Problème avec net offers Résolu/Fermé

Question

Bonjour,mon écran est envahi par des fenêtres de net offers!comment arreter cela??Quelqu'un peut m'aider s'il vous plait?voici ce qui se trouve dans mon PC : Logfile of HijackThis v1.99.1 Scan saved at 14:43:05, on 16/11/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe C:\Norman\NVC\BIN\Zanda.exe C:\WINDOWS\System32
vsvc32.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\SOUNDMAN.EXE C:\NORMAN
vc\BIN\ZLH.EXE C:\NORMAN
vc\BIN\NVCSCHED.EXE C:\NORMAN
vc\BIN\NYMSE.EXE C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe C:\WINDOWS\system32\wscntfy.exe C:\PROGRA~1\Wanadoo\CnxMon.exe C:\PROGRA~1\Wanadoo\TaskbarIcon.exe C:\WINDOWS\system32\spootty.exe C:\Program Files\QuickTime\qttask.exe C:\WINDOWS\System32\LVCOMSX.EXE C:\NORMAN
vc\BIN\NJEEVES.EXE C:\Program Files\Logitech\Video\LogiTray.exe C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe C:\Program Files\MessengerPlus! 3\MsgPlus.exe C:\Program Files\HbTools\Bin\4.7.0.0\HbtWeatherOnTray.exe C:\Program Files\HbTools\Bin\4.7.0.0\HbtOEAddOn.exe C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\system32undll32.exe C:\program files\mailskinner\mailskinner.exe c:\progra~1\intern~1\iexplore.exe C:\Program Files\MSN Messenger\msnmsgr.exe C:\Program Files\Booster Wanadoo\wanadoo_booster.exe C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkcalrem.exe C:\Program Files\Internet Explorer\iexplore.exe C:\PROGRA~1\INCRED~1\bin\IMApp.exe C:\Program Files\Logitech\Video\FxSvr2.exe C:\NORMAN
vc\BIN
vcoas.exe C:\NORMAN
vc\BIN\cclaw.exe C:\PROGRA~1\INCRED~1\bin\IncMail.exe C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\HbTools\Bin\4.7.0.0\HbtSrv.exe C:\Program Files\Microsoft Money\System\urlmap.exe C:\Documents and Settings\DELPHINE\Local Settings\Temporary Internet Files\Content.IE5\TY2NLKJY\hijackthis_199[1]\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.ydejubblknmjnxxyxofg.com/BIU_ZGcox8S49jFKG/l8Pu3JI7ExPT/ttN8s0gaXGcXZvwhQQ9EwXkr0oR4W8B8v.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.fcsbmaeplhitvrxsnkqrxqfbl.info/BIU_ZGcox8R15NYhIEBwXaylaMND0G/KxLz2y3Zobds.php R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = "C:\Program Files\Outlook Express\msimn.exe" //eml:C:\Documents and Settings\DELPHINE\Mes documents\cd titi\FW_ ah ah ouh aih aih aiah iah aih.eml R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:7180 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = ;*windowsupdate.microsoft.com;*windowsupdate.com;download.microsoft.com;codecs.microsoft.com;activex.microsoft.com;liveupdate.symantecliveupdate.com;liveupdate.symantec.com;services.wanadoo.fr;secure.wanadoo.fr;webgen.wanadoo.fr;images.wanadoo.fr;images2.wanadoo.fr;wanadoo.wha.com;wha.wanadoo.fr;pay.www.wanadoo.fr;www.wanadoo.fr;webmail*.wanadoo.fr;iapref.wanadoo.fr;wip2.wanadoo.fr;vip.voila.fr;maj.wanadoo.fr;qos.wanadoo.fr;guidejuniorscontroleparental.wanadoo.fr;wip2pro.wanadoo.fr;wpms.wanadoo.fr;mobile.wanadoo.fr;wpms.wanadoo.fr;photos.wanadoo.fr;musicb.wanadoo.fr;wassup.wanadoo.fr R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx O2 - BHO: (no name) - {1776E9CF-7D47-A85A-0499-2D7CC9E22080} - C:\DOCUME~1\DELPHINE\APPLIC~1\helpregs\NurbDraw.exe O2 - BHO: ShprRprts - {2A8A997F-BB9F-48F6-AA2B-2762D50F9289} - C:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll O2 - BHO: HbTools - {74CC49F7-EB32-4A08-B204-948962A6E3DB} - C:\Program Files\HbTools\Bin\4.7.0.0\HbtHostIE.dll O2 - BHO: Barre d'outils MSN Search Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - C:\Program Files\Microsoft Money\System\mnyviewer.dll O3 - Toolbar: Barre d'outils MSN Search - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll O3 - Toolbar: H&otbar - {74CC49F7-EB32-4A08-B204-948962A6E3DB} - C:\Program Files\HbTools\Bin\4.7.0.0\HbtHostIE.dll O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [Norman ZANDA] C:\NORMAN
vc\BIN\ZLH.EXE /LOAD /SPLASH O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\NeroCheck.exe O4 - HKLM\..\Run: [WorksFUD] C:\Program Files\Microsoft Works\wkfud.exe O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe O4 - HKLM\..\Run: [MoneyStartUp10.0] "C:\Program Files\Microsoft Money\System\Activation.exe" O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\Wanadoo\CnxMon.exe O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\TaskbarIcon.exe O4 - HKLM\..\Run: [Microsoft Midtown] spootty.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe" -osboot O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" O4 - HKLM\..\Run: [WeatherOnTray] C:\Program Files\HbTools\Bin\4.7.0.0\HbtWeatherOnTray.exe O4 - HKLM\..\Run: [HbTools] C:\Program Files\HbTools\Bin\4.7.0.0\HbtOEAddOn.exe O4 - HKLM\..\Run: [qexfueva] C:\WINDOWS\system32\dolxpnvm.exe O4 - HKLM\..\Run: [army fast coal soap] C:\Documents and Settings\All Users\Application Data\DOG JUMP ARMY FAST	heshim.exe O4 - HKLM\..\RunServices: [Microsoft Midtown] spootty.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Looney Tunes] C:\Program Files\Looney Tunes\Looney Tunes.exe O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c O4 - HKCU\..\Run: [Instant Access] rundll32.exe EGDACCESS_1069.dll,InstantAccess O4 - HKCU\..\Run: [Extra peak] C:\DOCUME~1\DELPHINE\APPLIC~1\DVDHOP~1\intra send two.exe O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart O4 - HKCU\..\Run: [MailSkinner] c:\program files\mailskinner\mailskinner.exe O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Booster Wanadoo.lnk = C:\Program Files\Booster Wanadoo\wanadoo_booster.exe O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE O4 - Global Startup: Rappels du Calendrier Microsoft Works.lnk = ? O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearch.exe O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\binesources\WebMenuImg.htm O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll/search.htm O8 - Extra context menu item: Afficher l'image non compressée - res://C:\Program Files\Booster Wanadoo\wanadoo_booster.exe/227 O8 - Extra context menu item: Afficher toutes les images non compressées - res://C:\Program Files\Booster Wanadoo\wanadoo_booster.exe/250 O9 - Extra button: ShopperReports - Compare travel rates - {946B3E9E-E21A-49c8-9F63-900533FAFE14} - C:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dll O9 - Extra button: ShopperReports - Compare product prices - {E77EDA01-3C56-4a96-8D08-02B42891C169} - C:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.wanadoo.fr (file missing) (HKCU) O16 - DPF: Interface Chat Voila - http://chat4.x-echo.com/version5/Applet/vchatsign.cab O16 - DPF: {01BE5BD7-B2DD-48B3-A759-59265A91E787} - http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1064_XP.cab O16 - DPF: {07C9CFC7-DE33-4A0C-9FFB-CDFBA843B157} - http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1063_XP.cab O16 - DPF: {0D1011B3-89C8-4F8E-8693-BB970E2E81E0} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1069_ASPIV4_XP.cab O16 - DPF: {0DA910BC-6919-489E-B584-D9A4AAC7B8DE} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1068_ASPIV4_XP.cab O16 - DPF: {201D3DA8-B495-4A3B-BEE8-6D8DDCCC5762} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1067_ASPIV4_XP.cab O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/03ca36600f3a647f6919/netzip/RdxIE601_fr.cab O16 - DPF: {624321F1-0581-49D8-99BD-2E952C2DF31B} - http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1063_ASPIV4_XP.cab O16 - DPF: {7DBFDA8E-D33B-11D4-9269-00600868E56E} (WWWInstall Class) - http://go.securelive.com/speed/WebInstall.dll O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab O16 - DPF: {95460ABD-946A-46FF-9F56-268718323EEE} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1068_XP.cab O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab O16 - DPF: {BA749BC1-143E-430D-B1DA-1D2AF67A3658} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1069_XP.cab O16 - DPF: {E114CD5B-17CE-4807-890E-7B1EDF9F2E5E} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1066_XP.cab O16 - DPF: {E19AB99F-AEC4-4B40-A5CA-F69D22522D77} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1065_ASPIV4_XP.cab O16 - DPF: {E24E8472-89B7-479F-8AD8-BBD7206A6A02} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1067_XP.cab O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - http://www.girafoto.fr/XUpload.ocx O16 - DPF: {EF4DCD99-D26B-44A4-BA77-CFDCC97E7291} - http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1062_XP.cab O16 - DPF: {F00F4763-7355-4725-82F7-0DA94A256D46} (IncrediMail) - http://www2.incredimail.com/contents/setup/downloader/imloader.cab O16 - DPF: {FA605711-8E72-46B2-AE49-BED11B2E729D} - http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1063_ASPIV4_XP.cab O16 - DPF: {FA83E942-B796-46DE-9155-1632ECC5473B} - http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1061_XP.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{E1A47A93-C109-4F8A-BAE1-DF2CF68FD9FB}: NameServer = 80.10.246.134 80.10.246.7 O18 - Protocol: bw+0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw+0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw-0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw-0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw00 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw00s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw10 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw10s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw20 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw20s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw30 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw30s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw40 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw40s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw50 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw50s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw60 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw60s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw70 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw70s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw80 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw80s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw90 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw90s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwa0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwa0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwb0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwb0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwc0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwc0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwd0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwd0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwe0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwe0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwf0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwf0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll O18 - Protocol: bwg0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwg0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwh0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwh0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwi0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwi0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwj0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwj0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwk0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwk0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwl0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwl0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwm0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwm0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwn0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwn0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwo0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwo0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwp0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwp0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwq0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwq0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwr0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwr0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bws0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bws0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwt0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwt0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwu0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwu0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwv0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwv0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bww0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bww0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwx0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwx0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwy0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwy0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwz0 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwz0s - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing) O18 - Protocol: offline-8876480 - {3244B804-EB30-4023-8625-DA463627A7E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe O23 - Service: Norman NJeeves - Unknown owner - C:\NORMAN
vc\BIN\NJEEVES.EXE O23 - Service: Norman ZANDA - Unknown owner - C:\Norman\NVC\BIN\Zanda.exe O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\NORMAN
vc\BIN
vcoas.exe O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman Data Defense Systems - C:\NORMAN
vc\BIN\NVCSCHED.EXE O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32
vsvc32.exe

Kristopher · Answer

Salut,Vide le contenu de ces dossiers :C:\Documents and Settings	on compte\Local Settings\TempC:\Documents and Settings	ous les autres comptes\Local Settings\TempC:\Windows\TempC:\Windows\Prefetch [supprime tout sauf le fichier nommé " layout.ini"]Télécharges, mets à jour et scannes ton PC avec Ad-Aware et SpyBot Search & Destroy :- lien Ad-Aware SE Personal: Ad-aware - lien SpyBot - Search & Destroy : Spybot Search & Destroy- Tu peux également télécharger le logiciel SmitfraudFix crée par les pros de ce forum :)http://siri.urz.free.fr/Fix/SmitfraudFix.zip- Exécute le, Double clic sur "Smitfraudfix.cmd", choisit l’option 1, il va générer un rapport.Copie et colle le sur le poste.EnsuiteFais cette manipulation :- Redémarre le PC en mode sans échec : tu tapotes sur la touche F8 de ton clavier (ou bien F5 selon la version de Windows) et tu choisis le mode sans échec)- Tu relances SmitfraudFix cette fois-ci en choisissant l'option 2 et tu réponds oui à tout.Colle le nouveau rapport de SmitfraudFix ensuite, ainsi que celui de HijackThis : https://www.01net.com/telecharger/windows/Securite/anti-spyware/fiches/29061.htmlBonne chance

cine · Answer

Bonjourtout d'abord merci de bien vouloir m'aider!en ce qui concerne ce que vous m'avez dit : pour télécharger le logiciel SmitfraudFix, ça me propse ouvrir ou enregistrer, ou dois-je trouver l'option 1 pouis apres l'option 2?mercicine

Kristopher · Answer

Bonsoir,- Tu enregistres le programme, sur ton bureau par exemple.- Tu dois ensuite le dézipper (avec un logiciel de décompression comme Winrar par exemple).- Double clic sur "Smitfraudfix.cmd", choisit l’option 1 ("Recherche"), il va générer un rapport.- Copie et colle ce rapport sur le poste.EnsuiteFais cette manipulation :- Redémarre le PC en mode sans échec : tu tapotes sur la touche F8 de ton clavier (ou bien F5 selon la version de Windows) et tu choisis le mode sans échec)- Tu relances SmitfraudFix cette fois-ci en choisissant l'option 2 et tu réponds oui à tout.Colle le nouveau rapport de SmitfraudFix ensuite, ainsi que celui de HijackThis : http://www.01net.com/telecharger/windows/Internet/internet_utlitaire/fiches/29061.htmlBon courage

