advancer\3.1.0.1520\cpapx.exe (Adware.Agent) -> No action taken.
        C:\Program Files\Customized Platform Advancer\3.1.0.1520\unins000.dat (Adware.Agent) -> No action taken.
        C:\Program Files\Customized Platform Advancer\3.1.0.1520\unins000.exe (Adware.Agent) -> No action taken.
        C:\Program Files\Customized Platform Advancer\3.1.0.1520\Data\config.md (Adware.Agent) -> No action taken.
        C:\Program Files\Customized Platform Advancer\3.1.0.1520\FF\chrome.manifest (Adware.Agent) -> No action taken.
        C:\Program Files\Customized Platform Advancer\3.1.0.1520\FF\install.rdf (Adware.Agent) -> No action taken.
        C:\Program Files\Customized Platform Advancer\3.1.0.1520\FF\chrome\CPAAddOn.jar (Adware.Agent) -> No action taken.
        C:\Program Files\Customized Platform Advancer\3.1.0.1520\FF\chrome\content\CPAAddOn.js (Adware.Agent) -> No action taken.
        C:\Program Files\Customized Platform Advancer\3.1.0.1520\FF\chrome\content\CPAAddOn.xul (Adware.Agent) -> No action taken.
        C:\Program Files\Customized Platform Advancer\3.1.0.1520\FF\components\CPAFFAddOn.dll (Adware.Agent) -> No action taken.
        C:\Program Files\Customized Platform Advancer\3.1.0.1520\FF\components\CPAFFAddOn.xpt (Adware.Agent) -> No action taken.
        C:\Program Files\Customized Platform Advancer\3.1.0.1520\FF\components\CPAFFHelperComponent.js (Adware.Agent) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\config.md (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\ipdata.md (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20091115-122809.762.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20091115-123108.684.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20091115-152031.640.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20091115-155616.890.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20091119-184006.656.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20091127-182418.500.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20091129-183124.717.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20091129-183910.952.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20091129-193022.170.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20091129-194423.170.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20091129-201925.780.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20091129-202151.155.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20091130-182639.937.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20091130-185948.562.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20091203-180319.359.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20091204-185149.437.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20091207-173306.296.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20091207-183803.000.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20091207-184240.093.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20091207-190210.640.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20091207-213020.984.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20091207-220232.531.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20091208-191636.265.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20091217-181336.484.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20091217-181756.640.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20091217-194015.078.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20091218-173251.546.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20091225-201748.703.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20091225-201814.765.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20091225-201831.250.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20091225-201908.015.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20091231-124649.078.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20100101-113726.000.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20100102-191452.812.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20100107-185509.953.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20100110-121445.421.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20100110-121509.421.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20100113-170146.703.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20100116-152920.812.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20100116-153056.031.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20100116-162226.625.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20100116-175358.109.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20100120-160215.312.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20100131-164003.484.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20100131-170135.812.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20100131-170432.046.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20100131-170624.937.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20100201-193058.140.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20100202-181834.375.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20100202-182144.734.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20100207-113857.234.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20100219-184445.406.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20100220-113111.140.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20100221-115417.296.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20100221-120549.468.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20100221-121833.000.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20100224-151347.265.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20100225-191944.743.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20100227-120930.281.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20100227-121808.421.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\rstatus.md (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX CORENTIN\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\config.md (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX CORENTIN\Local Settings\Application Data\Automated Content Enhancer\4.1.0.5050\NP_20100206-095526.703.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Customized Platform Advancer\3.1.0.1520\config.md (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Customized Platform Advancer\3.1.0.1520\HJHP_20091115-122828.090.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Customized Platform Advancer\3.1.0.1520\HJHP_20091115-123108.980.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Customized Platform Advancer\3.1.0.1520\HJHP_20091115-152031.781.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Customized Platform Advancer\3.1.0.1520\HJHP_20091115-155616.953.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Customized Platform Advancer\3.1.0.1520\HJHP_20091119-184007.640.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Customized Platform Advancer\3.1.0.1520\HJHP_20091127-182419.437.log (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Customized Platform Advancer\3.1.0.1520\ipdata.md (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Customized Platform Advancer\3.1.0.1520\rstatus.md (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Internet Today\itlogo.bmp (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX LAURENT\Local Settings\Application Data\Web Search Operator\3.1.0.1800\config.md (Adware.DoubleD) -> No action taken.
        C:\Documents and Settings\CAPIAUX CORENTIN\Local Settings\Application Data\Web Search Operator\3.1.0.1800\config.md (Adware.DoubleD) -> No action taken.
    6. Contributeur sécurité
      Salut cycliste62

      J'aurais du lire Quarantined and deleted successfully et non No action taken dans le rapport de MBAM, tu as bien cliquer sur Supprimer la sélection?

