MSN cheval de troie help!

shadow22 -  
Bonjour, exusez moi mais la je panique gentiellement, mon ordinateur vien d'être infecté par un virus ( un cheval de troie) voila je crois bien que le problème vient de MSN messenger, après avoir cliquer sur un lien sans réfléchir, mon ordinateur a été contaminé et à chaque fois que j'ouvre msn une alerte du programme The cleaner m'indique que mon ordinateur est contaminé par un cheval de troie! s'il vous plait aidez moi car franchement c'est vraiment chiant! merci d'essayé de me répondre le plus vite possible, je vous en serais très reconnaissant! Si jamais le virus : CTFMON.EXE=C:\WINDOWS\system32\ctfmon.exe !! merci d'avance!

14 réponses

  • Votes
  • Date
  • Date décroissante
  1. Utilisateur anonyme
    Bonjour

    Commence par faire ceci.

    1 Télécharge
    CCleaner.
    http://www.filehippo.com/download_ccleaner.html
    Installe le dans un répertoire dédié.

    AVG Anti-Spyware
    https://www.avg.com/en-ww/free-antivirus-download
    Tu l'installes.
    Lance AVG Anti-Spyware et clique sur le bouton Mise à jour. Patiente

    2 Redémarre en mode sans echec. Attention, tu n'as pas accès à internet dans ce mode, note bien ce que tu as à faire.
    Démarre l'ordinateur.
    Une fois le chargement du BIOS terminé, il y a un écran noir. Appuye sur la touche F8 jusqu'à l'affichage du menu des options avancées de Windows.
    En utilisant les touches du curseur, sélectionne Mode sans échec et appuye sur Entrée.

    3 Lance le nettoyage avec CCleaner.

    4 Lance Lance AVG Anti-Spyware
    Clique sur le bouton Analyse (de la barre d'outils)
    Puis sur l'onglets Comment réagir, clique sur Actions recommandées. Sélectionne Quarantine.
    Reviens à l'onglet Analyse. Clique sur Analyse complète du système.
    A la fin du scan, choisis l'option " Appliquer toutes les actions " en bas.
    Clique sur "Enregistrer le rapport". Ceci génère un rapport en fichier texte qui se trouve dans le dossier Reports du dossier d'AVG Anti-Spyware.

    5 Redémarre normalement et poste le rapport d'AVG Anti-Spyware avec un rapport HijackThis v1.99.1
    http://pchelpbordeaux.free.fr/logiciels.html
    Tutorial
    http://pchelpbordeaux.free.fr/tuto.html
    Démo en image
    http://pageperso.aol.fr/balltrap34/demohijack.htm
    1. shadow22 Auteur
      ok merci de m'avoir répondu c'est très gentil, je fais sa tout de suite et je t'envoi les rapport! juste patientez quelques minutes!
      1. shadow22 Auteur
        voila le rapport de l'AVG anti-spyware:

        ---------------------------------------------------------
        AVG Anti-Spyware - Rapport d'analyse
        ---------------------------------------------------------

        + Créé à: 17:35:41 28/11/2006

        + Résultat de l'analyse:

        C:\Documents and Settings\Pierre\Bureau\winstall.exe -> Adware.PurityScan : Nettoyé et sauvegardé (mise en quarantaine).
        C:\Documents and Settings\Pierre\winstall.exe -> Adware.PurityScan : Nettoyé et sauvegardé (mise en quarantaine).
        C:\Program Files\DAEMON Tools\SetupDTSB.exe -> Adware.SaveNow : Nettoyé et sauvegardé (mise en quarantaine).
        C:\System Volume Information\_restore{EA39A09C-50BA-4996-869B-915C83FE3B53}\RP78\A0015466.exe -> Adware.SaveNow : Nettoyé et sauvegardé (mise en quarantaine).
        C:\System Volume Information\_restore{EA39A09C-50BA-4996-869B-915C83FE3B53}\RP78\A0015467.exe -> Adware.SaveNow : Nettoyé et sauvegardé (mise en quarantaine).
        HKLM\SOFTWARE\Classes\WUSE.1 -> Adware.SaveNow : Nettoyé et sauvegardé (mise en quarantaine).
        HKLM\SOFTWARE\Classes\WUSN.1 -> Adware.SaveNow : Nettoyé et sauvegardé (mise en quarantaine).
        C:\Program Files\Fichiers communs\{F02A0CBF-0AE9-1036-0525-050506220021}\Update.exe -> Adware.Softomate : Nettoyé et sauvegardé (mise en quarantaine).
        C:\System Volume Information\_restore{EA39A09C-50BA-4996-869B-915C83FE3B53}\RP108\A0020432.exe -> Adware.Softomate : Nettoyé et sauvegardé (mise en quarantaine).
        C:\System Volume Information\_restore{EA39A09C-50BA-4996-869B-915C83FE3B53}\RP108\A0020434.exe -> Adware.Softomate : Nettoyé et sauvegardé (mise en quarantaine).
        C:\System Volume Information\_restore{EA39A09C-50BA-4996-869B-915C83FE3B53}\RP110\A0020509.rbf -> Backdoor.Agent.aim : Nettoyé et sauvegardé (mise en quarantaine).
        C:\System Volume Information\_restore{EA39A09C-50BA-4996-869B-915C83FE3B53}\RP108\A0020428.exe -> Downloader.Agent.bca : Nettoyé et sauvegardé (mise en quarantaine).
        C:\System Volume Information\_restore{EA39A09C-50BA-4996-869B-915C83FE3B53}\RP110\A0020627.exe -> Downloader.Agent.bca : Nettoyé et sauvegardé (mise en quarantaine).
        C:\Documents and Settings\Pierre\Mes documents\dossier d'installation\Oblivion mod\TES_IV_UNIVERSAL_NODVD_SYNAPSIS.rar/TES_IV_UNIVERSAL_NODVD_SYNAPSIS.exe -> Not-A-Virus.VirTool.Win32.AvSpoffer.a : Nettoyé et sauvegardé (mise en quarantaine).
        C:\Program Files\Bethesda Softworks\Oblivion\0z_Oblivion(Z)_1.096\TES_IV_UNIVERSAL_NODVD_SYNAPSIS.exe -> Not-A-Virus.VirTool.Win32.AvSpoffer.a : Nettoyé et sauvegardé (mise en quarantaine).
        C:\Program Files\Bethesda Softworks\Oblivion\Data\TES_IV_UNIVERSAL_NODVD_SYNAPSIS.exe -> Not-A-Virus.VirTool.Win32.AvSpoffer.a : Nettoyé et sauvegardé (mise en quarantaine).
        C:\Program Files\Bethesda Softworks\Oblivion\TES_IV_UNIVERSAL_NODVD_SYNAPSIS.exe -> Not-A-Virus.VirTool.Win32.AvSpoffer.a : Nettoyé et sauvegardé (mise en quarantaine).
        C:\Documents and Settings\famille\Cookies\famille@bluestreak[2].txt -> TrackingCookie.Bluestreak : Nettoyé.
        C:\Documents and Settings\famille\Cookies\famille@fl01.ct2.comclick[2].txt -> TrackingCookie.Comclick : Nettoyé.
        C:\Documents and Settings\famille\Cookies\famille@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
        C:\System Volume Information\_restore{EA39A09C-50BA-4996-869B-915C83FE3B53}\RP108\A0020429.exe -> Trojan.Small : Nettoyé et sauvegardé (mise en quarantaine).
        C:\System Volume Information\_restore{EA39A09C-50BA-4996-869B-915C83FE3B53}\RP110\A0020626.exe -> Trojan.Small : Nettoyé et sauvegardé (mise en quarantaine).

        Fin du rapport
        1. shadow22 Auteur
          et voils le hijackthis:

          Logfile of HijackThis v1.99.1
          Scan saved at 17:41:34, on 28/11/2006
          Platform: Windows XP SP2 (WinNT 5.01.2600)
          MSIE: Internet Explorer v7.00 (7.00.5730.0011)