cine · Answer

Bonjour,je vous envoie les 3 rapports, qu'en pensez vous?j'avous que je suis pas très rassurée de faire toutes ces manipulations mais il faut bien !merciCine1er rapport :SmitFraudFix v2.08 Rapport fait à  9:58:57,21 le 18/12/2005Executé à partir de C:\Documents and Settings\DELPHINE\Bureau\SmitfraudFix\SmitfraudFixOS: Microsoft Windows XP [version 5.1.2600] »»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\ »»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS »»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS\system »»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS\Web »»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS\system32 »»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\Documents and Settings\DELPHINE\Application Data »»»»»»»»»»»»»»»»»»»»»»»» Recherche Menu Démarrer »»»»»»»»»»»»»»»»»»»»»»»» Recherche Bureau »»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\Program Files  »»»»»»»»»»»»»»»»»»»»»»»» Recherche présence de clés corrompues »»»»»»»»»»»»»»»»»»»»»»»» Recherche éléments du bureau [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]"Source"="About:Home""SubscribedURL"="About:Home""FriendlyName"="Ma page d'accueil"  »»»»»»»»»»»»»»»»»»»»»»»» Recherche Sharedtaskscheduler [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Pr‚-chargeur Browseui""{8C7461EF-2B13-11d2-BE35-3078302C2030}"="D‚mon de cache des cat‚gories de composant" »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll »»»»»»»»»»»»»»»»»»»»»»»» Fin du rapport       2ème rapport :SmitFraudFix v2.08Rapport fait à 10:03:41,01 le 18/12/2005Executé à partir de C:\Documents and Settings\DELPHINE\Bureau\SmitfraudFix\SmitfraudFixOS: Microsoft Windows XP [version 5.1.2600]»»»»»»»»»»»»»»»»»»»»»»»» Arret des processus»»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés »»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre Nettoyage terminé. »»»»»»»»»»»»»»»»»»»»»»»» Fin du rapport3ème rappport (HijackThis) :Logfile of HijackThis v1.99.1Scan saved at 10:17:04, on 18/12/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exeC:\Norman\NVC\BIN\Zanda.exeC:\WINDOWS\System32
vsvc32.exeC:\WINDOWS\System32\svchost.exeC:\NORMAN
vc\BIN\NJEEVES.EXEC:\NORMAN
vc\BIN\NVCSCHED.EXEC:\WINDOWS\system32\wscntfy.exeC:\WINDOWS\SOUNDMAN.EXEC:\NORMAN
vc\BIN\ZLH.EXEC:\NORMAN
vc\BIN\NYMSE.EXEC:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exeC:\PROGRA~1\Wanadoo\CnxMon.exeC:\PROGRA~1\Wanadoo\TaskbarIcon.exeC:\WINDOWS\system32\spootty.exeC:\Program Files\QuickTime\qttask.exeC:\WINDOWS\System32\LVCOMSX.EXEC:\Program Files\Logitech\Video\LogiTray.exeC:\Program Files\Fichiers communs\Real\Update_OBealsched.exeC:\Program Files\MessengerPlus! 3\MsgPlus.exeC:\Program Files\HbTools\Bin\4.7.0.0\HbtWeatherOnTray.exeC:\Program Files\HbTools\Bin\4.7.0.0\HbtOEAddOn.exeC:\WINDOWS\system32\ctfmon.exeC:\WINDOWS\system32undll32.exeC:\program files\mailskinner\mailskinner.exec:\progra~1\intern~1\iexplore.exeC:\NORMAN
vc\BIN
vcoas.exeC:\Program Files\Booster Wanadoo\wanadoo_booster.exeC:\Program Files\MSN Messenger\msnmsgr.exeC:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exeC:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkcalrem.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Logitech\Video\FxSvr2.exeC:\NORMAN
vc\BIN\cclaw.exeC:\PROGRA~1\INCRED~1\bin\IMApp.exeC:\PROGRA~1\INCRED~1\bin\IncMail.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\HbTools\Bin\4.7.0.0\HbtSrv.exeC:\Program Files\Microsoft Money\System\urlmap.exeC:\Documents and Settings\DELPHINE\Local Settings\Temporary Internet Files\Content.IE5\IABCM5XG\HijackThis[1].exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.gupcqetlxrrzonab.org/BIU_ZGcox8S49jFKG/l8Pu3JI7ExPT/ttN8s0gaXGcWNJCQgWj9Twkr0oR4W8B8v.jspR1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = "C:\Program Files\Outlook Express\msimn.exe" //eml:C:\Documents and Settings\DELPHINE\Mes documents\cd titi\FW_ ah ah ouh aih aih aiah iah aih.emlR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = WanadooR1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:7180R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = ;*windowsupdate.microsoft.com;*windowsupdate.com;download.microsoft.com;codecs.microsoft.com;activex.microsoft.com;liveupdate.symantecliveupdate.com;liveupdate.symantec.com;services.wanadoo.fr;secure.wanadoo.fr;webgen.wanadoo.fr;images.wanadoo.fr;images2.wanadoo.fr;wanadoo.wha.com;wha.wanadoo.fr;pay.www.wanadoo.fr;www.wanadoo.fr;webmail*.wanadoo.fr;iapref.wanadoo.fr;wip2.wanadoo.fr;vip.voila.fr;maj.wanadoo.fr;qos.wanadoo.fr;guidejuniorscontroleparental.wanadoo.fr;wip2pro.wanadoo.fr;wpms.wanadoo.f;mobile.wanadoo.fr;wpms.wanadoo.fr;photos.wanadoo.fr;musicb.wanadoo.fr;wassup.wanadoo.frR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensR3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLLO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocxO2 - BHO: (no name) - {1776E9CF-7D47-A85A-0499-2D7CC9E22080} - C:\DOCUME~1\DELPHINE\APPLIC~1\helpregs\NurbDraw.exeO2 - BHO: ShprRprts - {2A8A997F-BB9F-48F6-AA2B-2762D50F9289} - C:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dllO2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dllO2 - BHO: HbTools - {74CC49F7-EB32-4A08-B204-948962A6E3DB} - C:\Program Files\HbTools\Bin\4.7.0.0\HbtHostIE.dllO2 - BHO: Barre d'outils MSN Search Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dllO2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - C:\Program Files\Microsoft Money\System\mnyviewer.dllO3 - Toolbar: Barre d'outils MSN Search - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dllO3 - Toolbar: H&otbar - {74CC49F7-EB32-4A08-B204-948962A6E3DB} - C:\Program Files\HbTools\Bin\4.7.0.0\HbtHostIE.dllO4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXEO4 - HKLM\..\Run: [Norman ZANDA] C:\NORMAN
vc\BIN\ZLH.EXE /LOAD /SPLASHO4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initializeO4 - HKLM\..\Run: [nwiz] nwiz.exe /installO4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\NeroCheck.exeO4 - HKLM\..\Run: [WorksFUD] C:\Program Files\Microsoft Works\wkfud.exeO4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsersO4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exeO4 - HKLM\..\Run: [MoneyStartUp10.0] "C:\Program Files\Microsoft Money\System\Activation.exe"O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\Wanadoo\CnxMon.exeO4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exeO4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\TaskbarIcon.exeO4 - HKLM\..\Run: [Microsoft Midtown] spootty.exeO4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottimeO4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXEO4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exeO4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exeO4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osbootO4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"O4 - HKLM\..\Run: [WeatherOnTray] C:\Program Files\HbTools\Bin\4.7.0.0\HbtWeatherOnTray.exeO4 - HKLM\..\Run: [HbTools] C:\Program Files\HbTools\Bin\4.7.0.0\HbtOEAddOn.exeO4 - HKLM\..\Run: [qexfueva] C:\WINDOWS\system32\dolxpnvm.exeO4 - HKLM\..\Run: [army fast coal soap] C:\Documents and Settings\All Users\Application Data\DOG JUMP ARMY FAST	heshim.exeO4 - HKLM\..\RunServices: [Microsoft Midtown] spootty.exeO4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exeO4 - HKCU\..\Run: [Looney Tunes] C:\Program Files\Looney Tunes\Looney Tunes.exeO4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" bootO4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exeO4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /cO4 - HKCU\..\Run: [Instant Access] rundll32.exe EGDACCESS_1072.dll,InstantAccessO4 - HKCU\..\Run: [Extra peak] C:\DOCUME~1\DELPHINE\APPLIC~1\DVDHOP~1\intra send two.exeO4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStartO4 - HKCU\..\Run: [MailSkinner] c:\program files\mailskinner\mailskinner.exeO4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /backgroundO4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exeO4 - Global Startup: Booster Wanadoo.lnk = C:\Program Files\Booster Wanadoo\wanadoo_booster.exeO4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exeO4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exeO4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXEO4 - Global Startup: Rappels du Calendrier Microsoft Works.lnk = ?O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearch.exeO8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\binesources\WebMenuImg.htmO8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll/search.htmO8 - Extra context menu item: Afficher l'image non compressée - res://C:\Program Files\Booster Wanadoo\wanadoo_booster.exe/227O8 - Extra context menu item: Afficher toutes les images non compressées - res://C:\Program Files\Booster Wanadoo\wanadoo_booster.exe/250O9 - Extra button: ShopperReports - Compare travel rates - {946B3E9E-E21A-49c8-9F63-900533FAFE14} - C:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dllO9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dllO9 - Extra button: ShopperReports - Compare product prices - {E77EDA01-3C56-4a96-8D08-02B42891C169} - C:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dllO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.wanadoo.fr (file missing) (HKCU)O16 - DPF: Interface Chat Voila - http://chat4.x-echo.com/version5/Applet/vchatsign.cabO16 - DPF: {01BE5BD7-B2DD-48B3-A759-59265A91E787} - http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1064_XP.cabO16 - DPF: {04CCFF26-7D52-4E42-BF6A-F8ECE0896EB7} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1071_XP.cabO16 - DPF: {07C9CFC7-DE33-4A0C-9FFB-CDFBA843B157} - http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1063_XP.cabO16 - DPF: {0D1011B3-89C8-4F8E-8693-BB970E2E81E0} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1069_ASPIV4_XP.cabO16 - DPF: {0DA910BC-6919-489E-B584-D9A4AAC7B8DE} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1068_ASPIV4_XP.cabO16 - DPF: {201D3DA8-B495-4A3B-BEE8-6D8DDCCC5762} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1067_ASPIV4_XP.cabO16 - DPF: {3616F4B5-F6AD-4E67-966A-C218673648A0} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1070_ASPIV4_XP.cabO16 - DPF: {3DAD912E-D2B9-4323-B7C9-7F2C5CC0C57B} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1070_XP.cabO16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/03ca36600f3a647f6919/netzip/RdxIE601_fr.cabO16 - DPF: {624321F1-0581-49D8-99BD-2E952C2DF31B} - http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1063_ASPIV4_XP.cabO16 - DPF: {7DBFDA8E-D33B-11D4-9269-00600868E56E} (WWWInstall Class) - http://go.securelive.com/speed/WebInstall.dllO16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cabO16 - DPF: {95460ABD-946A-46FF-9F56-268718323EEE} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1068_XP.cabO16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cabO16 - DPF: {BA749BC1-143E-430D-B1DA-1D2AF67A3658} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1069_XP.cabO16 - DPF: {E114CD5B-17CE-4807-890E-7B1EDF9F2E5E} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1066_XP.cabO16 - DPF: {E19AB99F-AEC4-4B40-A5CA-F69D22522D77} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1065_ASPIV4_XP.cabO16 - DPF: {E24E8472-89B7-479F-8AD8-BBD7206A6A02} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1067_XP.cabO16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - http://www.girafoto.fr/XUpload.ocxO16 - DPF: {EF4DCD99-D26B-44A4-BA77-CFDCC97E7291} - http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1062_XP.cabO16 - DPF: {EFB22865-F3BC-4309-ADFA-C8E078A7F762} (SysWebTelecomInt Class) - http://www.sponsoradulto.com/cab/14/fr/SysWebTelecomInt.cabO16 - DPF: {EFB23983-5803-4914-ADA3-C0EA2CFBDC37} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1072_XP.cabO16 - DPF: {F00F4763-7355-4725-82F7-0DA94A256D46} (IncrediMail) - http://www2.incredimail.com/contents/setup/downloader/imloader.cabO16 - DPF: {FA605711-8E72-46B2-AE49-BED11B2E729D} - http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1063_ASPIV4_XP.cabO16 - DPF: {FA83E942-B796-46DE-9155-1632ECC5473B} - http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1061_XP.cabO17 - HKLM\System\CCS\Services\Tcpip\..\{E1A47A93-C109-4F8A-BAE1-DF2CF68FD9FB}: NameServer = 80.10.246.5 80.10.246.136O18 - Protocol: bw+0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw+0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw-0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw-0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw00 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw00s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw10 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw10s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw20 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw20s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw30 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw30s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw40 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw40s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw50 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw50s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw60 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw60s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw70 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw70s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw80 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw80s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw90 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw90s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwa0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwa0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwb0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwb0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwc0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwc0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwd0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwd0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwe0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwe0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwf0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwf0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dllO18 - Protocol: bwg0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwg0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwh0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwh0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwi0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwi0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwj0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwj0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwk0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwk0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwl0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwl0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwm0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwm0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwn0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwn0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwo0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwo0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwp0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwp0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwq0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwq0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwr0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwr0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bws0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bws0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwt0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwt0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwu0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwu0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwv0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwv0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bww0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bww0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwx0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwx0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwy0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwy0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwz0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwz0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)O18 - Protocol: offline-8876480 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exeO23 - Service: Norman NJeeves - Unknown owner - C:\NORMAN
vc\BIN\NJEEVES.EXEO23 - Service: Norman ZANDA - Unknown owner - C:\Norman\NVC\BIN\Zanda.exeO23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\NORMAN
vc\BIN
vcoas.exeO23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman Data Defense Systems - C:\NORMAN
vc\BIN\NVCSCHED.EXEO23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32
vsvc32.exe   MERCI

Utilisateur anonyme · Answer

SalutN ai pas peur, on sait quand meme ce qu on fait lolTélécharge lopxp ici: http://pageperso.aol.fr/balltrap34/lopxp.zip (Merci Moe31 et Balltrap34)2) dezippe le (clic droit dessus > extraire tout) et lance lopxp.bat le bloc note va s'ouvrir, copie et colle le contenu iciA+

Cine · Answer

Voici le rapport lopxp que dois-je faire maintenant? cine Rapport fait à 13:16:50,95 le 18/12/2005 Le volume dans le lecteur C n'a pas de nom. Le num‚ro de s‚rie du volume est C877-8090 R‚pertoire de C:\Documents and Settings\All Users\Application Data 14/12/2005 20:36 Spybot - Search & Destroy 18/10/2005 17:03 Messenger Plus! 05/09/2005 20:16 DOG JUMP ARMY FAST 02/09/2005 18:44 MSN Search Toolbar 22/09/2003 11:24 62 desktop.ini 22/09/2003 11:24 Microsoft 22/09/2003 11:24 .. 22/09/2003 11:24 . 1 fichier(s) 62 octets 7 R‚p(s) 53955407872 octets libres Le volume dans le lecteur C n'a pas de nom. Le num‚ro de s‚rie du volume est C877-8090 R‚pertoire de C:\Documents and Settings\Default User\Application Data 22/09/2003 11:24 62 desktop.ini 22/09/2003 11:24 .. 22/09/2003 11:24 Microsoft 22/09/2003 11:24 . 1 fichier(s) 62 octets 3 R‚p(s) 53955403776 octets libres Le volume dans le lecteur C n'a pas de nom. Le num‚ro de s‚rie du volume est C877-8090 R‚pertoire de C:\Documents and Settings\DELPHINE\Application Data 18/12/2005 13:12 98 ieproxy.bak 14/11/2005 21:52 Lavasoft 12/10/2005 06:24 helpregs 05/09/2005 20:52 ShopperReports 05/09/2005 20:51 HbTools 05/09/2005 20:15 dvdhopefive 02/09/2005 18:49 MSN Search Toolbar 03/03/2005 21:33 Real 13/01/2005 17:03 FotoWire 21/01/2004 14:54 Kazaa Lite 19/12/2003 17:46 Looney Tunes 17/12/2003 14:45 The Lion King 23/10/2003 19:09 Help 04/10/2003 18:11 64752 GDIPFONTCACHEV1.DAT 01/10/2003 12:25 Microsoft Web Folders 24/09/2003 17:41 Macromedia 24/09/2003 16:07 ArcSoft 24/09/2003 16:07 EPSON 24/09/2003 13:03 InterVideo 24/09/2003 12:42 Adobe 24/09/2003 12:42 InterTrust 22/09/2003 10:41 Identities 22/09/2003 10:41 62 desktop.ini 22/09/2003 10:41 .. 22/09/2003 10:41 . 22/09/2003 10:41 Microsoft 3 fichier(s) 64912 octets 23 R‚p(s) 53955403776 octets libres ****************************************** Recherche des taches planifiées dans C:\WINDOWS asks Le volume dans le lecteur C n'a pas de nom. Le num‚ro de s‚rie du volume est C877-8090 R‚pertoire de C:\WINDOWS\Tasks 12/10/2005 06:24 276 A2ED3EB2918AAEDE.job 22/09/2003 10:35 6 SA.DAT 22/09/2003 10:33 65 desktop.ini 22/09/2003 10:33 .. 22/09/2003 10:33 . 3 fichier(s) 347 octets 2 R‚p(s) 53ÿ955ÿ403ÿ776 octets libres ****************************************** Recherche dans Program files Le dossier C:\Program Files\C2Media n'existe pas *************** Fin du rapport ****************

Cine · Answer

Oui, j'ai essayé la restauration mais malheureusement ça n'a rien fait. Merci quand même.