      [*]Télécharge AD-Remover (de Cyrildu17 / C_XX) sur ton Bureau.
      http://pagesperso-orange.fr/NosTools/C_XX/AD-R.exe

      Déconnecte-toi et ferme toutes applications en cours

      [*]Double-clique sur le programme d'installation, installe-le dans son emplacement par défaut (C:\Program files).
      [*]Double-clique sur l'icône AD-Remover située sur ton Bureau
      [*]Au menu principal, choisis l'option L.
      [*]Poste le rapport qui apparaît à la fin.

      (Le rapport est sauvegardé aussi sous C:\Ad-report(date).log)

      (CTRL+A pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)

      Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus comme une infection, ne pas en tenir compte, il s'agit d'un faux positif, continue la procédure

      Aide : https://kerio.probb.fr/t3786-tuto-ad-remover

      @++ :)
      1. bonjour dédétraqué
        j' ai trouvé mon erreur
        j'ai enregistré le rapport avant de supprimer
        j'airelancé MBAM en rapide voici le rapport
        Malwarebytes' Anti-Malware 1.44
        Version de la base de données: 3785
        Windows 5.1.2600 Service Pack 3
        Internet Explorer 8.0.6001.18702

        27/02/2010 18:14:48
        mbam-log-2010-02-27 (18-14-48).txt

        Type de recherche: Examen rapide
        Eléments examinés: 131058
        Temps écoulé: 7 minute(s), 23 second(s)

        Processus mémoire infecté(s): 0
        Module(s) mémoire infecté(s): 0
        Clé(s) du Registre infectée(s): 0
        Valeur(s) du Registre infectée(s): 0
        Elément(s) de données du Registre infecté(s): 0
        Dossier(s) infecté(s): 0
        Fichier(s) infecté(s): 0

        Processus mémoire infecté(s):
        (Aucun élément nuisible détecté)

        Module(s) mémoire infecté(s):
        (Aucun élément nuisible détecté)

        Clé(s) du Registre infectée(s):
        (Aucun élément nuisible détecté)

        Valeur(s) du Registre infectée(s):
        (Aucun élément nuisible détecté)

        Elément(s) de données du Registre infecté(s):
        (Aucun élément nuisible détecté)

        Dossier(s) infecté(s):
        (Aucun élément nuisible détecté)

        Fichier(s) infecté(s):
        (Aucun élément nuisible détecté)
    7. Contributeur sécurité
      Salut cycliste62

      OK c'est bon, fais le scan avec AD-Remover et poste le rapport

      @++ :)
      1. bonjour dédétraqué
        voici le rapport ad-remover
        cordialement
        .
        ======= RAPPORT D'AD-REMOVER 1.1.4.6_J | UNIQUEMENT XP/VISTA/7 =======
        .
        Mis à jour par C_XX le 05.02.2010 à 17:34
        Contact: AdRemover.contact@gmail.com
        Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
        .
        Lancé à: 12:30:58, 28/02/2010 | Mode Normal | Option: SCAN
        Exécuté de: C:\Ad-Remover\
        Système d'exploitation: Microsoft® Windows XP™ Service Pack 3 v5.1.2600
        Nom du PC: LOLA | Utilisateur actuel: CAPIAUX LAURENT
        .
        ============== ÉLÉMENT(S) TROUVÉ(S) ==============
        .
        Service: *Application Updater*

