Spy sheriff : your somputer is infected!

voici le rapport de smitfraudfix, en espérant une aide tres précieuse pour ne plus avoir ce rognotudju de message "your computer is infected!"

SmitFraudFix v2.25

Rapport fait à 14:02:41,71 le 18/03/2006
Executé à partir de C:\Documents and Settings\Pascal.UNICORNI-766E29\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600]

»»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\

C:\winstall.exe PRESENT !

»»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS

C:\WINDOWS\country.exe PRESENT !
C:\WINDOWS\kl1.exe PRESENT !
C:\WINDOWS\secure32.html PRESENT !
C:\WINDOWS\tool1.exe PRESENT !
C:\WINDOWS\tool2.exe PRESENT !
C:\WINDOWS\tool3.exe PRESENT !
C:\WINDOWS\tool4.exe PRESENT !
C:\WINDOWS\toolbar.exe PRESENT !

»»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS\system

»»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS\Web

»»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS\system32

C:\WINDOWS\system32\paytime.exe PRESENT !

»»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS\system32\LogFiles

»»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\Documents and Settings\Pascal.UNICORNI-766E29\Application Data

C:\Documents and Settings\Pascal.UNICORNI-766E29\Application Data\Install.dat PRESENT !

»»»»»»»»»»»»»»»»»»»»»»»» Recherche Menu Démarrer

»»»»»»»»»»»»»»»»»»»»»»»» Recherche Favoris

»»»»»»»»»»»»»»»»»»»»»»»» Recherche Bureau

»»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\Program Files

C:\Program Files\SpySheriff\ PRESENT!

»»»»»»»»»»»»»»»»»»»»»»»» Recherche présence de clés corrompues

»»»»»»»»»»»»»»»»»»»»»»»» Recherche éléments du bureau

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Ma page d'accueil"

»»»»»»»»»»»»»»»»»»»»»»»» Recherche Sharedtaskscheduler

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Pré-chargeur Browseui"

[HKEY_CLASSES_ROOT\CLSID\{438755C2-A8BA-11D1-B96B-00A0C90312E1}\InProcServer32]
@="%SystemRoot%\system32\browseui.dll"

[HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{438755C2-A8BA-11D1-B96B-00A0C90312E1}\InProcServer32]
@="%SystemRoot%\system32\browseui.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Démon de cache des catégories de composant"

[HKEY_CLASSES_ROOT\CLSID\{8C7461EF-2B13-11d2-BE35-3078302C2030}\InProcServer32]
@="%SystemRoot%\system32\browseui.dll"

[HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{8C7461EF-2B13-11d2-BE35-3078302C2030}\InProcServer32]
@="%SystemRoot%\system32\browseui.dll"

»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

»»»»»»»»»»»»»»»»»»»»»»»» Fin du rapport
Configuration: PC / windows XP

6 réponses

  1. Contributeur
    Bonjour,

    Fais cette manipulation :

    - Redémarre le PC en mode "sans échec" : tu tapotes sur la touche F8 de ton clavier (ou bien F5 selon la version de Windows) et tu choisis le mode "sans échec".

    - Tu relances SmitfraudFix cette fois-ci en choisissant l'option 2 et tu réponds oui à tout.

    Colle le nouveau rapport ensuite.

    Dis moi si le problème est reglé.

    ++
    0
    1. Oki, c'est l'option 2 a été faite, le pb est apparement reglé mais depuis, et je sais pas s'il y a un lien, je peux plus avoir msn et ma pile bluetooth bugue souvent ... dur dur

      Merci tout de meme !
      0
  2. Contributeur
    De rien,

    Bon surf ^^
    0
    1. Rebonjour,

      depuis mon infection par spy sheriff et magré avoir lancé smitfraufix avec option 1 puis 2, je ne peux plus lancer msn et et je peux plus connecter mon smartphone par bluetooth. Au secours !!
      0
      1. Au fait j'avais oublié de mettre le rapport smitfraudfix avé l'option 2

        SmitFraudFix v2.25

        Rapport fait à 21:24:06,39 le 24/03/2006
        Executé à partir de H:\SmitfraudFix
        OS: Microsoft Windows XP [version 5.1.2600]

        »»»»»»»»»»»»»»»»»»»»»»»» Arret des processus

        »»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés

        »»»»»»»»»»»»»»»»»»»»»»»» Nettoyage Fichiers Temporaires

        »»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre

        Nettoyage terminé.

        »»»»»»»»»»»»»»»»»»»»»»»» Fin du rapport
        0
        1. Par curiosté, j'ai refait une option 1 avec, on dirai qu'il ya encore quelque chose ?