Utilisateur anonyme · Answer

Bonjour, Imprime, ou enregistre la manip dans un fichier dans le bloc notes pour être sur ne rien oublier et de tout faire dans l'ordre. 1/Telecharge ceci: Clean Up 40:http://pageperso.aol.fr/balltrap34/CleanUp40.exe -aide en image:(merci à Balltrap34). http://pageperso.aol.fr/balltrap34/democleanup.htmDéconnecte toi d'Internet et ferme tout les programmes en cours.Dans ajout/suppression de programme, desinstalle cecimailskinnerEgalement si tu as ceci:HbToolsShopperReports Redémarre en mode sans échec Redémarre le pc, laisse passer l'écran du bios, puis tapote sur la touche F8 avant qu'apparaisse l'écran de chargement de windows. Choisis le mode sans échec dans les options et valide avec entrée. (Si F8 ne marche pas, essai F5) Rend visible les fichiers cachés et système panneau de configuration > options des dossiers > onglet affichage Cocher la case devant " afficher les fichiers et dossiers cachés " Décocher la case devant " masquer les extensions des fichiers dont le type est connu" Décocher la case devant " masquer les fichiers protégés du système" clic sur [Appliquer] puis sur [ok] pour valider -_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_  Lance hijackthis et clic sur [do a system scan only] cocher la case au début des lignes suivantes:  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.gupcqetlxrrzonab.org/BIU_ZGcox8S49jFKG/l8Pu3JI7ExPT/ttN8s0gaXGcWNJCQg Wj9Twkr0oR4W8B8v.jsp Ne touche pas a celle ci si c est toi qui l a mis:R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = "C:\Program Files\Outlook Express\msimn.exe" //eml:C:\Documents and Settings\DELPHINE\Mes documents\cd titi\FW_ ah ah ouh aih aih aiah iah aih.eml R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = ;*windowsupdate.microsoft.com;*windowsupdate.com;download.microsoft.com;codecs.m icrosoft.com;activex.microsoft.com;liveupdate.symantecliveupdate.com;liveupdate. symantec.com;services.wanadoo.fr;secure.wanadoo.fr;webgen.wanadoo.fr;images.wana doo.fr;images2.wanadoo.fr;wanadoo.wha.com;wha.wanadoo.fr;pay.www.wanadoo.fr;www. wanadoo.fr;webmail*.wanadoo.fr;iapref.wanadoo.fr;wip2.wanadoo.fr;vip.voila.fr;ma j.wanadoo.fr;qos.wanadoo.fr;guidejuniorscontroleparental.wanadoo.fr;wip2pro.wana doo.fr;wpms.wanadoo.f;mobile.wanadoo.fr;wpms.wanadoo.fr;photos.wanadoo.fr;musicb .wanadoo.fr;wassup.wanadoo.frO2 - BHO: (no name) - {1776E9CF-7D47-A85A-0499-2D7CC9E22080} - C:\DOCUME~1\DELPHINE\APPLIC~1\helpregs\NurbDraw.exe O2 - BHO: ShprRprts - {2A8A997F-BB9F-48F6-AA2B-2762D50F9289} - C:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll O2 - BHO: HbTools - {74CC49F7-EB32-4A08-B204-948962A6E3DB} - C:\Program Files\HbTools\Bin\4.7.0.0\HbtHostIE.dll O3 - Toolbar: H&otbar - {74CC49F7-EB32-4A08-B204-948962A6E3DB} - C:\Program Files\HbTools\Bin\4.7.0.0\HbtHostIE.dll O4 - HKLM\..\Run: [Microsoft Midtown] spootty.exe O4 - HKLM\..\Run: [WeatherOnTray] C:\Program Files\HbTools\Bin\4.7.0.0\HbtWeatherOnTray.exe O4 - HKLM\..\Run: [HbTools] C:\Program Files\HbTools\Bin\4.7.0.0\HbtOEAddOn.exe O4 - HKLM\..\Run: [qexfueva] C:\WINDOWS\system32\dolxpnvm.exe O4 - HKLM\..\Run: [army fast coal soap] C:\Documents and Settings\All Users\Application Data\DOG JUMP ARMY FAST	heshim.exe O4 - HKLM\..\RunServices: [Microsoft Midtown] spootty.exe O4 - HKCU\..\Run: [Instant Access] rundll32.exe EGDACCESS_1072.dll,InstantAccess O4 - HKCU\..\Run: [Extra peak] C:\DOCUME~1\DELPHINE\APPLIC~1\DVDHOP~1\intra send two.exe O4 - HKCU\..\Run: [MailSkinner] c:\program files\mailskinner\mailskinner.exe O9 - Extra button: ShopperReports - Compare travel rates - {946B3E9E-E21A-49c8-9F63-900533FAFE14} - C:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll O9 - Extra button: ShopperReports - Compare product prices - {E77EDA01-3C56-4a96-8D08-02B42891C169} - C:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll O16 - DPF: {01BE5BD7-B2DD-48B3-A759-59265A91E787} - http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1064_XP.cab O16 - DPF: {04CCFF26-7D52-4E42-BF6A-F8ECE0896EB7} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1071_XP.cab O16 - DPF: {07C9CFC7-DE33-4A0C-9FFB-CDFBA843B157} - http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1063_XP.cab O16 - DPF: {0D1011B3-89C8-4F8E-8693-BB970E2E81E0} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1069_ASPIV4_XP.cab O16 - DPF: {0DA910BC-6919-489E-B584-D9A4AAC7B8DE} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1068_ASPIV4_XP.cab O16 - DPF: {201D3DA8-B495-4A3B-BEE8-6D8DDCCC5762} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1067_ASPIV4_XP.cab O16 - DPF: {3616F4B5-F6AD-4E67-966A-C218673648A0} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1070_ASPIV4_XP.cab O16 - DPF: {3DAD912E-D2B9-4323-B7C9-7F2C5CC0C57B} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1070_XP.cab O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/03ca36600f3a647f6919/netzip/RdxIE601_fr.cab O16 - DPF: {624321F1-0581-49D8-99BD-2E952C2DF31B} - http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1063_ASPIV4_XP.cab O16 - DPF: {7DBFDA8E-D33B-11D4-9269-00600868E56E} (WWWInstall Class) - http://go.securelive.com/speed/WebInstall.dll O16 - DPF: {95460ABD-946A-46FF-9F56-268718323EEE} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1068_XP.cab O16 - DPF: {BA749BC1-143E-430D-B1DA-1D2AF67A3658} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1069_XP.cab O16 - DPF: {E114CD5B-17CE-4807-890E-7B1EDF9F2E5E} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1066_XP.cab O16 - DPF: {E19AB99F-AEC4-4B40-A5CA-F69D22522D77} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1065_ASPIV4_XP.cab O16 - DPF: {E24E8472-89B7-479F-8AD8-BBD7206A6A02} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1067_XP.cab O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - http://www.girafoto.fr/XUpload.ocx O16 - DPF: {EF4DCD99-D26B-44A4-BA77-CFDCC97E7291} - http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1062_XP.cab O16 - DPF: {EFB22865-F3BC-4309-ADFA-C8E078A7F762} (SysWebTelecomInt Class) - http://www.sponsoradulto.com/cab/14/fr/SysWebTelecomInt.cab O16 - DPF: {EFB23983-5803-4914-ADA3-C0EA2CFBDC37} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1072_XP.cab O16 - DPF: {FA605711-8E72-46B2-AE49-BED11B2E729D} - http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1063_ASPIV4_XP.cab O16 - DPF: {FA83E942-B796-46DE-9155-1632ECC5473B} - http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1061_XP.cab valider en cliquant sur le bouton [fix checked] -_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_  Recherche et supprime ces dossiers: Supprimer les fichiers en suivant le chemin des fichiers infectés si possible, plutot que d'utiliser la fonction "Rechercher" S'ils sont présents, supprime: C:\Documents and Settings\DELPHINE\Application Data \helpregsC:\Program Files\HbToolsC:\WINDOWS\system32\dolxpnvm.exe C:\Documents and Settings\All Users\Application Data\DOG JUMP ARMY FASTspootty.exe C:\Documents and Settings\DELPHINE\Application Data\dvdhopefive c:\program files\mailskinnerC:\Program Files\ShopperReports-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_ Ensuite fais Démarrer > exécuter et tape cmd puis valide avec ok dans la fenêtre qui va s'ouvrir, copie et colle ceci:del /a C:\WINDOWS	asks\A2ED3EB2918AAEDE.job et valide en appuyant sur entrée -_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_ Ensuite, très important: :: Supprimer les fichiers temporaires :: Exécute cleanup40. -_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_ Redémarre normalement et reposte un Hijackthis sur le poste… Précises moi ou en sont tes soucis…A+

Cine · Answer

Bonsoir,je pense avoir bien fait la dernière manipulation demandée, en tout cas je l'espère !Que dois-je faire maintenant ?Voici le rapport :Logfile of HijackThis v1.99.1Scan saved at 19:21:19, on 18/12/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exeC:\Norman\NVC\BIN\Zanda.exeC:\WINDOWS\System32
vsvc32.exeC:\WINDOWS\System32\svchost.exeC:\NORMAN
vc\BIN\NJEEVES.EXEC:\NORMAN
vc\BIN\NVCSCHED.EXEC:\WINDOWS\system32\wscntfy.exeC:\WINDOWS\SOUNDMAN.EXEC:\NORMAN
vc\BIN\ZLH.EXEC:\NORMAN
vc\BIN\NYMSE.EXEC:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exeC:\PROGRA~1\Wanadoo\CnxMon.exeC:\PROGRA~1\Wanadoo\TaskbarIcon.exeC:\Program Files\QuickTime\qttask.exeC:\WINDOWS\System32\LVCOMSX.EXEC:\Program Files\Logitech\Video\LogiTray.exeC:\Program Files\Fichiers communs\Real\Update_OBealsched.exeC:\Program Files\MessengerPlus! 3\MsgPlus.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\Booster Wanadoo\wanadoo_booster.exeC:\Program Files\MSN Messenger\msnmsgr.exeC:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exeC:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkcalrem.exeC:\NORMAN
vc\BIN
vcoas.exeC:\WINDOWS\system32\wuauclt.exeC:\NORMAN
vc\BIN\cclaw.exeC:\PROGRA~1\INCRED~1\bin\IMApp.exeC:\Program Files\Logitech\Video\FxSvr2.exeC:\Documents and Settings\DELPHINE\Bureau\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = "C:\Program Files\Outlook Express\msimn.exe" //eml:C:\Documents and Settings\DELPHINE\Mes documents\cd titi\FW_ ah ah ouh aih aih aiah iah aih.emlR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = WanadooR1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:7180R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensR3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLLO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocxO2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dllO2 - BHO: Barre d'outils MSN Search Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dllO2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - C:\Program Files\Microsoft Money\System\mnyviewer.dllO3 - Toolbar: Barre d'outils MSN Search - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dllO4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXEO4 - HKLM\..\Run: [Norman ZANDA] C:\NORMAN
vc\BIN\ZLH.EXE /LOAD /SPLASHO4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initializeO4 - HKLM\..\Run: [nwiz] nwiz.exe /installO4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\NeroCheck.exeO4 - HKLM\..\Run: [WorksFUD] C:\Program Files\Microsoft Works\wkfud.exeO4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsersO4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exeO4 - HKLM\..\Run: [MoneyStartUp10.0] "C:\Program Files\Microsoft Money\System\Activation.exe"O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\Wanadoo\CnxMon.exeO4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exeO4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\TaskbarIcon.exeO4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottimeO4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXEO4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exeO4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exeO4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osbootO4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exeO4 - HKCU\..\Run: [Looney Tunes] C:\Program Files\Looney Tunes\Looney Tunes.exeO4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" bootO4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exeO4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /cO4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStartO4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /backgroundO4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exeO4 - Global Startup: Booster Wanadoo.lnk = C:\Program Files\Booster Wanadoo\wanadoo_booster.exeO4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exeO4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exeO4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXEO4 - Global Startup: Rappels du Calendrier Microsoft Works.lnk = ?O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearch.exeO8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\binesources\WebMenuImg.htmO8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll/search.htmO8 - Extra context menu item: Afficher l'image non compressée - res://C:\Program Files\Booster Wanadoo\wanadoo_booster.exe/227O8 - Extra context menu item: Afficher toutes les images non compressées - res://C:\Program Files\Booster Wanadoo\wanadoo_booster.exe/250O9 - Extra button: ShopperReports - Compare travel rates - {946B3E9E-E21A-49c8-9F63-900533FAFE14} - C:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll (file missing)O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dllO9 - Extra button: ShopperReports - Compare product prices - {E77EDA01-3C56-4a96-8D08-02B42891C169} - C:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll (file missing)O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.wanadoo.fr (file missing) (HKCU)O16 - DPF: Interface Chat Voila - http://chat4.x-echo.com/version5/Applet/vchatsign.cabO16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cabO16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cabO16 - DPF: {F00F4763-7355-4725-82F7-0DA94A256D46} (IncrediMail) - http://www2.incredimail.com/contents/setup/downloader/imloader.cabO18 - Protocol: bw+0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw+0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw-0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw-0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw00 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw00s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw10 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw10s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw20 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw20s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw30 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw30s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw40 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw40s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw50 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw50s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw60 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw60s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw70 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw70s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw80 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw80s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw90 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw90s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwa0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwa0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwb0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwb0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwc0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwc0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwd0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwd0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwe0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwe0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwf0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwf0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dllO18 - Protocol: bwg0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwg0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwh0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwh0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwi0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwi0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwj0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwj0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwk0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwk0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwl0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwl0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwm0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwm0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwn0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwn0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwo0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwo0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwp0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwp0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwq0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwq0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwr0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwr0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bws0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bws0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwt0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwt0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwu0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwu0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwv0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwv0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bww0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bww0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwx0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwx0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwy0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwy0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwz0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwz0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)O18 - Protocol: offline-8876480 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exeO23 - Service: Norman NJeeves - Unknown owner - C:\NORMAN
vc\BIN\NJEEVES.EXEO23 - Service: Norman ZANDA - Unknown owner - C:\Norman\NVC\BIN\Zanda.exeO23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\NORMAN
vc\BIN
vcoas.exeO23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman Data Defense Systems - C:\NORMAN
vc\BIN\NVCSCHED.EXEO23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32
vsvc32.exe

Utilisateur anonyme · Answer

salufixe caO9 - Extra button: ShopperReports - Compare travel rates - {946B3E9E-E21A-49c8-9F63-900533FAFE14} - C:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll (file missing) O9 - Extra button: ShopperReports - Compare product prices - {E77EDA01-3C56-4a96-8D08-02B42891C169} - C:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll (file missing)supprimeC:\Program Files\ShopperReportsqqun prendra la suite...Bye

Cine · Answer

Bonjour,j'ai supprimer les 2 dernières choses.dois-je faire la manipulation inverse de ça : Rend visible les fichiers cachés et systèmepanneau de configuration > options des dossiers > onglet affichageCocher la case devant " afficher les fichiers et dossiers cachés "Décocher la case devant " masquer les extensions des fichiers dont le type est connu"Décocher la case devant " masquer les fichiers protégés du système"clic sur [Appliquer] puis sur [ok] pour validerMERCICineLogfile of HijackThis v1.99.1Scan saved at 11:21:54, on 19/12/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exeC:\Norman\NVC\BIN\Zanda.exeC:\WINDOWS\System32
vsvc32.exeC:\WINDOWS\System32\svchost.exeC:\NORMAN
vc\BIN\NJEEVES.EXEC:\NORMAN
vc\BIN\NVCSCHED.EXEC:\WINDOWS\system32\wscntfy.exeC:\WINDOWS\SOUNDMAN.EXEC:\NORMAN
vc\BIN\ZLH.EXEC:\NORMAN
vc\BIN\NYMSE.EXEC:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exeC:\PROGRA~1\Wanadoo\CnxMon.exeC:\PROGRA~1\Wanadoo\TaskbarIcon.exeC:\Program Files\QuickTime\qttask.exeC:\WINDOWS\System32\LVCOMSX.EXEC:\Program Files\Logitech\Video\LogiTray.exeC:\Program Files\Fichiers communs\Real\Update_OBealsched.exeC:\Program Files\MessengerPlus! 3\MsgPlus.exeC:\WINDOWS\system32\ctfmon.exeC:\WINDOWS\system32undll32.exeC:\Program Files\Booster Wanadoo\wanadoo_booster.exeC:\Program Files\MSN Messenger\msnmsgr.exeC:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exeC:\NORMAN
vc\BIN
vcoas.exeC:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkcalrem.exeC:\WINDOWS\system32\wuauclt.exeC:\NORMAN
vc\BIN\cclaw.exeC:\Program Files\Logitech\Video\FxSvr2.exeC:\PROGRA~1\INCRED~1\bin\IMApp.exeC:\Documents and Settings\DELPHINE\Bureau\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = "C:\Program Files\Outlook Express\msimn.exe" //eml:C:\Documents and Settings\DELPHINE\Mes documents\cd titi\FW_ ah ah ouh aih aih aiah iah aih.emlR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = WanadooR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensR3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLLO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocxO2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dllO2 - BHO: Barre d'outils MSN Search Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dllO2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - C:\Program Files\Microsoft Money\System\mnyviewer.dllO3 - Toolbar: Barre d'outils MSN Search - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dllO4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXEO4 - HKLM\..\Run: [Norman ZANDA] C:\NORMAN
vc\BIN\ZLH.EXE /LOAD /SPLASHO4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initializeO4 - HKLM\..\Run: [nwiz] nwiz.exe /installO4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\NeroCheck.exeO4 - HKLM\..\Run: [WorksFUD] C:\Program Files\Microsoft Works\wkfud.exeO4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsersO4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exeO4 - HKLM\..\Run: [MoneyStartUp10.0] "C:\Program Files\Microsoft Money\System\Activation.exe"O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\Wanadoo\CnxMon.exeO4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exeO4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\TaskbarIcon.exeO4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottimeO4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXEO4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exeO4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exeO4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osbootO4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exeO4 - HKCU\..\Run: [Looney Tunes] C:\Program Files\Looney Tunes\Looney Tunes.exeO4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" bootO4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exeO4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /cO4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStartO4 - HKCU\..\Run: [Instant Access] rundll32.exe EGDACCESS_1072.dll,InstantAccessO4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /backgroundO4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exeO4 - Global Startup: Booster Wanadoo.lnk = C:\Program Files\Booster Wanadoo\wanadoo_booster.exeO4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exeO4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exeO4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXEO4 - Global Startup: Rappels du Calendrier Microsoft Works.lnk = ?O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearch.exeO8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\binesources\WebMenuImg.htmO8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll/search.htmO9 - Extra button: ShopperReports - Compare travel rates - {946B3E9E-E21A-49c8-9F63-900533FAFE14} - C:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll (file missing)O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dllO9 - Extra button: ShopperReports - Compare product prices - {E77EDA01-3C56-4a96-8D08-02B42891C169} - C:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll (file missing)O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.wanadoo.fr (file missing) (HKCU)O16 - DPF: Interface Chat Voila - http://chat4.x-echo.com/version5/Applet/vchatsign.cabO16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cabO16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cabO16 - DPF: {EFB23983-5803-4914-ADA3-C0EA2CFBDC37} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1072_XP.cabO16 - DPF: {F00F4763-7355-4725-82F7-0DA94A256D46} (IncrediMail) - http://www2.incredimail.com/contents/setup/downloader/imloader.cabO18 - Protocol: bw+0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw+0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw-0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw-0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw00 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw00s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw10 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw10s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw20 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw20s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw30 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw30s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw40 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw40s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw50 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw50s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw60 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw60s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw70 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw70s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw80 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw80s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw90 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw90s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwa0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwa0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwb0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwb0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwc0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwc0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwd0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwd0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwe0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwe0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwf0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwf0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dllO18 - Protocol: bwg0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwg0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwh0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwh0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwi0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwi0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwj0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwj0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwk0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwk0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwl0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwl0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwm0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwm0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwn0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwn0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwo0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwo0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwp0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwp0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwq0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwq0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwr0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwr0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bws0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bws0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwt0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwt0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwu0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwu0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwv0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwv0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bww0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bww0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwx0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwx0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwy0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwy0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwz0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwz0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)O18 - Protocol: offline-8876480 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exeO23 - Service: Norman NJeeves - Unknown owner - C:\NORMAN
vc\BIN\NJEEVES.EXEO23 - Service: Norman ZANDA - Unknown owner - C:\Norman\NVC\BIN\Zanda.exeO23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\NORMAN
vc\BIN
vcoas.exeO23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman Data Defense Systems - C:\NORMAN
vc\BIN\NVCSCHED.EXEO23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32
vsvc32.exe

Utilisateur anonyme · Answer

salutil reste ceci a fixerO4 - HKCU\..\Run: [Instant Access] rundll32.exe EGDACCESS_1072.dll,InstantAccess  O9 - Extra button: ShopperReports - Compare travel rates - O9 - Extra button: ShopperReports - Compare product prices - {E77EDA01-3C56-4a96-8D08-02B42891C169} - C:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll (file missing) O16 - DPF: {EFB23983-5803-4914-ADA3-C0EA2CFBDC37} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1072_XP.cab +