        C:\Program Files\Application Updater
        C:\DOCUME~1\CAPIAU~2\APPLIC~1\Dealio
        C:\DOCUME~1\CAPIAU~2\APPLIC~1\Search Settings
        C:\Windows\Installer\49b5ff8.msi
        C:\Windows\Installer\49b601b.msi
        C:\WINDOWS\system32\config\systemprofile\Application Data\Application Updater
        C:\Documents and Settings\CAPIAUX CORENTIN\Application Data\Dealio
        C:\Documents and Settings\CAPIAUX CORENTIN\Application Data\Search Settings
        .
        HKCU\software\appdatalow\software\Dealio
        HKCU\software\appdatalow\software\Internet Today
        HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{0E5CBF21-D15F-11D0-8301-00AA005B4383}
        HKCU\software\Search Settings
        HKLM\software\Application Updater
        HKLM\software\classes\installer\Products\96DC878CBD58B624183A7E1157AABE19
        HKLM\Software\Classes\Interface\{877F3EAB-4462-44DF-8475-6064EAFD7FBF}
        HKLM\Software\Classes\Interface\{D5A1EF9A-7948-435D-8B87-D6A598317288}
        HKLM\software\classes\SearchSettings.BHO
        HKLM\software\classes\SearchSettings.BHO.1
        HKLM\Software\Classes\TypeLib\{565DD573-549E-4DA9-8CD7-6AE3DF25339A}
        HKLM\Software\Classes\TypeLib\{CD082CCA-086F-4FD8-8FD7-247A0DBBD1CC}
        HKLM\software\Dealio
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\0292226F570267D459357AF78015E534
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\03285961954D5824C85975D955031EE8
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\23A03A6765D10864EB278629A2DF32C3
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\3A4FCCE032CA50340A6975C92410AE30
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\6AC3985F4D64C2245A96D31569D1BF40
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\6E00D9B24354FBA44AE2CA0FA86EF2E2
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\7C13F41728A69EF41AA1A3372FB86FA6
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\855847FA0E25FBA46B8516389DFDD4B3
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\9DC2844D0E3E8924C8973C3B3BAE1F58
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\AFEB575AA30ACB243B748619F62F0782
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\B92A2929968AED344BD6B34AD60E6604
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\F461B8DD96FF5AA41A52D14E1D7B69C7
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Products\96DC878CBD58B624183A7E1157AABE19
        HKLM\software\microsoft\windows\currentversion\uninstall\{C878CD69-85DB-426B-81A3-E71175AAEB91}
        HKLM\software\Search Settings
        HKU\s-1-5-21-3940413250-1237131972-3796413441-1007\software\appdatalow\software\Dealio
        HKU\s-1-5-21-3940413250-1237131972-3796413441-1007\software\appdatalow\software\Internet Today
        HKU\s-1-5-21-3940413250-1237131972-3796413441-1007\software\Search Settings
        .
        ============== Scan additionnel ==============
        .
        .
        * Internet Explorer Version 8.0.6001.18702 *
        .
        [HKEY_CURRENT_USER\..\Internet Explorer\Main]
        .
        Do404Search: 01000000
        Local Page: C:\WINDOWS\system32\blank.htm
        Show_ToolBar: yes
        Search Bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
        Start Page: hxxp://fr.msn.com/
        Enable Browser Extensions: yes
        Default_search_url: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
        Default_page_url: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
        .
        [HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
        .
        Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
        Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
        Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
        Delete_Temp_Files_On_Exit: yes
        Local Page: C:\WINDOWS\system32\blank.htm
        Start Page: hxxp://fr.msn.com/
        Search bar: hxxp://search.msn.com/spbasic.htm
        .
        [HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
        .
        Tabs: res://ieframe.dll/tabswelcome.htm
        .
        ===================================
        .
        509 Octet(s) - C:\Ad-Report-CLEAN[1].log
        509 Octet(s) - C:\Ad-Report-CLEAN[2].log
        509 Octet(s) - C:\Ad-Report-CLEAN[3].log
        537 Octet(s) - C:\Ad-Report-SCAN[1].log
        537 Octet(s) - C:\Ad-Report-SCAN[2].log
        4972 Octet(s) - C:\Ad-Report-SCAN[3].log
        .
        12 Fichier(s) - C:\DOCUME~1\CAPIAU~2\LOCALS~1\Temp
        1 Fichier(s) - C:\WINDOWS\Temp
        103 Fichier(s) - C:\WINDOWS\Prefetch
        .
        6 Fichier(s) - C:\Ad-Remover\BACKUP
        0 Fichier(s) - C:\Ad-Remover\QUARANTINE
        .
        Fin à: 12:33:56 | 28/02/2010 - SCAN[3]
        .
        ============== E.O.F ==============
        .
    8. Contributeur sécurité
      Salut cycliste 62

      Refais un scan avec RSIT et poste le contenu du rapport log.txt à la fin de l’analyse

      Le rapport est dans le dossier ici C:\rsit

      @++ :)
      1. bonjour dédétraqué
        qu'est ce qu'il ce passe ?
        j'aurai des autre infections?
        voici le rapport
        cordialement
        Logfile of random's system information tool 1.06 (written by random/random)
        Run by CAPIAUX LAURENT at 2010-02-28 17:40:02
        Microsoft Windows XP Édition familiale Service Pack 3
        System drive C: has 163 GB (79%) free of 205 GB
        Total RAM: 2046 MB (65% free)