          SmitFraudFix v2.25

          Rapport fait à 21:38:02,45 le 24/03/2006
          Executé à partir de H:\SmitfraudFix
          OS: Microsoft Windows XP [version 5.1.2600]

          »»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\

          »»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS

          »»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS\system

          »»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS\Web

          »»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS\system32

          »»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS\system32\LogFiles

          »»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\Documents and Settings\Pascal.UNICORNI-766E29\Application Data

          »»»»»»»»»»»»»»»»»»»»»»»» Recherche Menu Démarrer

          »»»»»»»»»»»»»»»»»»»»»»»» Recherche Favoris

          »»»»»»»»»»»»»»»»»»»»»»»» Recherche Bureau

          »»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\Program Files

          »»»»»»»»»»»»»»»»»»»»»»»» Recherche présence de clés corrompues

          »»»»»»»»»»»»»»»»»»»»»»»» Recherche éléments du bureau

          »»»»»»»»»»»»»»»»»»»»»»»» Recherche Sharedtaskscheduler

          SrchSTS.exe by S!Ri
          Search SharedTaskScheduler's .dll

          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
          "{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Pré-chargeur Browseui"

          [HKEY_CLASSES_ROOT\CLSID\{438755C2-A8BA-11D1-B96B-00A0C90312E1}\InProcServer32]
          @="%SystemRoot%\system32\browseui.dll"

          [HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{438755C2-A8BA-11D1-B96B-00A0C90312E1}\InProcServer32]
          @="%SystemRoot%\system32\browseui.dll"

          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
          "{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Démon de cache des catégories de composant"

          [HKEY_CLASSES_ROOT\CLSID\{8C7461EF-2B13-11d2-BE35-3078302C2030}\InProcServer32]
          @="%SystemRoot%\system32\browseui.dll"

          [HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{8C7461EF-2B13-11d2-BE35-3078302C2030}\InProcServer32]
          @="%SystemRoot%\system32\browseui.dll"

          »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

          »»»»»»»»»»»»»»»»»»»»»»»» Fin du rapport
          0
          1. Et enfin le rapport HiJack this

            Logfile of HijackThis v1.99.1
            Scan saved at 21:43:43, on 24/03/2006
            Platform: Windows XP SP2 (WinNT 5.01.2600)
            MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

            Running processes:
            C:\WINDOWS\System32\smss.exe
            C:\WINDOWS\system32\winlogon.exe
            C:\WINDOWS\system32\services.exe
            C:\WINDOWS\system32\lsass.exe
            C:\WINDOWS\system32\svchost.exe
            C:\WINDOWS\System32\svchost.exe
            e:\Ahead\InCD\InCDsrv.exe
            C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
            C:\WINDOWS\explorer.exe
            C:\WINDOWS\system32\spoolsv.exe
            C:\WINDOWS\system32\RunDll32.exe
            C:\WINDOWS\TWAIN_32\D66U\D066UUTY.EXE
            E:\Ahead\InCD\InCD.exe
            E:\Adobe\Adobe Version Cue\ControlPanel\VersionCueTray.exe
            C:\Program Files\iTunes\iTunesHelper.exe
            C:\Program Files\QuickTime\qttask.exe
            C:\WINDOWS\system32\RUNDLL32.EXE
            C:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
            C:\Program Files\Fichiers communs\PCSuite\DataLayer\DataLayer.exe
            E:\Nokia\Nokia PC Suite 6\LaunchApplication.exe
            E:\logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
            E:\Nokia\Nokia PC Suite 6\PcSync2.exe
            E:\Adobe\Adobe Acrobat 6.0\Distillr\acrotray.exe
            C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe
            E:\logitech\SetPoint\KEM.exe
            C:\PROGRA~1\FICHIE~1\PCSuite\Services\SERVIC~1.EXE
            E:\LOGITECH\SETPOINT\KHALMNPR.EXE
            C:\PROGRA~1\FICHIE~1\Nokia\MPAPI\MPAPI3s.exe
            C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
            C:\WINDOWS\system32\inetsrv\inetinfo.exe
            E:\Kerio\Personal Firewall 4\kpf4ss.exe
            C:\WINDOWS\system32\nvsvc32.exe
            E:\Kerio\Personal Firewall 4\kpf4gui.exe
            C:\WINDOWS\System32\snmp.exe
            C:\WINDOWS\system32\svchost.exe
            E:\Kerio\Personal Firewall 4\kpf4gui.exe
            C:\Program Files\iPod\bin\iPodService.exe
            C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NSMdtr.exe
            C:\Program Files\Internet Explorer\IEXPLORE.EXE
            C:\Program Files\Internet Explorer\IEXPLORE.EXE
            C:\WINDOWS\system32\NOTEPAD.EXE
            H:\HijackThis.exe