Cine · Answer

Bonjourça va bien?je viens de faire la suite, que dois-je faire maintenant ?MERCICineLogfile of HijackThis v1.99.1Scan saved at 17:19:32, on 20/12/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exeC:\WINDOWS\Explorer.EXEC:\Norman\NVC\BIN\Zanda.exeC:\WINDOWS\System32
vsvc32.exeC:\WINDOWS\System32\svchost.exeC:\NORMAN
vc\BIN\NJEEVES.EXEC:\NORMAN
vc\BIN\NVCSCHED.EXEC:\WINDOWS\system32\wscntfy.exeC:\WINDOWS\SOUNDMAN.EXEC:\NORMAN
vc\BIN\ZLH.EXEC:\NORMAN
vc\BIN\NYMSE.EXEC:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exeC:\PROGRA~1\Wanadoo\CnxMon.exeC:\PROGRA~1\Wanadoo\TaskbarIcon.exeC:\Program Files\QuickTime\qttask.exeC:\WINDOWS\System32\LVCOMSX.EXEC:\Program Files\Logitech\Video\LogiTray.exeC:\Program Files\Fichiers communs\Real\Update_OBealsched.exeC:\Program Files\MessengerPlus! 3\MsgPlus.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\MSN Messenger\msnmsgr.exeC:\Program Files\Booster Wanadoo\wanadoo_booster.exeC:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exeC:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkcalrem.exeC:\NORMAN
vc\BIN
vcoas.exeC:\PROGRA~1\INCRED~1\bin\IMApp.exeC:\WINDOWS\system32\wuauclt.exeC:\Program Files\Logitech\Video\FxSvr2.exeC:\NORMAN
vc\BIN\cclaw.exeC:\PROGRA~1\INCRED~1\bin\IncMail.exeC:\Documents and Settings\DELPHINE\Bureau\HijackThis.exeR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wanadoo.fr/R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = "C:\Program Files\Outlook Express\msimn.exe" //eml:C:\Documents and Settings\DELPHINE\Mes documents\cd titi\FW_ ah ah ouh aih aih aiah iah aih.emlR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = WanadooR1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:7180R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensR3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLLO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocxO2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dllO2 - BHO: Barre d'outils MSN Search Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dllO2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - C:\Program Files\Microsoft Money\System\mnyviewer.dllO3 - Toolbar: Barre d'outils MSN Search - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dllO4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXEO4 - HKLM\..\Run: [Norman ZANDA] C:\NORMAN
vc\BIN\ZLH.EXE /LOAD /SPLASHO4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initializeO4 - HKLM\..\Run: [nwiz] nwiz.exe /installO4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\NeroCheck.exeO4 - HKLM\..\Run: [WorksFUD] C:\Program Files\Microsoft Works\wkfud.exeO4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsersO4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exeO4 - HKLM\..\Run: [MoneyStartUp10.0] "C:\Program Files\Microsoft Money\System\Activation.exe"O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\Wanadoo\CnxMon.exeO4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exeO4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\TaskbarIcon.exeO4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottimeO4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXEO4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exeO4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exeO4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osbootO4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exeO4 - HKCU\..\Run: [Looney Tunes] C:\Program Files\Looney Tunes\Looney Tunes.exeO4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" bootO4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exeO4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /cO4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStartO4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /backgroundO4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exeO4 - Global Startup: Booster Wanadoo.lnk = C:\Program Files\Booster Wanadoo\wanadoo_booster.exeO4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exeO4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exeO4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXEO4 - Global Startup: Rappels du Calendrier Microsoft Works.lnk = ?O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearch.exeO8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\binesources\WebMenuImg.htmO8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll/search.htmO8 - Extra context menu item: Afficher l'image non compressée - res://C:\Program Files\Booster Wanadoo\wanadoo_booster.exe/227O8 - Extra context menu item: Afficher toutes les images non compressées - res://C:\Program Files\Booster Wanadoo\wanadoo_booster.exe/250O9 - Extra button: ShopperReports - Compare travel rates - {946B3E9E-E21A-49c8-9F63-900533FAFE14} - C:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll (file missing)O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dllO9 - Extra button: ShopperReports - Compare product prices - {E77EDA01-3C56-4a96-8D08-02B42891C169} - C:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll (file missing)O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.wanadoo.fr (file missing) (HKCU)O16 - DPF: Interface Chat Voila - http://chat4.x-echo.com/version5/Applet/vchatsign.cabO16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cabO16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cabO16 - DPF: {F00F4763-7355-4725-82F7-0DA94A256D46} (IncrediMail) - http://www2.incredimail.com/contents/setup/downloader/imloader.cabO17 - HKLM\System\CCS\Services\Tcpip\..\{E1A47A93-C109-4F8A-BAE1-DF2CF68FD9FB}: NameServer = 80.10.246.5 80.10.246.136O18 - Protocol: bw+0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw+0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw-0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw-0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw00 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw00s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw10 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw10s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw20 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw20s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw30 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw30s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw40 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw40s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw50 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw50s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw60 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw60s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw70 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw70s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw80 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw80s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw90 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw90s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwa0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwa0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwb0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwb0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwc0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwc0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwd0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwd0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwe0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwe0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwf0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwf0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dllO18 - Protocol: bwg0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwg0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwh0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwh0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwi0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwi0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwj0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwj0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwk0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwk0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwl0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwl0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwm0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwm0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwn0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwn0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwo0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwo0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwp0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwp0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwq0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwq0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwr0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwr0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bws0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bws0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwt0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwt0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwu0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwu0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwv0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwv0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bww0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bww0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwx0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwx0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwy0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwy0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwz0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwz0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)O18 - Protocol: offline-8876480 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exeO23 - Service: Norman NJeeves - Unknown owner - C:\NORMAN
vc\BIN\NJEEVES.EXEO23 - Service: Norman ZANDA - Unknown owner - C:\Norman\NVC\BIN\Zanda.exeO23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\NORMAN
vc\BIN
vcoas.exeO23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman Data Defense Systems - C:\NORMAN
vc\BIN\NVCSCHED.EXEO23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32
vsvc32.exe

Utilisateur anonyme · Answer

salutou en sont tes soucisa+

Cine · Answer

Bonjouren ce qui concerne les "net offers", c'est réglé : ouffffmerci beaucoup !!!par contre, j'ai des pages de cul qui apparaissent alors que je ne suis même allée sur un site particulier, à voir si c'est passager ou non...Cine

Utilisateur anonyme · Answer

RE;Lance ce scan en ligne: http://www.bitdefender.fr/scan8/ie.html  Copie/colle le rapporta+

Cine · Answer

J'ai essayé de lancer le scan, ça m'a affiché ce message :Impossible de charger le scanner online!     Le Service Pack 2 a été détecté sur cet ordinateur.Cliquez sur la barre d'information et sélectionnez "Installer le contrôle ActiveX...". Dois-je faire ce qu'il me dise?Merci

Utilisateur anonyme · Answer

Oui, accepte les active Xa+

Cine · Answer

Bonjour,j'ai fais le scan mais en plusieurs fois, ce qui fais que le rapport se réfère qu'à le dernièremerciCineBitDefender Online Scanner - Rapport virus en temps réel     Généré à: Fri, Dec 23, 2005 - 14:01:09 --------------------------------------------------------------------------------      Info d'analyse     Fichiers scannés 241338 Infectés Fichiers 53            Virus Détectés     Dialer.BAX 6 Backdoor.BotGet.FtpB.Gen 1 Trojan.Swizzor.AX 2 Backdoor.SDBot.A76B2A28 1 Trojan.Dialer.FU 1 Backdoor.SDBot.98AACAC2 1 Win32.Worm.Sasser.A 6 Win32.Worm.Sasser.B 24 Trojan.Downloader.Swizzor.BO 1 Trojan.Downloader.Swizzor.DR 1 Win32.Worm.Welchia.B 2 Trojan.Muldrop.2501.A 4 Trojan.Downloader.Swizzor.CB 1 Trojan.Downloader.WebInstall.A 1 BehavesLike:Win32.ExplorerHijack 1             --------------------------------------------------------------------------------     Ce sommaire du processus d'analyse sera utilisé par les laboratoires Antivirus BitDefender pour créer des statistiques agréguées sur l'activité des virus dans le monde.

Utilisateur anonyme · Answer

salutya pas le detail de l analyse?a+

Cine · Answer

Bonjour, BONNE ANNEE !!désolée d'avoir mis le temps, les vacances ont pris le dessus.J'ai fais plusieurs fois l'analyse mais je n'arrive pas à reprendre le détail de l'analyse.Par contre, à chaque fois que je le fais, j'ai des choses de supprimer. Dois-je continuer à le faire?Merci beaucoupCine

Utilisateur anonyme · Answer

J aimerais bien voir ouiil te dis, fichier supprimer?si oui selectionne tout et colle le resultat ici

Cine · Answer

Je l'ai refais, et là il n'y rien trouvé à supprimer, surement parce que je l'ai fais juste avant. Mais voici le détail :eBitDefender Online ScannerRapport d'analyse généré à: Tue, Jan 03, 2006 - 18:12:13 Voie d'analyse: A:\;C:\;D:\;E:\;  Statistiques Temps 00:58:11 Fichiers 242589 Directoires 6994 Secteurs de boot 2 Archives 2384 Paquets programmes 30807      Résultats Virus identifiés 0 Fichiers infectés 0 Fichiers suspects 0 Avertissements 0 Désinfectés 0 Fichiers effacés 0      Info sur les moteurs Définition virus 249129 Version des moteurs AVCORE v1.0 (build 2292) (i386) (Mar 3 2005 11:57:29) Analyse des plugins 13 Archive des plugins 39 Unpack des plugins 4 E-mail plugins 6 Système plugins 1      Paramètres d'analyse Première action Désinfecté Seconde Action Supprimé Heuristique Oui Acceptez les avertissements Oui Extensions analysées *; Excludez les extensions   Analyse d'emails Oui Analyse des Archives Oui Analyser paquets programmes Oui Analyse des fichiers Oui Analyse de boot Oui        Fichier analysé  Statut Aucun virus trouvé.

Utilisateur anonyme · Answer

ok, c est okou en sont tes soucisa+

Cine · Answer

En ce qui concerne net offers, c'est réglés.Mais j'ai quelque fois des images pornos qui apparaissent, en haut c'est écrit ça :http://www.the-best-promos.comje pense que c'est ce site qui m'envoie ça.

Utilisateur anonyme · Answer

ok,remet un hijack thisa+

Cine · Answer

le voici :Logfile of HijackThis v1.99.1Scan saved at 17:19:32, on 20/12/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exeC:\WINDOWS\Explorer.EXEC:\Norman\NVC\BIN\Zanda.exeC:\WINDOWS\System32
vsvc32.exeC:\WINDOWS\System32\svchost.exeC:\NORMAN
vc\BIN\NJEEVES.EXEC:\NORMAN
vc\BIN\NVCSCHED.EXEC:\WINDOWS\system32\wscntfy.exeC:\WINDOWS\SOUNDMAN.EXEC:\NORMAN
vc\BIN\ZLH.EXEC:\NORMAN
vc\BIN\NYMSE.EXEC:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exeC:\PROGRA~1\Wanadoo\CnxMon.exeC:\PROGRA~1\Wanadoo\TaskbarIcon.exeC:\Program Files\QuickTime\qttask.exeC:\WINDOWS\System32\LVCOMSX.EXEC:\Program Files\Logitech\Video\LogiTray.exeC:\Program Files\Fichiers communs\Real\Update_OBealsched.exeC:\Program Files\MessengerPlus! 3\MsgPlus.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\MSN Messenger\msnmsgr.exeC:\Program Files\Booster Wanadoo\wanadoo_booster.exeC:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exeC:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkcalrem.exeC:\NORMAN
vc\BIN
vcoas.exeC:\PROGRA~1\INCRED~1\bin\IMApp.exeC:\WINDOWS\system32\wuauclt.exeC:\Program Files\Logitech\Video\FxSvr2.exeC:\NORMAN
vc\BIN\cclaw.exeC:\PROGRA~1\INCRED~1\bin\IncMail.exeC:\Documents and Settings\DELPHINE\Bureau\HijackThis.exeR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wanadoo.fr/R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = "C:\Program Files\Outlook Express\msimn.exe" //eml:C:\Documents and Settings\DELPHINE\Mes documents\cd titi\FW_ ah ah ouh aih aih aiah iah aih.emlR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = WanadooR1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:7180R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensR3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLLO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocxO2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dllO2 - BHO: Barre d'outils MSN Search Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dllO2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - C:\Program Files\Microsoft Money\System\mnyviewer.dllO3 - Toolbar: Barre d'outils MSN Search - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dllO4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXEO4 - HKLM\..\Run: [Norman ZANDA] C:\NORMAN
vc\BIN\ZLH.EXE /LOAD /SPLASHO4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initializeO4 - HKLM\..\Run: [nwiz] nwiz.exe /installO4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\NeroCheck.exeO4 - HKLM\..\Run: [WorksFUD] C:\Program Files\Microsoft Works\wkfud.exeO4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsersO4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exeO4 - HKLM\..\Run: [MoneyStartUp10.0] "C:\Program Files\Microsoft Money\System\Activation.exe"O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\Wanadoo\CnxMon.exeO4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exeO4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\TaskbarIcon.exeO4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottimeO4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXEO4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exeO4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exeO4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osbootO4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exeO4 - HKCU\..\Run: [Looney Tunes] C:\Program Files\Looney Tunes\Looney Tunes.exeO4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" bootO4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exeO4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /cO4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStartO4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /backgroundO4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exeO4 - Global Startup: Booster Wanadoo.lnk = C:\Program Files\Booster Wanadoo\wanadoo_booster.exeO4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exeO4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exeO4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXEO4 - Global Startup: Rappels du Calendrier Microsoft Works.lnk = ?O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearch.exeO8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\binesources\WebMenuImg.htmO8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll/search.htmO8 - Extra context menu item: Afficher l'image non compressée - res://C:\Program Files\Booster Wanadoo\wanadoo_booster.exe/227O8 - Extra context menu item: Afficher toutes les images non compressées - res://C:\Program Files\Booster Wanadoo\wanadoo_booster.exe/250O9 - Extra button: ShopperReports - Compare travel rates - {946B3E9E-E21A-49c8-9F63-900533FAFE14} - C:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll (file missing)O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dllO9 - Extra button: ShopperReports - Compare product prices - {E77EDA01-3C56-4a96-8D08-02B42891C169} - C:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll (file missing)O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.wanadoo.fr (file missing) (HKCU)O16 - DPF: Interface Chat Voila - http://chat4.x-echo.com/version5/Applet/vchatsign.cabO16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cabO16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cabO16 - DPF: {F00F4763-7355-4725-82F7-0DA94A256D46} (IncrediMail) - http://www2.incredimail.com/contents/setup/downloader/imloader.cabO17 - HKLM\System\CCS\Services\Tcpip\..\{E1A47A93-C109-4F8A-BAE1-DF2CF68FD9FB}: NameServer = 80.10.246.5 80.10.246.136O18 - Protocol: bw+0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw+0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw-0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw-0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw00 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw00s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw10 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw10s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw20 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw20s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw30 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw30s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw40 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw40s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw50 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw50s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw60 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw60s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw70 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw70s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw80 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw80s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw90 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw90s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwa0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwa0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwb0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwb0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwc0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwc0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwd0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwd0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwe0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwe0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwf0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwf0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dllO18 - Protocol: bwg0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwg0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwh0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwh0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwi0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwi0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwj0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwj0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwk0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwk0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwl0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwl0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwm0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwm0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwn0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwn0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwo0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwo0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwp0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwp0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwq0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwq0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwr0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwr0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bws0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bws0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwt0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwt0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwu0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwu0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwv0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwv0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bww0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bww0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwx0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwx0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwy0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwy0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwz0 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwz0s - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)O18 - Protocol: offline-8876480 - {AE225548-73BD-43D6-9530-A9667A64AFB7} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exeO23 - Service: Norman NJeeves - Unknown owner - C:\NORMAN
vc\BIN\NJEEVES.EXEO23 - Service: Norman ZANDA - Unknown owner - C:\Norman\NVC\BIN\Zanda.exeO23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\NORMAN
vc\BIN
vcoas.exeO23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman Data Defense Systems - C:\NORMAN
vc\BIN\NVCSCHED.EXEO23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32
vsvc32.exe

Utilisateur anonyme · Answer

reTélécharge ceci Registry Search Tool http://www.billsway.com/vbspage/ décompresse le et tape ou colle ShopperReportset copie colle le résultat dans le bloc note et donne le nous+HijackThis -> Open the misc tools sections -> open Uninstall manager -> clique sur "Save list" -> enregistre le fichier -> fais-en un copier/coller ici.A+