        Logfile of Trend Micro HijackThis v2.0.2
        Scan saved at 17:40:29, on 28/02/2010
        Platform: Windows XP SP3 (WinNT 5.01.2600)
        MSIE: Internet Explorer v8.00 (8.00.6001.18702)
        Boot mode: Normal

        Running processes:
        C:\WINDOWS\System32\smss.exe
        C:\WINDOWS\system32\winlogon.exe
        C:\WINDOWS\system32\services.exe
        C:\WINDOWS\system32\lsass.exe
        C:\WINDOWS\system32\Ati2evxx.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\system32\spoolsv.exe
        c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
        C:\Program Files\Application Updater\ApplicationUpdater.exe
        C:\Program Files\Orange\AntivirusFirewall\Anti-Virus\fsgk32st.exe
        C:\Program Files\Orange\AntivirusFirewall\Anti-Virus\FSGK32.EXE
        C:\Program Files\Orange\AntivirusFirewall\Common\FSMA32.EXE
        C:\WINDOWS\System32\FTRTSVC.exe
        C:\WINDOWS\System32\svchost.exe
        C:\Program Files\Orange\AntivirusFirewall\Common\FSMB32.EXE
        C:\Program Files\Controle Parental\bin\optproxy.exe
        C:\Program Files\Orange\AntivirusFirewall\Common\FCH32.EXE
        C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
        C:\WINDOWS\system32\svchost.exe
        C:\Program Files\Orange\AntivirusFirewall\Common\FAMEH32.EXE
        C:\Program Files\Orange\AntivirusFirewall\Anti-Virus\fsqh.exe
        C:\Program Files\Orange\AntivirusFirewall\FSAUA\program\fsaua.exe
        C:\Program Files\Orange\AntivirusFirewall\Anti-Virus\fssm32.exe
        C:\Program Files\Orange\AntivirusFirewall\FWES\Program\fsdfwd.exe
        C:\Program Files\Orange\AntivirusFirewall\FSAUA\program\fsus.exe
        C:\Program Files\Orange\AntivirusFirewall\Anti-Virus\fsav32.exe
        C:\WINDOWS\system32\Ati2evxx.exe
        C:\WINDOWS\Explorer.EXE
        C:\WINDOWS\SOUNDMAN.EXE
        C:\Program Files\Phoenix Technologies Ltd\RecoverPro_XP\VBPTASK.EXE
        C:\PROGRA~1\CONTRO~1\bin\optgui.exe
        C:\Program Files\Fichiers communs\Logitech\LComMgr\LVComSX.exe
        C:\Program Files\Logitech\QuickCam10\QuickCam10.exe
        C:\Program Files\Fichiers communs\Logitech\LComMgr\Communications_Helper.exe
        C:\Program Files\Microsoft IntelliPoint\ipoint.exe
        C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
        C:\Program Files\Orange\AntivirusFirewall\Common\FSM32.EXE
        C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE
        C:\Program Files\Ulead Systems\Ulead Photo Express 5 SE\calcheck.exe
        C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
        C:\Program Files\Windows Media Player\WMPNSCFG.exe
        C:\Program Files\Windows Live\Messenger\msnmsgr.exe
        C:\WINDOWS\system32\ctfmon.exe
        C:\Documents and Settings\CAPIAUX LAURENT\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
        C:\Program Files\Logitech\QuickCam10\COCIManager.exe
        C:\Program Files\Orange\AntivirusFirewall\FSGUI\fsguidll.exe
        C:\Program Files\RegCleaner\RegCleanr.exe
        C:\Program Files\Wanadoo\GestionnaireInternet.exe
        C:\Program Files\Wanadoo\ComComp.exe
        C:\PROGRA~1\Wanadoo\Toaster.exe
        C:\PROGRA~1\Wanadoo\Inactivity.exe
        C:\PROGRA~1\Wanadoo\PollingModule.exe
        C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
        C:\Program Files\Wanadoo\Watch.exe
        C:\Documents and Settings\CAPIAUX LAURENT\Bureau\rsit.exe
        C:\Program Files\trend micro\CAPIAUX LAURENT.exe