          Running processes:
          C:\WINDOWS\System32\smss.exe
          C:\WINDOWS\system32\winlogon.exe
          C:\WINDOWS\system32\services.exe
          C:\WINDOWS\system32\lsass.exe
          C:\WINDOWS\system32\Ati2evxx.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\System32\svchost.exe
          C:\WINDOWS\system32\spoolsv.exe
          C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
          C:\Program Files\Alwil Software\Avast4\ashServ.exe
          C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
          C:\WINDOWS\system32\CTsvcCDA.EXE
          C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\Explorer.EXE
          C:\WINDOWS\system32\PRISMSVR.EXE
          C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
          C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe
          C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
          C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe
          C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
          C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE
          C:\WINDOWS\system32\CTHELPER.EXE
          C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
          C:\Program Files\Dell\Media Experience\DMXLauncher.exe
          C:\WINDOWS\system32\dla\tfswctrl.exe
          C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
          C:\WINDOWS\stsystra.exe
          C:\Program Files\DAEMON Tools\daemon.exe
          C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
          C:\Program Files\iTunes\iTunesHelper.exe
          C:\Program Files\MessengerPlus! 3\MsgPlus.exe
          C:\Program Files\iPod\bin\iPodService.exe
          C:\Program Files\The Cleaner\tca.exe
          C:\Program Files\The Cleaner\tcm.exe
          C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
          C:\WINDOWS\system32\ctfmon.exe
          C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
          C:\Program Files\Messenger\msmsgs.exe
          C:\Program Files\AVerTV USB 2.0 Plus\QuickTV.exe
          C:\Program Files\Dell sans fil\PRISMCFG.exe
          C:\Program Files\Logitech\SetPoint\SetPoint.exe
          C:\Program Files\Fichiers communs\Logitech\KHAL\KHALMNPR.EXE
          C:\WINDOWS\system32\wuauclt.exe
          C:\Program Files\Internet Explorer\iexplore.exe
          C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.dell.com/content/public/choosecountry.aspx?c=us&l=en&s=gen
          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://runonce.msn.com/?v=msgrv75
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
          R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
          R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.dell.com/content/public/choosecountry.aspx?c=us&l=en&s=gen
          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
          O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe"
          O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
          O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
          O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe /r
          O4 - HKLM\..\Run: [CTDVDDET] "C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE"
          O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
          O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
          O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
          O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe
          O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
          O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
          O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
          O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
          O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
          O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
          O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
          O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
          O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
          O4 - HKLM\..\Run: [explorer] C:\Documents and Settings\Pierre\Bureau\winstall.exe
          O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
          O4 - HKLM\..\Run: [tcactive] C:\Program Files\The Cleaner\tca.exe
          O4 - HKLM\..\Run: [tcmonitor] C:\Program Files\The Cleaner\tcm.exe
          O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
          O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
          O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
          O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
          O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
          O4 - Startup: Registration Brothers In Arms.LNK = F:\Support\Register\RegistrationReminder.exe
          O4 - Startup: Registration Call of Juarez SP Demo.LNK = C:\Program Files\Ubisoft\Demo\Techland\Call of Juarez SP Demo\RegistrationReminder.exe
          O4 - Global Startup: AVerTV USB 2.0.lnk = C:\Program Files\AVerTV USB 2.0 Plus\QuickTV.exe
          O4 - Global Startup: Carte pour réseau sans fil WLAN (USB 2.0).lnk = ?
          O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
          O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
          O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll (file missing)
          O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll (file missing)
          O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
          O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
          O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O11 - Options group: [INTERNATIONAL] International*
          O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
          O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
          O18 - Protocol: bw+0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw+0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw-0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw-0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw00 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw00s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw10 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw10s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw20 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw20s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw30 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw30s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw40 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw40s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw50 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw50s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw60 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw60s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw70 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw70s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw80 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw80s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw90 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw90s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwa0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwa0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwb0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwb0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwc0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwc0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwd0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwd0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwe0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwe0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwf0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwf0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
          O18 - Protocol: bwg0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwg0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwh0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwh0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwi0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwi0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwj0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwj0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwk0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwk0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwl0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwl0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwm0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwm0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwn0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwn0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwo0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwo0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwp0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwp0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwq0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwq0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwr0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwr0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bws0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bws0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwt0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwt0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwu0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwu0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwv0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwv0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bww0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bww0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwx0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwx0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwy0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwy0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwz0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwz0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
          O18 - Protocol: offline-8876480 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
          O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
          O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
          O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
          O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
          O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
          O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
          O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
          O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
          O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
          O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
          2. shadow22 Auteur
            voilà j'ai poster les deux rapports! j'espère que tu pourras règler ce problème! En tout cas merci beaucoup de bien vouloir m'aider!
            1. shadow22 Auteur
              j'espère que tu ne m'as pas abandonner au moin Chercheurbis! Non je rigole, tu ne peux pas forcement être toujours là! bref si tu ne me répond pas dans la soirée je pense que tu pourras me répondre demain alors! Bonne soirée au cas ou on ne se verrai plus!
              1. Utilisateur anonyme
                Bonsoir

                Non, je ne t'abandonnes pas ; )

                Télécharge Combofix.exe (par sUBs) sur ton Bureau
                http://download.bleepingcomputer.com/sUBs/combofix.exe

                Double clique combofix.exe et suis les invites.
                Lorsque le scan sera complété, un rapport apparaîtra.
                Copie/colle ce rapport dans ta prochaine réponse avec un nouveau HijackThis.
                2. shadow22 Auteur
                  bonjour! alors voilà le ComboFix:

                  Pierre - 06-11-29 11:37:23,31 Service Pack 2
                  ComboFix 06.11.27W - Running from: "C:\Documents and Settings\Pierre\Bureau"

                  (((((((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))

                  C:\Program Files\Fichiers communs\{302A0CBF-0AE9-1036-0525-050506220021}
                  C:\Program Files\Fichiers communs\{F02A0CBF-0AE9-1036-0525-050506220021}

                  ((((((((((((((((((((((((((((((( Files Created from 2006-10-29 to 2006-11-29 ))))))))))))))))))))))))))))))))))