Cine · Answer

REGEDIT4; RegSrch.vbs © Bill James; Registry search results for string "ShopperReports" 04/01/2006 15:44:33; NOTE: This file will be deleted when you close WordPad.; You must manually save this file to a new location if you want to refer to it again later.; (If you save the file with a .reg extension, you can use it to restore any Registry changes you make to these values.)[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0774F696-D801-4C18-81A7-A3A32B8BEF19}\InprocServer32]@="C:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll"[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1E6AC766-9094-4BCF-ABD3-39E2EAEA5FCD}\InprocServer32]@="C:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll"[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1E6AC766-9094-4BCF-ABD3-39E2EAEA5FCD}\ToolboxBitmap32]@="C:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll, 102"[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2178C864-B8BC-41AE-A1FB-EB6A32F87EB1}]@="ShopperReports – Price Comparison"[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2178C864-B8BC-41AE-A1FB-EB6A32F87EB1}\InprocServer32]@="C:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll"[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{454B4812-E572-4703-A1BB-63490809EAC0}\InprocServer32]@="C:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll"[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{580A1F3F-89B4-433B-BBDB-B97AEB13F3FC}\InprocServer32]@="C:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll"[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ShprRprts.HbInfoBand]@="ShopperReports – Price Comparison"[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ShprRprts.HbInfoBand.1]@="ShopperReports – Price Comparison"[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{842D315A-7E1E-448B-96E8-9E76D1820BE2}\1.0\0\win32]@="C:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll"[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{842D315A-7E1E-448B-96E8-9E76D1820BE2}\1.0\HELPDIR]@="C:\Program Files\ShopperReports\Bin\1.0.8.0\"[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{B5901229-25CC-43C9-B604-3BB6AC2B48A5}\1.0\0\win32]@="C:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll\3"[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{B5901229-25CC-43C9-B604-3BB6AC2B48A5}\1.0\HELPDIR]@="C:\Program Files\ShopperReports\Bin\1.0.8.0\"[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{C83DAED4-0611-4F7A-978E-7FEAFCB2F91B}\1.0\0\win32]@="C:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll\4"[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{C83DAED4-0611-4F7A-978E-7FEAFCB2F91B}\1.0\HELPDIR]@="C:\Program Files\ShopperReports\Bin\1.0.8.0\"[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{946B3E9E-E21A-49c8-9F63-900533FAFE14}]"ButtonText"="ShopperReports - Compare travel rates"[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{946B3E9E-E21A-49c8-9F63-900533FAFE14}]"HotIcon"="C:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll,202"[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{946B3E9E-E21A-49c8-9F63-900533FAFE14}]"Icon"="C:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll,201"[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{E77EDA01-3C56-4a96-8D08-02B42891C169}]"ButtonText"="ShopperReports - Compare product prices"[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{E77EDA01-3C56-4a96-8D08-02B42891C169}]"HotIcon"="C:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll,204"[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{E77EDA01-3C56-4a96-8D08-02B42891C169}]"Icon"="C:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll,203"[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Hotbar ShopperReports][HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Hotbar ShopperReports][HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Hotbar ShopperReports]"DisplayName"="Hotbar ShopperReports"[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Hotbar ShopperReports]"UninstallString"="C:\Program Files\ShopperReports\Uninstall.exe"[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Hotbar ShopperReports]"URLInfoAbout"="http://www.ShopperReports.com"[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Hotbar ShopperReports]"Publisher"="ShopperReports"[HKEY_LOCAL_MACHINE\SOFTWARE\ShopperReports][HKEY_LOCAL_MACHINE\SOFTWARE\ShopperReports\ShopperReports][HKEY_LOCAL_MACHINE\SOFTWARE\ShopperReports\ShopperReports\PostInstaller][HKEY_USERS\S-1-5-21-1614895754-2000478354-682003330-1004\Software\Microsoft\Internet Explorer\Explorer Bars\{2178C864-B8BC-41AE-A1FB-EB6A32F87EB1}]@="ShopperReports – Price Comparison"[HKEY_USERS\S-1-5-21-1614895754-2000478354-682003330-1004\Software\ShopperReports][HKEY_USERS\S-1-5-21-1614895754-2000478354-682003330-1004\Software\ShopperReports\ShopperReports][HKEY_USERS\S-1-5-21-1614895754-2000478354-682003330-1004\Software\ShopperReports\ShopperReports\PostInstaller]----------------------------------------------------------------------pour ça : HijackThis -> Open the misc tools sections -> open Uninstall manager -> clique sur "Save list" -> enregistre le fichier -> fais-en un copier/coller ici.sur hijackThis, j'ai juste le rapport, je peux pas choisir ce que vous me dites

Utilisateur anonyme · Answer

Bon ok,bhé, fais tu ceci-> clique sur "Save list" -> enregistre le fichier ->

Cine · Answer

c'est fait.c'est la meme que celui d'avant donc je le remet pas.je fais quoi maintenant?

Utilisateur anonyme · Answer

Puisque je n ai pas le rapport demandé, dis moi si tu as ds ajout/suppression de programme, ceciShopperReports

Cine · Answer

je n'ai pas ShopperRepports dans mes programmes.je veux bien vous donner le rapport mais je peux pas faire ce que vous voulez, j'ai pas où cliquer, j'ai enregistré en faisant F12.Je vien de penser ça, c'est dans ça (http://www.billsway.com/vbspage/) que vous voulez que je tape HijackThis et fasse le reste ?

Utilisateur anonyme · Answer

coucounon non lolTu lances le programme hijack thispuis tu choisis a tour de role ces options -> Open the misc tools sections -> open Uninstall manager -> clique sur "Save list" -> enregistre le fichier -> fais-en un copier/coller iciSi tu n y arrives pas, c est pas gravea+

Cine · Answer

J'ai procédé autrement et je crois que j'ai réussi, pas sans mal ;)c'est bien ceci ?Adobe Acrobat 4.0Adobe Acrobat 5.0Adobe Photoshop ElementsAll To MP3 Converter 1.6rc4ArcSoft PhotoImpressionBarre d'outils MSN SearchBooster WanadooCleanUp!ComptabilitéConstruisez votre maisonCorrectif Windows XP - KB873333Correctif Windows XP - KB873339Correctif Windows XP - KB885250Correctif Windows XP - KB885835Correctif Windows XP - KB885836Correctif Windows XP - KB885884Correctif Windows XP - KB886185Correctif Windows XP - KB887472Correctif Windows XP - KB887742Correctif Windows XP - KB888113Correctif Windows XP - KB888302Correctif Windows XP - KB890047Correctif Windows XP - KB890175Correctif Windows XP - KB890859Correctif Windows XP - KB890923Correctif Windows XP - KB891781Correctif Windows XP - KB893066Correctif Windows XP - KB893086Crazy TaxiDivXDivX ConverterDivX ConverterDivX PlayerEncyclopédie Standard Microsoft Encarta 2002EPSON Copy UtilityEPSON Logiciel imprimanteEPSON Photo PrintEPSON PhotoQuicker3.2EPSON PRINT Image Framer Tool1.1EPSON Smart PanelEPSON TWAIN 5Extension Système de Microsoft MoneyHeredis 2001Heredis 7Heredis 8HijackThis 1.99.1Hotbar Browser, Weather and Wowpapers ToolsHotbar Outlook ToolsHotbar ShopperReportsIncrediMail XeInstallation de Microsoft Works Suite 2002Instant AccessInterVideo WinDVD 4Lecteur Windows Media 10Logitech Desktop MessengerLogitech Print ServiceLogitech QuickCamMediamixer 4.03Messenger Plus! 3Microsoft AutoRoute 2002Microsoft MoneyMicrosoft Office 2000 ProfessionalMicrosoft Picture It! Express 2001Microsoft Picture It! Photo 2002Microsoft Word 2002Microsoft Works 6.0Microsoft Works Suite -- Macro complémentaire Microsoft WordMise à jour de sécurité pour Windows XP (KB883939)Mise à jour de sécurité pour Windows XP (KB890046)Mise à jour de sécurité pour Windows XP (KB896358)Mise à jour de sécurité pour Windows XP (KB896422)Mise à jour de sécurité pour Windows XP (KB896428)MSN Messenger 7.5NeroNVC v5.30NVIDIA Windows 2000/XP Display DriversPCFriendlyPhotoFiltrePowerPoint to Video 1.3.0Print@AuchanProgramme de gestion Camera de Logitech®RealPlayerScanToWebShockwaveSpybot - Search & Destroy 1.4Starsky&HutchTetrisTetris4000WanadooWindows Installer 3.1 (KB893803)Windows Installer 3.1 (KB893803)Windows Media Format RuntimeWindows XP Service Pack 2WJChess 1.0

Utilisateur anonyme · Answer

salutdesinstalles ceci:Hotbar Browser, Weather and Wowpapers Tools Hotbar Outlook Tools Hotbar ShopperReports puisfixe ceci:O9 - Extra button: ShopperReports - Compare travel rates - {946B3E9E-E21A-49c8-9F63-900533FAFE14} - C:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll (file missing) O9 - Extra button: ShopperReports - Compare product prices - {E77EDA01-3C56-4a96-8D08-02B42891C169} - C:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll (file missing) supprime C:\Program Files\ShopperReports Vide ta poubelle !-Relance Registry Search Tool et tape ou colle ShopperReports et copie colle le résultat dans le bloc note et donne le nousa+

Cine · Answer

Je ne trouve pas C:\Program Files\ShopperReportsJ'ai fais une rechercher de "shopperreports" dans C: pour voir s'il été placé ailleurs mais aucun fichier trouvé.Voici le rapport :REGEDIT4; RegSrch.vbs © Bill James; Registry search results for string "ShopperReports" 04/01/2006 17:42:29; NOTE: This file will be deleted when you close WordPad.; You must manually save this file to a new location if you want to refer to it again later.; (If you save the file with a .reg extension, you can use it to restore any Registry changes you make to these values.)[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0774F696-D801-4C18-81A7-A3A32B8BEF19}\InprocServer32]@="C:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll"[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1E6AC766-9094-4BCF-ABD3-39E2EAEA5FCD}\InprocServer32]@="C:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll"[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1E6AC766-9094-4BCF-ABD3-39E2EAEA5FCD}\ToolboxBitmap32]@="C:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll, 102"[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2178C864-B8BC-41AE-A1FB-EB6A32F87EB1}]@="ShopperReports – Price Comparison"[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2178C864-B8BC-41AE-A1FB-EB6A32F87EB1}\InprocServer32]@="C:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll"[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{454B4812-E572-4703-A1BB-63490809EAC0}\InprocServer32]@="C:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll"[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{580A1F3F-89B4-433B-BBDB-B97AEB13F3FC}\InprocServer32]@="C:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll"[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ShprRprts.HbInfoBand]@="ShopperReports – Price Comparison"[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ShprRprts.HbInfoBand.1]@="ShopperReports – Price Comparison"[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{842D315A-7E1E-448B-96E8-9E76D1820BE2}\1.0\0\win32]@="C:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll"[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{842D315A-7E1E-448B-96E8-9E76D1820BE2}\1.0\HELPDIR]@="C:\Program Files\ShopperReports\Bin\1.0.8.0\"[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{B5901229-25CC-43C9-B604-3BB6AC2B48A5}\1.0\0\win32]@="C:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll\3"[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{B5901229-25CC-43C9-B604-3BB6AC2B48A5}\1.0\HELPDIR]@="C:\Program Files\ShopperReports\Bin\1.0.8.0\"[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{C83DAED4-0611-4F7A-978E-7FEAFCB2F91B}\1.0\0\win32]@="C:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll\4"[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{C83DAED4-0611-4F7A-978E-7FEAFCB2F91B}\1.0\HELPDIR]@="C:\Program Files\ShopperReports\Bin\1.0.8.0\"[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{946B3E9E-E21A-49c8-9F63-900533FAFE14}]"ButtonText"="ShopperReports - Compare travel rates"[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{946B3E9E-E21A-49c8-9F63-900533FAFE14}]"HotIcon"="C:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll,202"[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{946B3E9E-E21A-49c8-9F63-900533FAFE14}]"Icon"="C:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll,201"[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{E77EDA01-3C56-4a96-8D08-02B42891C169}]"ButtonText"="ShopperReports - Compare product prices"[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{E77EDA01-3C56-4a96-8D08-02B42891C169}]"HotIcon"="C:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll,204"[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{E77EDA01-3C56-4a96-8D08-02B42891C169}]"Icon"="C:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll,203"[HKEY_LOCAL_MACHINE\SOFTWARE\ShopperReports][HKEY_LOCAL_MACHINE\SOFTWARE\ShopperReports\ShopperReports][HKEY_LOCAL_MACHINE\SOFTWARE\ShopperReports\ShopperReports\PostInstaller][HKEY_USERS\S-1-5-21-1614895754-2000478354-682003330-1004\Software\Microsoft\Internet Explorer\Explorer Bars\{2178C864-B8BC-41AE-A1FB-EB6A32F87EB1}]@="ShopperReports – Price Comparison"[HKEY_USERS\S-1-5-21-1614895754-2000478354-682003330-1004\Software\ShopperReports][HKEY_USERS\S-1-5-21-1614895754-2000478354-682003330-1004\Software\ShopperReports\ShopperReports][HKEY_USERS\S-1-5-21-1614895754-2000478354-682003330-1004\Software\ShopperReports\ShopperReports\PostInstaller]

Utilisateur anonyme · Answer

Ouvre le bloc note et copie colle ceci entre les étoiles ********** REGEDIT4 [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0774F696-D801-4C18-81A7-A3A32B8BEF19}\InprocServer32] @=-[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1E6AC766-9094-4BCF-ABD3-39E2EAEA5FCD}\InprocServer32] @=-[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1E6AC766-9094-4BCF-ABD3-39E2EAEA5FCD}\ToolboxBitmap32] @=- [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2178C864-B8BC-41AE-A1FB-EB6A32F87EB1}] @=-[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2178C864-B8BC-41AE-A1FB-EB6A32F87EB1}\InprocServer32] @=-[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{454B4812-E572-4703-A1BB-63490809EAC0}\InprocServer32] @=-[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{580A1F3F-89B4-433B-BBDB-B97AEB13F3FC}\InprocServer32] @=- [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ShprRprts.HbInfoBand] @=-[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ShprRprts.HbInfoBand.1] @=-[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{842D315A-7E1E-448B-96E8-9E76D1820BE2}\1.0\0\win32] @=- [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{842D315A-7E1E-448B-96E8-9E76D1820BE2}\1.0\HELPDIR] @=-[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{B5901229-25CC-43C9-B604-3BB6AC2B48A5}\1.0\0\win32] @=- [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{B5901229-25CC-43C9-B604-3BB6AC2B48A5}\1.0\HELPDIR] @=-[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{C83DAED4-0611-4F7A-978E-7FEAFCB2F91B}\1.0\0\win32] @=-[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{C83DAED4-0611-4F7A-978E-7FEAFCB2F91B}\1.0\HELPDIR] @=-[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{946B3E9E-E21A-49c8-9F63-900533FAFE14}] "ButtonText"=-[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{946B3E9E-E21A-49c8-9F63-900533FAFE14}] "HotIcon"=- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{946B3E9E-E21A-49c8-9F63-900533FAFE14}] "Icon"=-[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{E77EDA01-3C56-4a96-8D08-02B42891C169}] "ButtonText"=-[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{E77EDA01-3C56-4a96-8D08-02B42891C169}] "HotIcon"=-[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{E77EDA01-3C56-4a96-8D08-02B42891C169}] "Icon"=-[-HKEY_LOCAL_MACHINE\SOFTWARE\ShopperReports] [-HKEY_LOCAL_MACHINE\SOFTWARE\ShopperReports\ShopperReports] [-HKEY_LOCAL_MACHINE\SOFTWARE\ShopperReports\ShopperReports\PostInstaller] [HKEY_USERS\S-1-5-21-1614895754-2000478354-682003330-1004\Software\Microsoft\Internet Explorer\Explorer Bars\{2178C864-B8BC-41AE-A1FB-EB6A32F87EB1}] @=-[-HKEY_USERS\S-1-5-21-1614895754-2000478354-682003330-1004\Software\ShopperReports] [-HKEY_USERS\S-1-5-21-1614895754-2000478354-682003330-1004\Software\ShopperReports\ShopperReports] [-HKEY_USERS\S-1-5-21-1614895754-2000478354-682003330-1004\Software\ShopperReports\ShopperReports\PostInstaller]************ enregistre le sur ton bureau et nomme le www.reg et dans la case en dessous type met sur tous fichiers la vas sur ton bureau et double click sur se fichier que tu vient de faire et accepte la fusion avec le registre.puis remet un rapport pr voir si ca a disparua+

Cine · Answer

Alors ça à marché ?REGEDIT4; RegSrch.vbs © Bill James; Registry search results for string "ShopperReports" 04/01/2006 18:04:26; NOTE: This file will be deleted when you close WordPad.; You must manually save this file to a new location if you want to refer to it again later.; (If you save the file with a .reg extension, you can use it to restore any Registry changes you make to these values.)[HKEY_USERS\S-1-5-21-1614895754-2000478354-682003330-1004\Software\Microsoft\Search Assistant\ACMru\5603]"000"="ShopperReports"

Utilisateur anonyme · Answer

Encore uneOuvre le bloc note et copie colle ceci entre les étoiles ********** REGEDIT4 [HKEY_USERS\S-1-5-21-1614895754-2000478354-682003330-1004\Software\Microsoft\Search Assistant\ACMru\5603] "000"=-************ enregistre le sur ton bureau et nomme le www.reg et dans la case en dessous type met sur tous fichiers la vas sur ton bureau et double click sur se fichier que tu vient de faire et accepte la fusion avec le registre. puis remet un rapport pr voir si ca a disparu a+

Cine · Answer

impossible de rouvrir le rapport, ça me met ça : "no instances of ShopperReports found"c'est normal?