        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
        R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
        R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
        R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
        R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
        O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_6_2_0.dll
        O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
        O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
        O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
        O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
        O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
        O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_6_2_0.dll
        O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
        O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
        O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
        O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
        O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
        O4 - HKLM\..\Run: [RestoreIT!] "C:\Program Files\Phoenix Technologies Ltd\RecoverPro_XP\VBPTASK.EXE" VBStart
        O4 - HKLM\..\Run: [OPTENET_GUI] C:\PROGRA~1\CONTRO~1\bin\optgui.exe
        O4 - HKLM\..\Run: [LVCOMSX] "C:\Program Files\Fichiers communs\Logitech\LComMgr\LVComSX.exe"
        O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam10\QuickCam10.exe" /hide
        O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\Logitech\LComMgr\Communications_Helper.exe"
        O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe"
        O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Orange\AntivirusFirewall\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
        O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Orange\AntivirusFirewall\Common\FSM32.EXE" /splash
        O4 - HKLM\..\Run: [EPSON Stylus DX4200 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE /P26 "EPSON Stylus DX4200 Series" /O6 "USB001" /M "Stylus DX4200"
        O4 - HKLM\..\Run: [Controleur de calendrier pour Ulead Photo Express] C:\Program Files\Ulead Systems\Ulead Photo Express 5 SE\calcheck.exe
        O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
        O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
        O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
        O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
        O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
        O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
        O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
        O4 - Startup: Notification de cadeaux MSN.lnk = C:\Documents and Settings\CAPIAUX LAURENT\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
        O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
        O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
        O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
        O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
        O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
        O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
        O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.orange.fr (file missing) (HKCU)
        O16 - DPF: {22492231-AEF0-49FC-9180-CE8969AB1273} (F-Secure Online Scanner Launcher) - http://download.sp.f-secure.com/ols/f-secure-rtm/resources/fslauncher.cab
        O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
        O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
        O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
        O16 - DPF: {6EBC6744-5383-4213-AD5E-66434ECA1812} (F-Secure Online Scanner Launcher) - http://download.sp.f-secure.com/ols/nordnet/orange/so-4.1/resources/fslauncher.cab
        O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/...
        O16 - DPF: {79E0C1C0-316D-11D5-A72A-006097BFA1AC} (EPSON Web Printer-SelfTest Control Class) - http://esupport.epson-europe.com/selftest/fr/Prg/ESTPTest.cab
        O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - http://support.f-secure.com/ols/fscax.cab
        O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
        O16 - DPF: {E1E73B44-2D20-47A9-9CA2-B534CEBBF856} (F-Secure Health Check 1.0) - http://orange.securitoo.com/pchc/fscax.cab
        O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
        O18 - Protocol: bw+0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw+0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw-0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw-0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw00 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw00s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw10 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw10s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw20 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw20s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw30 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw30s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw40 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw40s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw50 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw50s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw60 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw60s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw70 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw70s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw80 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw80s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw90 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw90s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwa0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwa0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwb0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwb0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwc0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwc0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwd0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwd0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwe0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwe0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwf0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwf0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
        O18 - Protocol: bwg0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwg0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwh0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwh0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwi0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwi0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwj0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwj0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwk0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwk0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwl0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwl0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwm0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwm0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwn0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwn0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwo0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwo0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwp0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwp0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwq0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwq0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwr0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwr0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bws0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bws0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwt0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwt0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwu0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwu0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwv0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwv0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bww0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bww0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwx0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwx0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwy0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwy0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwz0 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwz0s - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: offline-8876480 - {B29D83EE-F9CD-4122-B885-0D842B5945C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O23 - Service: Application Updater - Spigot, Inc. - C:\Program Files\Application Updater\ApplicationUpdater.exe
        O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
        O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
        O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\Orange\AntivirusFirewall\Anti-Virus\fsgk32st.exe
        O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\Orange\AntivirusFirewall\FSAUA\program\fsaua.exe
        O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Orange\AntivirusFirewall\FWES\Program\fsdfwd.exe
        O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Orange\AntivirusFirewall\Common\FSMA32.EXE
        O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
        O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
        O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\Logitech\SrvLnch\SrvLnch.exe
        O23 - Service: Orange Contrôle Parental (OPTENET_FILTER) - Orange - C:\Program Files\Controle Parental\bin\optproxy.exe
        O23 - Service: PsShutdown (PsShutdownSvc) - Systems Internals - C:\WINDOWS\System32\PSSDNSVC.EXE
    9. Contributeur sécurité
      Salut cycliste 62

      Télécharge OTM (de Old_Timer) sur le bureau :

      http://www.geekstogo.com/forum/files/file/402-otm-oldtimers-move-it/

      Double-clique sur OTM.exe sur le bureau

      - Copie le texte qui se trouve en gras ci-dessous et colle le dans le cadre de gauche de OTM nommé Paste Instructions for Items to be Moved

      :services
      Application Updater

      :files
      C:\Program Files\Application Updater
      C:\Documents and Settings\CAPIAUX LAURENT\Application Data\Search Settings

      :commands
      [purity]
      [emptytemp]
      [reboot]


      - Clique sur MoveIt! pour lancer la suppression.
      - Ferme OTM

      Ton PC va redémarrer pour finir la suppression, si il ne le fais pas lui-même, redémarre le.