            R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
            R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
            R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 192.168.0.1:8080
            R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
            R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
            F2 - REG:system.ini: Shell=explorer.exe "C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\ibm00001.exe"
            O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Adobe\Adobe Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
            O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\PROGRA~1\eoRezo\EoAdv\EOREZO~1.DLL
            O2 - BHO: CNisExtBho Class - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll
            O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - E:\Adobe\Adobe Acrobat 6.0\Acrobat\AcroIEFavClient.dll
            O3 - Toolbar: Norton Internet Security - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll
            O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - E:\Adobe\Adobe Acrobat 6.0\Acrobat\AcroIEFavClient.dll
            O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
            O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
            O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
            O4 - HKLM\..\Run: [D066UUtility] C:\WINDOWS\TWAIN_32\D66U\D066UUTY.EXE
            O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
            O4 - HKLM\..\Run: [InCD] e:\Ahead\InCD\InCD.exe
            O4 - HKLM\..\Run: [CloneDVDElbyDelay] "e:\Elaborate Bytes\CloneDVD\ElbyCheck.exe" /L ElbyDelay
            O4 - HKLM\..\Run: [ElbyCheckElbyCDFL] "e:\elaborate bytes\clonecd\ElbyCheck.exe" /L ElbyCDFL
            O4 - HKLM\..\Run: [AdobeVersionCue] e:\Adobe\Adobe Version Cue\ControlPanel\VersionCueTray.exe
            O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
            O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
            O4 - HKLM\..\Run: [EoEngine] "C:\Program Files\eoRezo\EoEngine.exe"
            O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
            O4 - HKLM\..\Run: [mmtask] c:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
            O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
            O4 - HKLM\..\Run: [DataLayer] C:\Program Files\Fichiers communs\PCSuite\DataLayer\DataLayer.exe
            O4 - HKLM\..\Run: [PCSuiteTrayApplication] E:\Nokia\Nokia PC Suite 6\LaunchApplication.exe -onlytray
            O4 - HKCU\..\Run: [LDM] E:\logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
            O4 - HKCU\..\Run: [Shell] "C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\ibm00001.exe"
            O4 - HKCU\..\Run: [PcSync] E:\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
            O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
            O4 - Global Startup: Assistant d'Acrobat.lnk = E:\Adobe\Adobe Acrobat 6.0\Distillr\acrotray.exe
            O4 - Global Startup: BTTray.lnk = ?
            O4 - Global Startup: Logitech Desktop Messenger.lnk = E:\logitech\Desktop Messenger\8876480\Program\LDMConf.exe
            O4 - Global Startup: Logitech SetPoint.lnk = E:\logitech\SetPoint\KEM.exe
            O4 - Global Startup: Microsoft Office.lnk = E:\office\Office\OSA9.EXE
            O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
            O8 - Extra context menu item: Envoyer à &Bluetooth - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie_ctx.htm
            O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
            O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
            O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
            O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
            O14 - IERESET.INF: START_PAGE_URL=http://www.files-ftp.com/~unicorni/phpBB2/index.php
            O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
            O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
            O16 - DPF: {EB387D2F-E27B-4D36-979E-847D1036C65D} (QDiagHUpdateObj Class) - http://h30043.www3.hp.com/hpdj/fr/check/qdiagh.cab?326
            O17 - HKLM\System\CCS\Services\Tcpip\..\{990D61BA-B6D1-418E-A604-52F970F3B6FF}: NameServer = 192.168.1.1
            O18 - Protocol: bw+0 - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw+0s - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw-0 - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw-0s - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw00 - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw00s - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw10 - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw10s - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw20 - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw20s - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw30 - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw30s - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw40 - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw40s - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw50 - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw50s - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw60 - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw60s - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw70 - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw70s - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw80 - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw80s - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw90 - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw90s - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwa0 - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwa0s - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwb0 - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwb0s - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwc0 - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwc0s - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwd0 - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwd0s - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwe0 - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwe0s - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwf0 - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwf0s - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - E:\logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
            O18 - Protocol: bwg0 - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwg0s - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwh0 - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwh0s - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwi0 - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwi0s - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwj0 - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwj0s - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwk0 - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwk0s - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwl0 - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwl0s - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwm0 - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwm0s - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwn0 - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwn0s - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwo0 - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwo0s - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwp0 - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwp0s - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwq0 - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwq0s - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwr0 - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwr0s - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bws0 - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bws0s - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwt0 - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwt0s - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwu0 - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwu0s - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwv0 - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwv0s - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bww0 - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bww0s - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwx0 - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwx0s - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwy0 - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwy0s - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwz0 - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwz0s - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
            O18 - Protocol: offline-8876480 - {DFF40F60-39FF-40C9-8CA6-985C56EF5BA0} - E:\logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O20 - Winlogon Notify: LBTServ - C:\Program Files\Fichiers communs\Logitech\Bluetooth\lbtserv.dll
            O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
            O23 - Service: AdobeVersionCue - Adobe Sytems - E:\Adobe\Adobe Version Cue\service\VersionCue.exe
            O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
            O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
            O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
            O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
            O23 - Service: InCD Helper (InCDsrv) - Ahead Software AG - e:\Ahead\InCD\InCDsrv.exe
            O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
            O23 - Service: Kerio Personal Firewall 4 (KPF4) - Kerio Technologies - E:\Kerio\Personal Firewall 4\kpf4ss.exe
            O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
            0