Utilisateur anonyme · Answer

Salutoui carno instances of ShopperReports found = qu il n a plus rien trouvé !!!Ou en sont tes soucis?a+

Cine · Answer

Bonjour, j'ai passé un peu de temps sur le net pour voir ou ça en été et j'ai d'autres pages qui apparaissent de :http.products-news.com

Utilisateur anonyme · Answer

re,ok, continuons le nettoyage1/peux tu refaire ceciHijackThis -> Open the misc tools sections -> open Uninstall manager -> clique sur "Save list" -> enregistre le fichier -> fais-en un copier/coller ici. 2/Télécharge ceci: (merci a S!RI pour ce petit programme).http://siri.urz.free.fr/Fix/SmitfraudFix.zipExécute le, Double click sur Smitfraudfix.cmd choisit l’option 1, il va générer un rapportCopie/colle le sur le poste stp.++

Cine · Answer

Adobe Acrobat 4.0Adobe Acrobat 5.0Adobe Photoshop ElementsAll To MP3 Converter 1.6rc4ArcSoft PhotoImpressionBarre d'outils MSN SearchBooster WanadooCleanUp!ComptabilitéConstruisez votre maisonCorrectif Windows XP - KB873333Correctif Windows XP - KB873339Correctif Windows XP - KB885250Correctif Windows XP - KB885835Correctif Windows XP - KB885836Correctif Windows XP - KB885884Correctif Windows XP - KB886185Correctif Windows XP - KB887472Correctif Windows XP - KB887742Correctif Windows XP - KB888113Correctif Windows XP - KB888302Correctif Windows XP - KB890047Correctif Windows XP - KB890175Correctif Windows XP - KB890859Correctif Windows XP - KB890923Correctif Windows XP - KB891781Correctif Windows XP - KB893066Correctif Windows XP - KB893086Crazy TaxiDivXDivX ConverterDivX ConverterDivX PlayerEncyclopédie Standard Microsoft Encarta 2002EPSON Copy UtilityEPSON Logiciel imprimanteEPSON Photo PrintEPSON PhotoQuicker3.2EPSON PRINT Image Framer Tool1.1EPSON Smart PanelEPSON TWAIN 5Extension Système de Microsoft MoneyHeredis 2001Heredis 7Heredis 8HijackThis 1.99.1IncrediMail XeInstallation de Microsoft Works Suite 2002Instant AccessInterVideo WinDVD 4Lecteur Windows Media 10Logitech Desktop MessengerLogitech Print ServiceLogitech QuickCamMediamixer 4.03Messenger Plus! 3Microsoft AutoRoute 2002Microsoft MoneyMicrosoft Office 2000 ProfessionalMicrosoft Picture It! Express 2001Microsoft Picture It! Photo 2002Microsoft Word 2002Microsoft Works 6.0Microsoft Works Suite -- Macro complémentaire Microsoft WordMise à jour de sécurité pour Windows XP (KB883939)Mise à jour de sécurité pour Windows XP (KB890046)Mise à jour de sécurité pour Windows XP (KB896358)Mise à jour de sécurité pour Windows XP (KB896422)Mise à jour de sécurité pour Windows XP (KB896428)MSN Messenger 7.5NeroNVC v5.30NVIDIA Windows 2000/XP Display DriversPCFriendlyPhotoFiltrePowerPoint to Video 1.3.0Print@AuchanProgramme de gestion Camera de Logitech®RealPlayerScanToWebShockwaveSpybot - Search & Destroy 1.4Starsky&HutchTetrisTetris4000WanadooWindows Installer 3.1 (KB893803)Windows Installer 3.1 (KB893803)Windows Media Format RuntimeWindows XP Service Pack 2WJChess 1.0----------------------------------------------------------------------SmitFraudFix v2.08Rapport fait à 18:42:21,62 le 05/01/2006Executé à partir de C:\Documents and Settings\DELPHINE\Bureau\SmitfraudFix\SmitfraudFixOS: Microsoft Windows XP [version 5.1.2600]»»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\»»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS»»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS\system»»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS\Web»»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS\system32»»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\Documents and Settings\DELPHINE\Application Data»»»»»»»»»»»»»»»»»»»»»»»» Recherche Menu Démarrer»»»»»»»»»»»»»»»»»»»»»»»» Recherche Bureau»»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\Program Files »»»»»»»»»»»»»»»»»»»»»»»» Recherche présence de clés corrompues»»»»»»»»»»»»»»»»»»»»»»»» Recherche éléments du bureau  »»»»»»»»»»»»»»»»»»»»»»»» Recherche Sharedtaskscheduler[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Pr‚-chargeur Browseui""{8C7461EF-2B13-11d2-BE35-3078302C2030}"="D‚mon de cache des cat‚gories de composant"»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll»»»»»»»»»»»»»»»»»»»»»»»» Fin du rapport

Utilisateur anonyme · Answer

ok,dis moi quels genres de pubs tu as, merci

Cine · Answer

ce sont des pub porno. Dans la barre du haut, il y a le site, et dans la page, il y a des photos.Ca me propose d'aller voir des video, d'aller sur des tchats...C'est un carré qui se placent au milieu de l'écran.

Utilisateur anonyme · Answer

salutdans panneau de configuration < option internetonglet general[parametres][afficher les fichiers]Qu as tu dedans?a+

Cine · Answer

j'ai plein de fichier la-dedans, comment je peux copier la liste des fichiers pour vous la montrer ?

Utilisateur anonyme · Answer

re,Verifie bien que tu es dans downloaded Program filesSi oui,supprime touta+

Cine · Answer

voilà, j'ai tout supprimé

Utilisateur anonyme · Answer

ok,Telecharge Ewido: http://download.ewido.net/ewido-setup.exe Scan ton pc avec, copie colle le rapporta+

Cine · Answer

--------------------------------------------------------- ewido anti-malware - Rapport de scan--------------------------------------------------------- + Créé le:		21:53:08, 05/01/2006 + Somme de contrôle:	7C24DA26 + Résultats du scan:	HKLM\SOFTWARE\Classes\AppID\WeatherOnTray.EXE -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\AppID\{0507FDDE-F3B7-49F5-9E8F-C557E991F39B} -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\CLSID\{0774F696-D801-4C18-81A7-A3A32B8BEF19} -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\CLSID\{1E0004EC-5DF0-48C7-A8F0-FBB0488A3D94} -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\CLSID\{1E6AC766-9094-4BCF-ABD3-39E2EAEA5FCD} -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\CLSID\{2178C864-B8BC-41AE-A1FB-EB6A32F87EB1} -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\CLSID\{454B4812-E572-4703-A1BB-63490809EAC0} -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\CLSID\{580A1F3F-89B4-433B-BBDB-B97AEB13F3FC} -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\CLSID\{7E66936C-FEA0-4984-AD26-7B6661AC5B2E} -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\CLSID\{FA16BCE1-5E36-472A-8466-E0CDD5CE00E6} -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\HbCoreSrv.DynamicProp -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\HbCoreSrv.DynamicProp\CLSID -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\HbCoreSrv.DynamicProp\CurVer -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\HbCoreSrv.DynamicProp.1 -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\HbtCoreSrv.HbtCoreServices -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\HbtCoreSrv.HbtCoreServices\CLSID -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\HbtCoreSrv.HbtCoreServices\CurVer -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\HbtCoreSrv.HbtCoreServices.1 -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\HbtCoreSrv.LfgAx -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\HbtCoreSrv.LfgAx\CLSID -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\HbtCoreSrv.LfgAx\CurVer -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\HbtCoreSrv.LfgAx.1 -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\HbtHostIE.Bho -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\HbtHostIE.Bho\CLSID -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\HbtHostIE.Bho\CurVer -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\HbtHostIE.Bho.1 -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\HbtHostOL.HbtMailAnim -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\HbtHostOL.HbtMailAnim\CLSID -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\HbtHostOL.HbtMailAnim\CurVer -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\HbtHostOL.HbtMailAnim.1 -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\HbtHostOL.HbtWebmailSend -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\HbtHostOL.HbtWebmailSend\CLSID -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\HbtHostOL.HbtWebmailSend\CurVer -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\HbtHostOL.HbtWebmailSend.1 -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\HbTools.HbtCommBand -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\HbTools.HbtCommBand\CLSID -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\HbTools.HbtCommBand\CurVer -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\HbTools.HbtCommBand.1 -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\HbTools.HbtTravelCompareBar -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\HbTools.HbtTravelCompareBar\CLSID -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\HbTools.HbtTravelCompareBar\CurVer -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\HbTools.HbtTravelCompareBar.1 -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\HbtSrv.HbtCoreServices -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\HbtSrv.HbtCoreServices\CLSID -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\HbtSrv.HbtCoreServices\CurVer -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\HbtSrv.HbtCoreServices.1 -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\HbtToolbar.HbtHtmlMenuUI -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\HbtToolbar.HbtHtmlMenuUI\CLSID -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\HbtToolbar.HbtHtmlMenuUI\CurVer -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\HbtToolbar.HbtHtmlMenuUI.1 -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\HbtToolbar.HbtToolbarCtl -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\HbtToolbar.HbtToolbarCtl\CLSID -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\HbtToolbar.HbtToolbarCtl\CurVer -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\HbtToolbar.HbtToolbarCtl.1 -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\HbtTools.HbMain -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\HbtTools.HbMain\CLSID -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\HbtTools.HbMain\CurVer -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\HbtTools.HbMain.1 -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\Interface\{34F4D917-31E4-464C-B8B3-84C1CE76B395} -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\Interface\{3F04CBF7-CD62-4403-B090-B432DEDCB159} -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\Interface\{8578D35E-C6C0-4808-9A80-0F6C29A2C423} -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\Interface\{BC190DA5-0187-4D99-B3AC-6C45EA1B9324} -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\RprtsPSClient.PSExecuter -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\RprtsPSClient.PSExecuter\CLSID -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\RprtsPSClient.PSExecuter\CurVer -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\RprtsPSClient.PSExecuter.1 -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\ShprRprts.HbAx -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\ShprRprts.HbAx\CLSID -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\ShprRprts.HbAx\CurVer -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\ShprRprts.HbAx.1 -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\ShprRprts.HbInfoBand -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\ShprRprts.HbInfoBand\CLSID -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\ShprRprts.HbInfoBand\CurVer -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\ShprRprts.HbInfoBand.1 -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\ShprRprts.IEButton -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\ShprRprts.IEButton\CLSID -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\ShprRprts.IEButton\CurVer -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\ShprRprts.IEButton.1 -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\ShprRprts.IEButtonA -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\ShprRprts.IEButtonA\CLSID -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\ShprRprts.IEButtonA\CurVer -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\ShprRprts.IEButtonA.1 -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\ShprRprts.SmrtShprCtl -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\ShprRprts.SmrtShprCtl\CLSID -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\ShprRprts.SmrtShprCtl\CurVer -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\ShprRprts.SmrtShprCtl.1 -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\SysWebTelecom.SysWebTelecom -> Dialer.Generic : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\SysWebTelecom.SysWebTelecom\CurVer -> Dialer.Generic : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\TypeLib\{45397063-D7D0-47C2-9508-26487608A298} -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\TypeLib\{71E9CF40-AF72-4B55-BD3F-1FEA2A0EAEA6} -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\TypeLib\{71EFE583-62FE-4419-9918-CA3B683F7B36} -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\TypeLib\{793AF621-5CD0-4B92-B765-6712F6AAF48E} -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\TypeLib\{842D315A-7E1E-448B-96E8-9E76D1820BE2} -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\TypeLib\{9967A873-40F3-4C7E-9239-6C8760F19F61} -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\TypeLib\{B5901229-25CC-43C9-B604-3BB6AC2B48A5} -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\TypeLib\{B9F51D42-CCA0-4408-BB02-D433D1865A3A} -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\TypeLib\{C83DAED4-0611-4F7A-978E-7FEAFCB2F91B} -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\TypeLib\{F8EE014F-B34C-4544-8E45-95A7971D323B} -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\Wallpaper.WallpaperManager -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\Wallpaper.WallpaperManager\CLSID -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\Wallpaper.WallpaperManager\CurVer -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Classes\Wallpaper.WallpaperManager.1 -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\HbTools -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\HbTools\HbTools -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\HbTools\HbTools\Install -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\HbTools\HbTools\MachineInfo -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\HbTools\HbTools\Mail -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\HbTools\HbTools\PI -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\HbTools\HbTools\PI\3.2 -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\HbTools\HbTools\Updates -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\HbTools\HbTools\Upgrade -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\HbTools\HostOI -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\HbTools\HostOI\Mail -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\HbTools\HostOI\Updates -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\HbTools\HostOL -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\HbTools\HostOL\Mail -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\HbTools\HostOL\Updates -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\HbTools\Hotbar -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\HbTools\Hotbar\Install -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\HbTools\Install -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\HbTools\Install\CmpMap -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\HbTools\Install\Icons -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\HbTools\Install\Links -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{7E66936C-FEA0-4984-AD26-7B6661AC5B2E} -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{946B3E9E-E21A-49c8-9F63-900533FAFE14} -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{946B3E9E-E21A-49c8-9F63-900533FAFE14}\ClsidExtension -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{E77EDA01-3C56-4a96-8D08-02B42891C169} -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{E77EDA01-3C56-4a96-8D08-02B42891C169}\ClsidExtension -> Spyware.HotBar : Nettoyer et sauvegarder	HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Instant Access -> Dialer.Generic : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\EGDHTML -> Dialer.Generic : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\Common -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\Common\Time -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\Common\Updates -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\dynamic -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\dynamicFail -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\EUI -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\HtmlPPP -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\ImagesHistory -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\init -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Install -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\links -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\mail -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\MultiUrl -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\options -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\PI -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\PI\3.2 -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg800 -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg801 -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg802 -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg803 -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg807 -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg808 -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg810 -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg811 -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg812 -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg818 -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg819 -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg824 -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg825 -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg826 -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg827 -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg828 -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg829 -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg830 -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg842 -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg843 -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg844 -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg845 -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg847 -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg848 -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg849 -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg856 -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg857 -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg862 -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sg863 -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\Sample\Hist\sgsbt -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\updates -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HbTools\UserInfo -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HostOI -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HostOI\links -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\HostOI\Updates -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\hostol -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\hostol\links -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\hostol\Mail -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\hostol\soho -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\hostol\Updates -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\Time -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\Time\HostIE -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\Time\HostIE\Updates -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\Time\HostOE -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\Time\HostOE\Updates -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\Time\HostOI -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\Time\HostOI\Updates -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\Time\HostOL -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\HbTools\Time\HostOL\Updates -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\Microsoft\Internet Explorer\Explorer Bars\{2178C864-B8BC-41AE-A1FB-EB6A32F87EB1} -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\Microsoft\Internet Explorer\Explorer Bars\{7E66936C-FEA0-4984-AD26-7B6661AC5B2E} -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2A8A997F-BB9F-48F6-AA2B-2762D50F9289} -> Spyware.SmartShopper : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{74CC49F7-EB32-4A08-B204-948962A6E3DB} -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{946B3E9E-E21A-49C8-9F63-900533FAFE14} -> Spyware.HotBar : Nettoyer et sauvegarder	HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E77EDA01-3C56-4A96-8D08-02B42891C169} -> Spyware.HotBar : Nettoyer et sauvegarder	[492] VM_10001000 -> Adware.NaviPromo : Erreur durant le nettoyage	[520] VM_10001000 -> Adware.NaviPromo : Erreur durant le nettoyage	[564] VM_10001000 -> Adware.NaviPromo : Erreur durant le nettoyage	[576] VM_10001000 -> Adware.NaviPromo : Erreur durant le nettoyage	[772] VM_10001000 -> Adware.NaviPromo : Erreur durant le nettoyage	[816] C:\WINDOWS\system32\msclock32.dll -> Adware.NaviPromo : Erreur durant le nettoyage	[852] VM_10001000 -> Adware.NaviPromo : Erreur durant le nettoyage	[912] C:\WINDOWS\system32\msclock32.dll -> Adware.NaviPromo : Erreur durant le nettoyage	[972] C:\WINDOWS\system32\msclock32.dll -> Adware.NaviPromo : Erreur durant le nettoyage	[1232] VM_10001000 -> Adware.NaviPromo : Erreur durant le nettoyage	[1348] VM_01831000 -> Adware.NaviPromo : Erreur durant le nettoyage	[1428] VM_00BE1000 -> Adware.NaviPromo : Erreur durant le nettoyage	[1452] VM_10001000 -> Adware.NaviPromo : Erreur durant le nettoyage	[1572] VM_10001000 -> Adware.NaviPromo : Erreur durant le nettoyage	[1604] C:\WINDOWS\system32\msclock32.dll -> Adware.NaviPromo : Erreur durant le nettoyage	[1788] VM_00D91000 -> Adware.NaviPromo : Erreur durant le nettoyage	[1796] VM_00A71000 -> Adware.NaviPromo : Erreur durant le nettoyage	[1928] VM_10001000 -> Adware.NaviPromo : Erreur durant le nettoyage	[1968] VM_00A81000 -> Adware.NaviPromo : Erreur durant le nettoyage	[1976] VM_00AB1000 -> Adware.NaviPromo : Erreur durant le nettoyage	[1992] VM_00CE1000 -> Adware.NaviPromo : Erreur durant le nettoyage	[2016] VM_00AA1000 -> Adware.NaviPromo : Erreur durant le nettoyage	[2024] VM_010E1000 -> Adware.NaviPromo : Erreur durant le nettoyage	[2044] VM_00F71000 -> Adware.NaviPromo : Erreur durant le nettoyage	[120] VM_00CE1000 -> Adware.NaviPromo : Erreur durant le nettoyage	[128] VM_003C1000 -> Adware.NaviPromo : Erreur durant le nettoyage	[148] VM_01151000 -> Adware.NaviPromo : Erreur durant le nettoyage	[140] VM_00991000 -> Adware.NaviPromo : Erreur durant le nettoyage	[476] VM_00971000 -> Adware.NaviPromo : Erreur durant le nettoyage	[396] VM_00D31000 -> Adware.NaviPromo : Erreur durant le nettoyage	[360] VM_01401000 -> Adware.NaviPromo : Erreur durant le nettoyage	[1004] VM_00801000 -> Adware.NaviPromo : Erreur durant le nettoyage	[1288] VM_00BB1000 -> Adware.NaviPromo : Erreur durant le nettoyage	[736] VM_00961000 -> Adware.NaviPromo : Erreur durant le nettoyage	[2092] VM_003D1000 -> Adware.NaviPromo : Erreur durant le nettoyage	[2736] VM_01011000 -> Adware.NaviPromo : Erreur durant le nettoyage	[2880] VM_01201000 -> Adware.NaviPromo : Erreur durant le nettoyage	[2212] VM_00C51000 -> Adware.NaviPromo : Erreur durant le nettoyage	[932] VM_01801000 -> Adware.NaviPromo : Erreur durant le nettoyage	[1596] VM_00F41000 -> Adware.NaviPromo : Erreur durant le nettoyage	C:\Documents and Settings\DELPHINE\Application Data\ShopperReports -> Spyware.HotBar : Nettoyer et sauvegarder	C:\Documents and Settings\DELPHINE\Application Data\ShopperReports\cs -> Spyware.HotBar : Nettoyer et sauvegarder	C:\Documents and Settings\DELPHINE\Application Data\ShopperReports\cs\Config.xml -> Spyware.HotBar : Nettoyer et sauvegarder	C:\Documents and Settings\DELPHINE\Application Data\ShopperReports\cs\db -> Spyware.HotBar : Nettoyer et sauvegarder	C:\Documents and Settings\DELPHINE\Application Data\ShopperReports\cs\db\Aliases.dbs -> Spyware.HotBar : Nettoyer et sauvegarder	C:\Documents and Settings\DELPHINE\Application Data\ShopperReports\cs\db\Sites.dbs -> Spyware.HotBar : Nettoyer et sauvegarder	C:\Documents and Settings\DELPHINE\Application Data\ShopperReports\cs\dwld -> Spyware.HotBar : Nettoyer et sauvegarder	C:\Documents and Settings\DELPHINE\Application Data\ShopperReports\cs\dwld\WhiteList.xip -> Spyware.HotBar : Nettoyer et sauvegarder	C:\Documents and Settings\DELPHINE\Application Data\ShopperReports\cs\persist.dbs -> Spyware.HotBar : Nettoyer et sauvegarder	C:\Documents and Settings\DELPHINE\Application Data\ShopperReports\cseport -> Spyware.HotBar : Nettoyer et sauvegarder	C:\Documents and Settings\DELPHINE\Application Data\ShopperReports\cseport\ag_ShopperReports.xml -> Spyware.HotBar : Nettoyer et sauvegarder	C:\Documents and Settings\DELPHINE\Application Data\ShopperReports\cseport\ag_ShopperReports.xml.db -> Spyware.HotBar : Nettoyer et sauvegarder	C:\Documents and Settings\DELPHINE\Application Data\ShopperReports\cseport\send_ShopperReports.xml -> Spyware.HotBar : Nettoyer et sauvegarder	C:\Documents and Settings\DELPHINE\Application Data\ShopperReports\cseport\send_ShopperReports.xml.db -> Spyware.HotBar : Nettoyer et sauvegarder	C:\Documents and Settings\DELPHINE\Application Data\ShopperReports\cses3 -> Spyware.HotBar : Nettoyer et sauvegarder	C:\Documents and Settings\DELPHINE\Application Data\ShopperReports\cses3\WhiteList.dbs -> Spyware.HotBar : Nettoyer et sauvegarder	C:\Documents and Settings\DELPHINE\Application Data\ShopperReports\shprrprt.log -> Spyware.HotBar : Nettoyer et sauvegarder	C:\Documents and Settings\DELPHINE\Application Data\ShopperReports\shprrprt_1131123111.log -> Spyware.HotBar : Nettoyer et sauvegarder	C:\Documents and Settings\DELPHINE\Bureau\backups\backup-20051218-190411-453.dll -> Spyware.HotBar : Nettoyer et sauvegarder	C:\Documents and Settings\DELPHINE\Bureau\backups\backup-20051218-190413-111.dll -> Dialer.InstantAccess.f : Nettoyer et sauvegarder	C:\Documents and Settings\DELPHINE\Bureau\backups\backup-20051218-190413-621.dll -> Dialer.Generic : Nettoyer et sauvegarder	C:\Documents and Settings\DELPHINE\Bureau\backups\backup-20051218-190413-728.dll -> Dialer.Generic : Nettoyer et sauvegarder	C:\Documents and Settings\DELPHINE\Bureau\backups\backup-20051218-190413-744.dll -> Dialer.Generic : Nettoyer et sauvegarder	C:\Documents and Settings\DELPHINE\Bureau\backups\backup-20051218-190413-944.dll -> Dialer.Generic : Nettoyer et sauvegarder	C:\Documents and Settings\DELPHINE\Bureau\backups\backup-20051218-190414-137.dll -> Dialer.Generic : Nettoyer et sauvegarder	C:\Documents and Settings\DELPHINE\Bureau\backups\backup-20051218-190414-442.dll -> Dialer.Generic : Nettoyer et sauvegarder	C:\Documents and Settings\DELPHINE\Bureau\backups\backup-20051218-190414-695.dll -> Dialer.Generic : Nettoyer et sauvegarder	C:\Documents and Settings\DELPHINE\Bureau\backups\backup-20051218-190415-261.dll -> Dialer.Generic : Nettoyer et sauvegarder	C:\Documents and Settings\DELPHINE\Bureau\backups\backup-20051218-190415-420.dll -> Dialer.Generic : Nettoyer et sauvegarder	C:\Documents and Settings\DELPHINE\Bureau\backups\backup-20051218-190415-453.dll -> Dialer.Generic : Nettoyer et sauvegarder	C:\Documents and Settings\DELPHINE\Bureau\backups\backup-20051218-190415-490.dll -> Dialer.Generic : Nettoyer et sauvegarder	C:\Documents and Settings\DELPHINE\Bureau\backups\backup-20051218-190415-511.dll -> Dialer.Generic : Nettoyer et sauvegarder	C:\Documents and Settings\DELPHINE\Bureau\backups\backup-20051218-190416-351.dll -> Dialer.Generic : Nettoyer et sauvegarder	C:\Documents and Settings\DELPHINE\Bureau\backups\backup-20051218-190416-898.dll -> Dialer.Generic : Nettoyer et sauvegarder	C:\WINDOWS\system32\EGDACCESS_1060.dll -> Dialer.Generic : Nettoyer et sauvegarder	C:\WINDOWS\system32\EGDACCESS_1065.dll -> Dialer.Generic : Nettoyer et sauvegarder	C:\WINDOWS\system32\EGDACCESS_ASPIV4_1064.dll -> Dialer.Generic : Nettoyer et sauvegarder	C:\WINDOWS\system32\msplock32.dll -> Adware.NaviPromo : Nettoyer et sauvegarder	C:\WINDOWS\system32\__delete_on_reboot__msclock32.dll -> Adware.NaviPromo : Nettoyer et sauvegarder::Fin du rapport