      Poste le rapport de OTMoveIt qui se trouve dans C:\_OTM\MovedFiles.

      @++ :)
      1. bonjour dédétraqué
        voila j'ai fait OTM
        question:je peux supprimer les fichiers qui sont en quarantaine dans MBAM ?
        cordialement
        All processes killed
        ========== SERVICES/DRIVERS ==========
        Service Application Updater stopped successfully!
        Service Application Updater deleted successfully!
        ========== FILES ==========
        C:\Program Files\Application Updater folder moved successfully.
        File/Folder C:\Documents and Settings\CAPIAUX LAURENT\Application Data\Search Settings not found.
        ========== COMMANDS ==========

        [EMPTYTEMP]

        User: All Users

        User: CAPIAUX LAURENT
        ->Temp folder emptied: 897497 bytes
        ->Temporary Internet Files folder emptied: 26263633 bytes

        User: CAPIAUX SANDRINE
        ->Temp folder emptied: 0 bytes
        ->Temporary Internet Files folder emptied: 0 bytes

        User: CAPIAUX CORENTIN
        ->Temp folder emptied: 27392 bytes
        ->Temporary Internet Files folder emptied: 547968 bytes

        User: Default User
        ->Temp folder emptied: 0 bytes
        ->Temporary Internet Files folder emptied: 0 bytes

        User: LocalService
        ->Temp folder emptied: 66016 bytes
        ->Temporary Internet Files folder emptied: 33170 bytes

        User: NetworkService
        ->Temp folder emptied: 0 bytes
        ->Temporary Internet Files folder emptied: 33170 bytes

        %systemdrive% .tmp files removed: 0 bytes
        %systemroot% .tmp files removed: 0 bytes
        %systemroot%\System32 .tmp files removed: 0 bytes
        %systemroot%\System32\dllcache .tmp files removed: 0 bytes
        %systemroot%\System32\drivers .tmp files removed: 0 bytes
        Windows Temp folder emptied: 14317 bytes
        %systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
        %systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
        RecycleBin emptied: 0 bytes

        Total Files Cleaned = 27,00 mb

        OTM by OldTimer - Version 3.1.9.0 log created on 02282010_184557

        Files moved on Reboot...

        Registry entries deleted on Reboot...
    10. Contributeur sécurité
      Salut cycliste 62

      On va vérifier si rien de caché :
      Faire un scan avec Nod32 en ligne (il faut utiliser Internet Explorer) ici :

      https://www.eset.com/int/home/online-scanner/

      (coche toutes les cases à chaque fois, sauf les deux dernières a la fin du scan, sinon le rapport est supprimer)
      A la fin, colle le rapport : C:\Program Files\EsetOnlineScanner\log.txt

      @++ :)
      1. bonjour dédétraqué
        voici le rapport nod 32
        petit probleme:pendant le scan de nod 32 f secure a détrcté un trojan
        je vais essayer de mettre le rapport;c'est un virus qui date du 03.01.2010!!!
        etrange ou non j'ai mis ce virus en quarentaine pour que tu puisse me dire ce que je dois faire
        supprimer ou nettoyer?
        cordialement

        ESETSmartInstaller@High as CAB hook log:
        OnlineScanner.ocx - registred OK
        # version=7
        # iexplore.exe=8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)
        # OnlineScanner.ocx=1.0.0.6211
        # api_version=3.0.2
        # EOSSerial=9a5ce969fb6f2c44ba927b03be870d85
        # end=finished
        # remove_checked=true
        # archives_checked=true
        # unwanted_checked=true
        # unsafe_checked=false
        # antistealth_checked=true
        # utc_time=2010-03-01 07:25:09
        # local_time=2010-03-01 08:25:09 (+0100, Paris, Madrid)
        # country="France"
        # lang=1033
        # osver=5.1.2600 NT Service Pack 3
        # compatibility_mode=512 16777215 100 0 96205 96205 0 0
        # compatibility_mode=2304 16777175 100 0 0 0 0 0
        # compatibility_mode=8192 67108863 100 0 4327 4327 0 0
        # scanned=74002
        # found=0
        # cleaned=0
        # scan_time=3693

        le rapport f secure
        Rapport d'analyse
        lundi 1 mars 2010 20:10:17 - 20:11:27
        Nom de l'ordinateur: LOLA
        Type d'analyse: Analyse de la cible
        Cible : C:\Program Files\FenAffiche\FENUNIKA.0XE

        --------------------------------------------------------------------------------

        Résultat: 1 antiprogramme(s) détecté(s)
        Trojan.Win32.VB.fhg (virus)
        C:\Program Files\FenAffiche\FENUNIKA.0XE Action : mis en quarantaine

        --------------------------------------------------------------------------------

        Statistiques
        Analysés:
        Fichiers: 1
        Non analysés: 0
        Résultat:
        Virus: 1
        Spyware: 0
        Eléments suspects: 0
        Programme à risque: 0
        Actions:
        Nettoyés: 0
        Renommés: 0
        Supprimés: 0
        Quarantaine: 1
        Echec: 0
        Secteurs d'amorçage:
        Analysés: 0
        Infectés: 0
        Eléments suspects: 0
        Nettoyés: 0

        --------------------------------------------------------------------------------

        Options
        Version des définitions:
        Virus: 2010-03-01_11
        Spyware: 2010-03-01_09
        Moteurs d'analyse :
        F-Secure AVP: 7.00.171, 2010-03-01
        F-Secure Libra: 2.04.05, 2010-02-06
        F-Secure Orion: 1.02.41, 2010-03-01
        F-Secure Draco: 1.01.00, 0-00-00
        Options d'analyse :
        Analyser les fichiers définis : COM EXE SYS OV? BIN SCR DLL SHS HTM HTML HTT VBS JS INF VXD DO? XL? RTF CPL WIZ HTA PP? PWZ P?T MSO PIF . ACM ASP AX CNV CSC DRV INI MDB MPD MPP MPT OBD OBT OCX PCI TLB TSP WBK WBT WPC WSH VWP WML BOO HLP TD0 TT6 MSG ASD JSE VBE WSC CHM EML PRC SHB LNK WSF {* PDF ZL? XML ANI AVB BAT CEO CMD JOB JPG LSP MAP MHT MIF PHP POT SWF WMF NWS TAR TGZ ZIP JAR ARJ LZH TAR TGZ GZ CAB RAR BZ2 HQX
        Analyser le contenu des archives
        Actions:
        Virus: Mettre en quarantaine et supprimer
        Spyware: Interroger après analyse

        --------------------------------------------------------------------------------

        Copyright © 1998-2007 Assistance produit | Envoi d'un échantillon de virus à F-Secure
        F-Secure n'assume aucune responsabilité quant au matériel créé ou publié par une tierce partie et référencé par un lien dans les pages Web de F-Secure. Sauf mention contraire explicite, vous acceptez qu'en soumettant du matériel sur l'un de nos serveurs, par exemple via courrier électronique ou formulaire CGI de F-Secure, le matériel mis à disposition peut dès lors être publié sur les pages Web de F-Secure ou sur support papier. Vous accéderez au site web public de F-Secure en cliquant sur les liens soulignés. Ainsi, votre accès est enregistré dans nos statistiques privées avec votre nom de domaine. Ces informations ne sont communiquées à aucune tierce partie. Vous vous engagez à ne pas intenter de procédure judiciaire contre notre société en relation avec le matériel soumis. Sauf mention contraire explicite, F-Secure peut inclure dans ses propres produits/publications tout concept relatif au matériel mis à sa disposition, sans aucun engagement de responsabilité
    11. Contributeur sécurité
      Salut cycliste62

      Oui tu peux vider la quarantaine sans souci.

      Aide toi de ce lien pour les programmes au démarrage :
      https://forum.malekal.com/viewtopic.php?t=16583&start=

      Pour des raisons de sécurité et surtout pour garder ton PC propre, on va désactiver la restauration système sur tous les lecteurs :

      - Clique droit sur le Poste de travail sur le bureau, dans propriété tu cliques sur l'onglet Restauration système

      - Coche la case désactiver la restauration et applique

      Redémarre l’ordinateur et réactive la restauration système.