Utilisateur anonyme · Answer

salutrelance ewido et remet le rapporta+

Cine · Answer

--------------------------------------------------------- ewido anti-malware - Rapport de scan--------------------------------------------------------- + Créé le:		13:06:51, 06/01/2006 + Somme de contrôle:	C98FACD7 + Résultats du scan:	[492] VM_10001000 -> Adware.NaviPromo : Erreur durant le nettoyage	[520] VM_10001000 -> Adware.NaviPromo : Erreur durant le nettoyage	[564] VM_10001000 -> Adware.NaviPromo : Erreur durant le nettoyage	[576] VM_10001000 -> Adware.NaviPromo : Erreur durant le nettoyage	[772] VM_10001000 -> Adware.NaviPromo : Erreur durant le nettoyage	[816] C:\WINDOWS\system32\msclock32.dll -> Adware.NaviPromo : Erreur durant le nettoyage	[852] VM_10001000 -> Adware.NaviPromo : Erreur durant le nettoyage	[904] C:\WINDOWS\system32\msclock32.dll -> Adware.NaviPromo : Erreur durant le nettoyage	[996] C:\WINDOWS\system32\msclock32.dll -> Adware.NaviPromo : Erreur durant le nettoyage	[1104] VM_00DF1000 -> Adware.NaviPromo : Erreur durant le nettoyage	[1228] VM_10001000 -> Adware.NaviPromo : Erreur durant le nettoyage	[1340] VM_01831000 -> Adware.NaviPromo : Erreur durant le nettoyage	[1404] VM_00D71000 -> Adware.NaviPromo : Erreur durant le nettoyage	[1428] VM_00CB1000 -> Adware.NaviPromo : Erreur durant le nettoyage	[1448] VM_00DA1000 -> Adware.NaviPromo : Erreur durant le nettoyage	[1456] VM_003D1000 -> Adware.NaviPromo : Erreur durant le nettoyage	[1516] VM_10001000 -> Adware.NaviPromo : Erreur durant le nettoyage	[1544] VM_00A81000 -> Adware.NaviPromo : Erreur durant le nettoyage	[1568] VM_00C81000 -> Adware.NaviPromo : Erreur durant le nettoyage	[1588] VM_00AA1000 -> Adware.NaviPromo : Erreur durant le nettoyage	[1604] VM_010F1000 -> Adware.NaviPromo : Erreur durant le nettoyage	[1632] VM_04371000 -> Adware.NaviPromo : Erreur durant le nettoyage	[1640] VM_00D31000 -> Adware.NaviPromo : Erreur durant le nettoyage	[1656] VM_00921000 -> Adware.NaviPromo : Erreur durant le nettoyage	[1668] VM_10001000 -> Adware.NaviPromo : Erreur durant le nettoyage	[1692] VM_00AF1000 -> Adware.NaviPromo : Erreur durant le nettoyage	[1824] VM_00921000 -> Adware.NaviPromo : Erreur durant le nettoyage	[1860] VM_00C51000 -> Adware.NaviPromo : Erreur durant le nettoyage	[1872] VM_01511000 -> Adware.NaviPromo : Erreur durant le nettoyage	[1884] VM_00961000 -> Adware.NaviPromo : Erreur durant le nettoyage	[1940] VM_00A21000 -> Adware.NaviPromo : Erreur durant le nettoyage	[220] VM_01201000 -> Adware.NaviPromo : Erreur durant le nettoyage	[1424] VM_009B1000 -> Adware.NaviPromo : Erreur durant le nettoyage	[2152] VM_01501000 -> Adware.NaviPromo : Erreur durant le nettoyage	[2924] VM_00801000 -> Adware.NaviPromo : Erreur durant le nettoyage	C:\WINDOWS\system32\__delete_on_reboot__msclock32.dll -> Adware.NaviPromo : Nettoyer et sauvegarder::Fin du rapport

Utilisateur anonyme · Answer

Salut Cine, ca va?Telecharge cecihttp://www.silentrunners.org/Silent%20Runners.vbs Execute le,atends quelques minutes, il va creer ensuite un dossier juste a coté de silent runner sous format texte, copie/colle ce qu il te donneraA+

Cine · Answer

BonjourCa va bien, je suis déjà en week end !J'ai exécuté puis appuyer sur ok et depuis il n'y a rien qui apparait depuis 15 min, est-ce normal?

Utilisateur anonyme · Answer

Salutah super, long we alors !Alors Lorsque tu le lances, il va chercher , tu le laisses faireApres 5 min, tu vas a coté du programme que tu as lancer, il y a un rapport .txt qui  s est créecopie/colle le rapporta+