      Tutoriel XP : http://www.libellules.ch/desactiver_restauration.php

      -----

      On va faire un ménage des outils téléchargés pour la désinfection, télécharge Tools Cleaner sur le bureau :

      http://pc-system.fr/

      - Double clique sur ToolsCleaner2.exe sur le bureau
      - Clique sur Recherche et laisse le scan agir.
      - Clique sur Suppression pour finaliser.
      - Tu peux, si tu le souhaites, te servir des Options facultatives.
      - Clique sur Quitter pour obtenir le rapport.
      - Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).
      - Si des outils restes après le passage de Tools Cleaner, tu pourras les supprimer manuellement ainsi que tous les rapports qui on été généré lors de la désinfection.

      -----

      Important de mettre à jour Windows et tes logiciels :
      Mettre Windows(catégories critique, Services Pack et Services Release) à jour : http://www.windowsupdate.com/windowsupdate/v6/default.aspx

      Faire un scan de vulnérabilités afin de vérifier que tes logiciels soit à jour sans failles de sécurités et mettre à jour :
      https://www.malekal.com/tester-la-vulnerabilite-de-son-systeme-2/

      Faire un ménage des fichiers inutiles et de la base de registre :
      https://www.malekal.com/tutoriel-ccleaner/

      Dis moi quand cela est fais où si tu as des soucis et on passe à la résolution du sujet par la suite.

      @++ :)
      1. bonjour dédétraqué

        j'ai supprimer la quarentaine
        j'ai désactiver la restauration redemarrer puis activer
        enlever les programmes avec tollclaener
        fait un peut de menage en enlevant des programmes que je n'utilisais plus
        defragmenter la base de registre et le disque dur
        mis a jour windows mais comme j'etais a jour donc ok
        scan de vulnérabilité et j'ai corriger 4 problemes
        passer cclaener sur le registre et disque dur
        redemarrer le pc
        je n'est plus le rapport tollclaener car j'ai supprimer le programme
        petite fayeur ce matin en allumant mon pc , il a demarré comme au premier jour que je l'ai eu c'est a dire au point d'usine donc je l'ai arreté puis redemarrer et il reparti normalement
        a mon avis mour moi c'est ok plus d probleme
        cordialement
    12. Contributeur sécurité
      Salut cycliste62

      Je te donne quelques consignes de sécurité :

      - Windows Update parfaitement à jour http://www.windowsupdate.com/windowsupdate/v6/default.aspx (catégories critique, Services Pack et Services Release)
      - pare-feu bien paramétré, je te conseil ZoneAlarm :
      https://www.malekal.com/tutoriel-zonealarm-firewall/
      - antivirus bien paramétré et mis à jour régulièrement (quotidiennement s'il le faut) avec un scan complet régulier (journalier s'il le faut).
      - une attitude prudente vis à vis de la navigation (pas de sites douteux : cracks, warez, sexe...) et vis à vis de la messagerie (fichiers joints aux messages doivent être scannés avant d'être ouverts)
      - pas de téléchargement illégal, qui est le principal facteur d’infection (µTorrent, BitTorrent, eMule, Limewire, etc..) http://forum.malekal.com/ftopic893.php
      - une attitude vigilante (être à l'affût d'un fonctionnement inhabituel de son système)
      - nettoyage hebdomadaire du système (suppression des fichiers inutiles, nettoyage de la base de registre, scandisk, defrag)
      - scan hebdomadaire antispyware, je conseil MalwareByte's Anti-Malware :
      https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
      - un contrôle régulier de la console JAVA pour s'assurer qu'elle est à jour :
      https://www.java.com/en/download/uninstalltool.jsp
      - faire régulièrement un scan de vulnérabilités afin de vérifier que tes logiciels soit à jour sans failles de sécurités :
      https://www.malekal.com/tester-la-vulnerabilite-de-son-systeme-2/

      De bonne lecture si tu veux en savoir plus sur la sécurité et le fonctionnement de Windows :
      http://www.malekal.com/menu_windows_general.php
      http://www.malekal.com/menu_windows_securite.php

      Si tu considères ton problème comme résolu, tu pourras mettre en résolu :
      https://www.commentcamarche.net/infos/25917-marquer-un-fil-de-discussion-comme-etant-resolu/

      Bonne journée/soirée et bon surf

      @++ :)
      1. bonjour dédétraqué

        avant de mettre en probleme résolu j'aimerai avoir un avis
        le moi prochain je voudrai enlever l'antivirus orange qui me coute 5€ par moi par antivir
        je voudrai savoir si c'est un bon choix et est il compatible avec le par feu zone alarme que tu me conseil?
        CORDIALEMENT

        encore merci de m'avoir aider