Cine · Answer

ah j'avais pas pigé, je croyais qu'une nouvelle fenêtre allait s'ouvrir. Le voilà..."Silent Runners.vbs", revision 41, http://www.silentrunners.org/Operating System: Windows XP SP2Output limited to non-default values, except where indicated by "{++}"Startup items buried in registry:---------------------------------HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++}"CTFMON.EXE" = "C:\WINDOWS\system32\ctfmon.exe" [MS]"Looney Tunes" = "C:\Program Files\Looney Tunes\Looney Tunes.exe" [file not found]"LogitechSoftwareUpdate" = ""C:\Program Files\Logitech\Video\ManifestEngine.exe" boot" ["Logitech Inc."]"LDM" = "C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe" ["Logitech"]"IncrediMail" = "C:\Program Files\IncrediMail\bin\IncMail.exe /c" ["IncrediMail, Ltd."]"MessengerPlus3" = ""C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart" ["Patchou"]"Instant Access" = "rundll32.exe EGDACCESS_1072.dll,InstantAccess" [MS]"msnmsgr" = ""C:\Program Files\MSN Messenger\msnmsgr.exe" /background" [MS]HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++}"SoundMan" = "SOUNDMAN.EXE" ["Avance Logic, Inc."]"Norman ZANDA" = "C:\NORMAN\nvc\BIN\ZLH.EXE /LOAD /SPLASH" [null data]"NvCplDaemon" = "RUNDLL32.EXE NvQTwk,NvCplDaemon initialize" [MS]"nwiz" = "nwiz.exe /install" ["NVIDIA Corporation"]"NeroCheck" = "C:\WINDOWS\System32\NeroCheck.exe" ["Ahead Software Gmbh"]"WorksFUD" = "C:\Program Files\Microsoft Works\wkfud.exe" ["Microsoft® Corporation"]"Microsoft Works Portfolio" = "C:\Program Files\Microsoft Works\WksSb.exe /AllUsers" ["Microsoft® Corporation"]"Microsoft Works Update Detection" = "C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe" ["Microsoft® Corporation"]"MoneyStartUp10.0" = ""C:\Program Files\Microsoft Money\System\Activation.exe"" [MS]"WooCnxMon" = "C:\PROGRA~1\Wanadoo\CnxMon.exe" [empty string]"WOOWATCH" = "C:\PROGRA~1\Wanadoo\Watch.exe" ["France Télécom R&D"]"WOOTASKBARICON" = "C:\PROGRA~1\Wanadoo\TaskbarIcon.exe" ["France Télécom R&D"]"QuickTime Task" = ""C:\Program Files\QuickTime\qttask.exe" -atboottime" ["Apple Computer, Inc."]"LVCOMSX" = "C:\WINDOWS\System32\LVCOMSX.EXE" ["Logitech Inc."]"LogitechVideoRepair" = "C:\Program Files\Logitech\Video\ISStart.exe" ["Logitech Inc."]"LogitechVideoTray" = "C:\Program Files\Logitech\Video\LogiTray.exe" ["Logitech Inc."]"TkBellExe" = ""C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe"  -osboot" ["RealNetworks, Inc."]"MessengerPlus3" = ""C:\Program Files\MessengerPlus! 3\MsgPlus.exe"" ["Patchou"]"njmsxgq" = "c:\windows\system32\njmsxgq.exe njmsxgq" [null data]"KernelFaultCheck" = "C:\WINDOWS\system32\dumprep 0 -k" [MS]HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}\(Default) = "AcroIEHlprObj Class" [from CLSID]  -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx" [empty string]{53707962-6F74-2D53-2644-206D7942484F}\(Default) = (no title provided)  -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Spybot - Search & Destroy\SDHelper.dll" ["Safer Networking Limited"]{BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0}\(Default) = "Barre d'outils MSN Search Helper" [from CLSID]  -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll" [MS]{FDD3B846-8D59-4ffb-8758-209B6AD74ACC}\(Default) = (no title provided)  -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Microsoft Money\System\mnyviewer.dll" [MS]HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\"{42071714-76d4-11d1-8b24-00a0c9068ff3}" = "Extension Affichage Panorama du Panneau de configuration"  -> {CLSID}\InProcServer32\(Default) = "deskpan.dll" [file not found]"{88895560-9AA2-1069-930E-00AA0030EBC8}" = "Extension icône HyperTerminal"  -> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\System32\hticons.dll" ["Hilgraeve, Inc."]"{1CDB2949-8F65-4355-8456-263E7C208A5D}" = "Explorateur de Bureau"  -> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\System32\nvshell.dll" ["NVIDIA Corporation"]"{1E9B04FB-F9E5-4718-997B-B8DA88302A47}" = "Desktop Explorer Menu"  -> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\System32\nvshell.dll" ["NVIDIA Corporation"]"{42042206-2D85-11D3-8CFF-005004838597}" = "Microsoft Office HTML Icon Handler"  -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Microsoft Office\Office10\msohev.dll" [MS]"{0006F045-0000-0000-C000-000000000046}" = "Microsoft Outlook Custom Icon Handler"  -> {CLSID}\InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\Office\OLKFSTUB.DLL" [MS]"{C14F7681-33D8-11D3-A09B-00500402F30B}" = "CtxMenu"  -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Fujifilm\Print@Auchan\pafshell.dll" [empty string]"{400CFEE2-39D0-46DC-96DF-E0BB5A4324B3}" = "Mes photos Logitech"  -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Logitech\Video\Namespc2.dll" ["Logitech Inc."]"{640167b4-59b0-47a6-b335-a6b3c0695aea}" = "Portable Media Devices"  -> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\System32\Audiodev.dll" [MS]"{cc86590a-b60a-48e6-996b-41d25ed39a1e}" = "Portable Media Devices Menu"  -> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\System32\Audiodev.dll" [MS]"{F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4}" = "Shell Extensions for RealOne Player"  -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Real\RealPlayer\rpshell.dll" ["RealNetworks, Inc."]"{13E7F612-F261-4391-BEA2-39DF4F3FA311}" = "Windows Desktop Search"  -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\MSN Toolbar Suite\EXT\02.05.0001.1119\fr-fr\msnlExt.dll" [MS]"{97090E2F-3062-4459-855B-014F0D3CDBB1}" = "MSN Deskbar"  -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\MSN Toolbar Suite\DB\02.05.0001.1119\fr-fr\deskbar.dll" [MS]"{ACBA0BA3-ACED-4E02-9221-794F7588DD9C}" = "All To MP3 Converter"  -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\LitexMedia\All To MP3 Converter\MP3ShellExt.dll" [empty string]HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\INFECTION WARNING! "{54D9498B-CF93-414F-8984-8CE7FDE0D391}" = "ewido shell guard"  -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\ewido anti-malware\shellhook.dll" ["TODO: <Firmenname>"]HKLM\Software\Classes\*\shellex\ContextMenuHandlers\CtxMenu\(Default) = "{C14F7681-33D8-11D3-A09B-00500402F30B}"  -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Fujifilm\Print@Auchan\pafshell.dll" [empty string]ewido\(Default) = "{57BD36D7-CE32-4600-9B1C-1A0C47EFC02E}"  -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\ewido anti-malware\context.dll" ["ewido networks"]IMMenuShellExt\(Default) = "{F8984111-38B6-11D5-8725-0050DA2761C4}"  -> {CLSID}\InProcServer32\(Default) = "C:\PROGRA~1\INCRED~1\bin\ImShExt.dll" ["IncrediMail, Ltd."]NVC\(Default) = "{D5507020-DB45-11d1-A5F0-00600872F78D}"  -> {CLSID}\InProcServer32\(Default) = "C:\NORMAN\nvc\BIN\NVCSE.DLL" ["Norman Data Defense Systems"]ZMP3ShellExt\(Default) = "{ACBA0BA3-ACED-4E02-9221-794F7588DD9C}"  -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\LitexMedia\All To MP3 Converter\MP3ShellExt.dll" [empty string]HKLM\Software\Classes\Directory\shellex\ContextMenuHandlers\ewido\(Default) = "{57BD36D7-CE32-4600-9B1C-1A0C47EFC02E}"  -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\ewido anti-malware\context.dll" ["ewido networks"]MP3ShellExt\(Default) = "{ACBA0BA3-ACED-4E02-9221-794F7588DD9C}"  -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\LitexMedia\All To MP3 Converter\MP3ShellExt.dll" [empty string]NVC\(Default) = "{D5507020-DB45-11d1-A5F0-00600872F78D}"  -> {CLSID}\InProcServer32\(Default) = "C:\NORMAN\nvc\BIN\NVCSE.DLL" ["Norman Data Defense Systems"]HKLM\Software\Classes\Folder\shellex\ContextMenuHandlers\NVC\(Default) = "{D5507020-DB45-11d1-A5F0-00600872F78D}"  -> {CLSID}\InProcServer32\(Default) = "C:\NORMAN\nvc\BIN\NVCSE.DLL" ["Norman Data Defense Systems"]Active Desktop and Wallpaper:-----------------------------Active Desktop is disabled at this entry:HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellStateHKCU\Control Panel\Desktop\"Wallpaper" = "C:\Documents and Settings\DELPHINE\Local Settings\Application Data\Microsoft\Wallpaper1.bmp"Enabled Screen Saver:---------------------HKCU\Control Panel\Desktop\"SCRNSAVE.EXE" = "C:\WINDOWS\System32\ssmyst.scr" [MS]Startup items in "DELPHINE" & "All Users" startup folders:----------------------------------------------------------C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage"Adobe Gamma Loader.exe" -> shortcut to: "C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe" ["Adobe Systems, Inc."]"Booster Wanadoo" -> shortcut to: "C:\Program Files\Booster Wanadoo\wanadoo_booster.exe" ["SlipStream Data Inc."]"InterVideo WinCinema Manager" -> shortcut to: "C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe" [empty string]"Logitech Desktop Messenger" -> shortcut to: "C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe /start" ["Logitech"]"Microsoft Office" -> shortcut to: "C:\Program Files\Microsoft Office\Office\OSA9.EXE -b -l" [MS]"Rappels du Calendrier Microsoft Works" -> shortcut to: "C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkcalrem.exe" ["Microsoft® Corporation"]"Windows Desktop Search" -> shortcut to: "C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearch.exe  /startup" [MS]Winsock2 Service Provider DLLs:-------------------------------Namespace Service ProvidersHKLM\System\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++}000000000001\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]000000000002\LibraryPath = "%SystemRoot%\System32\winrnr.dll" [MS]000000000003\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]Transport Service ProvidersHKLM\System\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++}0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range:%SystemRoot%\system32\mswsock.dll [MS], 01 - 03, 06 - 19%SystemRoot%\system32\rsvpsp.dll [MS], 04 - 05Toolbars, Explorer Bars, Extensions:------------------------------------ToolbarsHKCU\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser\"{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0}" = "Barre d'outils MSN Search" [from CLSID]  -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll" [MS]HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\"{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0}" = "Barre d'outils MSN Search" [from CLSID]  -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll" [MS]HKLM\Software\Microsoft\Internet Explorer\Toolbar\"{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0}" = "Barre d'outils MSN Search" [from CLSID]  -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll" [MS]Explorer BarsHKCU\Software\Microsoft\Internet Explorer\Explorer Bars\{66B90ADB-0BE3-40AE-8680-84A6F0577CA0}\ = "Web Assistant" [from CLSID]  -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\HbTools\Bin\4.7.0.0\HbtHostIE.dll" [file not found]Extensions (Tools menu items, main toolbar menu buttons)HKCU\Software\Microsoft\Internet Explorer\Extensions\{1462651F-F4BA-4C76-A001-C4284D0FE16E}\"ButtonText" = "Wanadoo""Exec" = "http://www.wanadoo.fr" [file not found]HKLM\Software\Microsoft\Internet Explorer\Extensions\{85D1F590-48F4-11D9-9669-0800200C9A66}\"MenuText" = "Uninstall BitDefender Online Scanner v8""Exec" = "%windir%\bdoscandel.exe" [null data]{E023F504-0C5A-4750-A1E7-A9046DEA8A21}\"ButtonText" = "MoneySide""CLSIDExtension" = "{301DA1EE-F65C-4188-A417-9E915CC8FBFA}"  -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Microsoft Money\System\mnyviewer.dll" [MS]{FB5F1910-F110-11D2-BB9E-00C04F795683}\"ButtonText" = "Messenger""MenuText" = "Windows Messenger""Exec" = "C:\Program Files\Messenger\msmsgs.exe" [MS]Miscellaneous IE Hijack Points------------------------------C:\WINDOWS\INF\IERESET.INF (used to "Reset Web Settings")Added lines (compared with English-language version):[Strings]: SAFESITE_VALUE="http://home.microsoft.com/intl/fr/"Missing lines (compared with English-language version):[Strings]: 1 lineHKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\"{08C06D61-F1F3-4799-86F8-BE1A89362C85}" = "Search Class" [from CLSID]  -> {CLSID}\InProcServer32\(Default) = "C:\PROGRA~1\Wanadoo\SEARCH~1.DLL" [empty string]Running Services (Display Name, Service Name, Path {Service DLL}):------------------------------------------------------------------EPSON Printer Status Agent2, EPSONStatusAgent2, "C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe" ["SEIKO EPSON CORPORATION"]ewido security suite control, ewido security suite control, "C:\Program Files\ewido anti-malware\ewidoctrl.exe" ["ewido networks"]ewido security suite guard, ewido security suite guard, "C:\Program Files\ewido anti-malware\ewidoguard.exe" ["ewido networks"]Norman NJeeves, Norman NJeeves, "C:\NORMAN\nvc\BIN\NJEEVES.EXE" [null data]Norman Virus Control on-access component, nvcoas, "C:\NORMAN\nvc\BIN\nvcoas.exe" ["Norman ASA"]Norman Virus Control Scheduler, NVCScheduler, "C:\NORMAN\nvc\BIN\NVCSCHED.EXE" ["Norman Data Defense Systems"]Norman ZANDA, Norman ZANDA, "C:\Norman\NVC\BIN\Zanda.exe" [null data]NVIDIA Driver Helper Service, NVSvc, "C:\WINDOWS\System32\nvsvc32.exe" ["NVIDIA Corporation"]Windows User Mode Driver Framework, UMWdf, "C:\WINDOWS\System32\wdfmgr.exe" [MS]Print Monitors:---------------HKLM\System\CurrentControlSet\Control\Print\Monitors\EPSON V5 2KMonitor\Driver = "EBPMON2.DLL" ["SEIKO EPSON CORPORATION"]----------+ This report excludes default entries except where indicated.+ To see *everywhere* the script checks and *everything* it finds,  launch it from a command prompt or a shortcut with the -all parameter.+ To search all directories of local fixed drives for DESKTOP.INI  DLL launch points and all Registry CLSIDs for dormant Explorer Bars,  use the -supp parameter or answer "No" at the first message box.---------- (total run time: 64 seconds, including 18 seconds for message boxes)

Utilisateur anonyme · Answer

Salut1/dans ajout/suppression de programme, desinstalles:Instant Access2/Télécharge: Pocket Killbox ici http://www.downloads.subratam.org/KillBox.exe :: Démo d utilisation (merci a Balltrap34 pour cette réalisation) ::http://pageperso.aol.fr/balltrap34/killbox.htm 3/Double clic sur killbox.exe (Pocket Killbox) - coche: delete on reboot - Dans "Full Path of File to Delete" copie et colle: c:\windows\system32
jmsxgq.exe - clique sur la croix rouge - une fenêtre va apparaître pour confirmation clique sur YES - une seconde fenêtre te demande si tu veux redémarrer clique sur YES Laisse le pc redémarrer.4/Relance ewido et donne le rapportA+

Cine · Answer

Je n'arrive pas à supprimer "Instant Access ", quand je clic sur "modifier/supprimer", ça veux me faire installer quelque chose.
D'habitude pour supprimer, je n'ai pas besoin de faire autre chose.
Comment faire?

Utilisateur anonyme · Answer

Essai en sans echeca+

Cine · Answer

Ce n'est toujours pas possible de supprimer le programme, par contre j'ai supprimé le dossier concerné dans "program files".je fais quoi maintenant ?merci

Utilisateur anonyme · Answer

Re,le 2/ et 3/a+

Cine · Answer

voilà :

---------------------------------------------------------
ewido anti-malware - Rapport de scan
---------------------------------------------------------

+ Créé le: 17:21:11, 06/01/2006
+ Somme de contrôle: 9E91784D

+ Résultats du scan:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Instant Access -> Dialer.Generic : Nettoyer et sauvegarder
HKU\S-1-5-21-1614895754-2000478354-682003330-1004\Software\EGDHTML -> Dialer.Generic : Nettoyer et sauvegarder
C:\Documents and Settings\DELPHINE\Local Settings\Temporary Internet Files\Content.IE5\89ABCDEF\DialpassUninstall[1].exe -> Spyware.NaviPromo : Nettoyer et sauvegarder

::Fin du rapport

Utilisateur anonyme · Answer

Re,tu peux pas le desinstaller Instant Access ?a+

Cine · Answer

J'ai voulu réessayer de désinstaller et il se trouve qu'Instant Acces n'est plus dans mes programmes.C'est à n'y rien comprendre !Comment vous faites pour connaitre tout ça ?

Utilisateur anonyme · Answer

Re,

Moi perso j ai appris sur Balltrap34 et Moe31
Et ensuite suffit d interpreter ce que l on demande

refais ceci stp

HijackThis -> Open the misc tools sections -> open Uninstall manager -> clique sur "Save list" -> enregistre le fichier -> fais-en un copier/coller ici.

Cine · Answer

Moi je dis CHAPEAU aux personnes qui savent "bidouiller" un pc, il y a tellement de choses qui se cachent la-dedans !

----------------------------------------------------------------------

Adobe Acrobat 4.0
Adobe Acrobat 5.0
Adobe Photoshop Elements
All To MP3 Converter 1.6rc4
ArcSoft PhotoImpression
Barre d'outils MSN Search
Booster Wanadoo
CleanUp!
Comptabilité
Construisez votre maison
Correctif Windows XP - KB873333
Correctif Windows XP - KB873339
Correctif Windows XP - KB885250
Correctif Windows XP - KB885835
Correctif Windows XP - KB885836
Correctif Windows XP - KB885884
Correctif Windows XP - KB886185
Correctif Windows XP - KB887472
Correctif Windows XP - KB887742
Correctif Windows XP - KB888113
Correctif Windows XP - KB888302
Correctif Windows XP - KB890047
Correctif Windows XP - KB890175
Correctif Windows XP - KB890859
Correctif Windows XP - KB890923
Correctif Windows XP - KB891781
Correctif Windows XP - KB893066
Correctif Windows XP - KB893086
Crazy Taxi
DivX
DivX Converter
DivX Converter
DivX Player
Encyclopédie Standard Microsoft Encarta 2002
EPSON Copy Utility
EPSON Logiciel imprimante
EPSON Photo Print
EPSON PhotoQuicker3.2
EPSON PRINT Image Framer Tool1.1
EPSON Smart Panel
EPSON TWAIN 5
ewido anti-malware
Extension Système de Microsoft Money
Heredis 2001
Heredis 7
Heredis 8
HijackThis 1.99.1
IncrediMail Xe
Installation de Microsoft Works Suite 2002
InterVideo WinDVD 4
Lecteur Windows Media 10
Logitech Desktop Messenger
Logitech Print Service
Logitech QuickCam
Mediamixer 4.03
Messenger Plus! 3
Microsoft AutoRoute 2002
Microsoft Money
Microsoft Office 2000 Professional
Microsoft Picture It! Express 2001
Microsoft Picture It! Photo 2002
Microsoft Word 2002
Microsoft Works 6.0
Microsoft Works Suite -- Macro complémentaire Microsoft Word
Mise à jour de sécurité pour Windows XP (KB883939)
Mise à jour de sécurité pour Windows XP (KB890046)
Mise à jour de sécurité pour Windows XP (KB896358)
Mise à jour de sécurité pour Windows XP (KB896422)
Mise à jour de sécurité pour Windows XP (KB896428)
MSN Messenger 7.5
Nero
njmsxgq
NVC v5.30
NVIDIA Windows 2000/XP Display Drivers
PCFriendly
PhotoFiltre
PowerPoint to Video 1.3.0
Print@Auchan
Programme de gestion Camera de Logitech®
RealPlayer
ScanToWeb
Shockwave
Spybot - Search & Destroy 1.4
Starsky&Hutch
Tetris
Tetris4000
Wanadoo
Windows Installer 3.1 (KB893803)
Windows Installer 3.1 (KB893803)
Windows Media Format Runtime
Windows XP Service Pack 2
WJChess 1.0

Utilisateur anonyme · Answer

salutOn en voit la fin lolDemarer < recherchernjmsxgq dans le c:Dis moi les resultatsa+

Cine · Answer

J'ai ces 4 fichiers :njmsxgq.exe dans C:/!KillBoxnjmsxgq.dat dans C:/WINDOWS/system32njmsxgq_nav.dat dans C:/WINDOWS/system32njmsxgq_navps.dat dans C:/WINDOWS/system32Bon appétit !!

Utilisateur anonyme · Answer

ok,J ai le meme soucis sur un autre forum, recherche les, tu les ouvresnjmsxgq.dat njmsxgq_nav.dat njmsxgq_navps.datTu me copie/colle ce qu il y a a l interieura+

Cine · Answer

C'est complèment illisible !
En fait, ça veut ouvrir sous Word mais demande une conversion de fichier, là ça me met que des symboles.
J'ai essayé tous les formats possibles pour voir mais rien ne reste sur le fichier ensuite.

Utilisateur anonyme · Answer

ok, je m en doutaisdesinstalles ceci njmsxgq puis supprime dans le systeme32njmsxgq.dat njmsxgq_nav.dat njmsxgq_navps.dat A+

Cine · Answer

j'ai supprimé ce trucBonne soirée

Utilisateur anonyme · Answer

SalutOu en sont tes soucis?a+

Cine · Answer

Bonjour,
ça va bien?
Depuis ce matin, je n'ai pas eu une seule pub qui s'est inscrustée!
Je vous dis donc un grand MERCI pour tout ce que vous avez fait pour m'aider !!
J'espère que ça ne va pas recommencer...
Je vous souhaite un bon week end
Cine

Utilisateur anonyme · Answer

Coucou

Je suis content pour toi !
Recache tes fichiers caches et cree un point de restauration.

Recommencer? Si tu es bien proteger, il n y auras aucuns soucis, pour te proteger, regarde ici:

http://www.commentcamarche.net/faq/sujet-2432-S%E9curit%E9-Prot%E9ger-un-ordinateur-contre-les-malwares-d%27Internet

a+

Cine · Answer

Encore merci pour ces conseils, je veillerai à faire attention...Cine

Utilisateur anonyme · Answer

De rienBon week endA+

Problème avec net offers

80 réponses

Discussions similaires