                  2006-11-28 17:56 3,968 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
                  2006-11-28 17:56 <REP> d-------- C:\Program Files\Grisoft
                  2006-11-28 17:55 <REP> d-------- C:\Program Files\CCleaner
                  2006-11-28 17:43 <REP> d-------- C:\WINDOWS\WBEM
                  2006-11-28 17:43 <REP> d-------- C:\WINDOWS\system32\fr-fr
                  2006-11-28 17:42 121,856 --------- C:\WINDOWS\system32\xmllite.dll
                  2006-11-28 17:42 <REP> d--h-c--- C:\WINDOWS\ie7
                  2006-11-28 17:41 <REP> d-------- C:\WINDOWS\network diagnostic
                  2006-11-28 17:40 <REP> d-------- C:\Program Files\Hijackthis Version Fran‡aise
                  2006-11-28 17:04 <REP> dr-h----- C:\Documents and Settings\Pierre\Recent
                  2006-11-27 18:13 <REP> d-------- C:\Program Files\The Cleaner
                  2006-11-22 17:40 <REP> d-------- C:\Documents and Settings\Pierre\Application Data\Gearbox Software
                  2006-11-07 21:03 6,049,280 --------- C:\WINDOWS\system32\ieframe.dll
                  2006-11-07 21:03 50,688 --------- C:\WINDOWS\system32\msfeedsbs.dll
                  2006-11-07 21:03 458,752 --------- C:\WINDOWS\system32\msfeeds.dll
                  2006-11-07 21:03 180,736 --------- C:\WINDOWS\system32\ieui.dll
                  2006-11-07 03:26 13,312 --a------ C:\WINDOWS\system32\ieudinit.exe

                  (((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))

                  2006-11-29 11:37 -------- d-------- C:\Program Files\Fichiers communs
                  2006-11-28 17:45 -------- d-------- C:\Program Files\Internet Explorer
                  2006-11-28 17:35 -------- d-------- C:\Program Files\DAEMON Tools
                  2006-11-26 19:37 -------- d-------- C:\Program Files\MessengerPlus! 3
                  2006-11-26 19:36 -------- d-------- C:\Program Files\MSN Messenger
                  2006-11-22 17:33 163644 --a------ C:\WINDOWS\system32\drivers\secdrv.sys
                  2006-11-22 17:26 -------- d-------- C:\Program Files\Ubisoft
                  2006-11-07 21:03 413696 --a------ C:\WINDOWS\system32\vbscript.dll
                  2006-11-07 21:03 231424 --a------ C:\WINDOWS\system32\webcheck.dll
                  2006-11-07 21:03 156160 --a------ C:\WINDOWS\system32\msls31.dll
                  2006-11-07 03:27 382976 --a------ C:\WINDOWS\system32\iedkcs32.dll
                  2006-11-07 03:27 229376 --a------ C:\WINDOWS\system32\ieaksie.dll
                  2006-11-07 03:26 71680 --a------ C:\WINDOWS\system32\admparse.dll
                  2006-11-07 03:26 55296 --a------ C:\WINDOWS\system32\iesetup.dll
                  2006-11-07 03:26 54784 --a------ C:\WINDOWS\system32\ie4uinit.exe
                  2006-11-07 03:26 43008 --a------ C:\WINDOWS\system32\iernonce.dll
                  2006-11-07 03:26 152064 --a------ C:\WINDOWS\system32\ieakeng.dll
                  2006-11-07 03:26 123904 --a------ C:\WINDOWS\system32\advpack.dll
                  2006-11-07 03:25 161792 --a------ C:\WINDOWS\system32\ieakui.dll
                  2006-10-25 10:47 -------- d--h----- C:\Program Files\InstallShield Installation Information
                  2006-10-25 10:47 -------- d-------- C:\Program Files\Electronic Arts
                  2006-10-17 12:06 78336 --a------ C:\WINDOWS\system32\ieencode.dll
                  2006-10-17 12:05 40960 --a------ C:\WINDOWS\system32\licmgr10.dll
                  2006-10-17 12:05 206336 --------- C:\WINDOWS\system32\WinFXDocObj.exe
                  2006-10-17 12:05 105984 --a------ C:\WINDOWS\system32\url.dll
                  2006-10-17 12:04 101376 --a------ C:\WINDOWS\system32\occache.dll
                  2006-10-17 12:03 17408 --a------ C:\WINDOWS\system32\corpol.dll
                  2006-10-17 11:58 61952 --------- C:\WINDOWS\system32\icardie.dll
                  2006-10-17 11:58 12288 --------- C:\WINDOWS\system32\msfeedssync.exe
                  2006-10-17 11:57 36352 --a------ C:\WINDOWS\system32\imgutil.dll
                  2006-10-17 11:57 266752 --------- C:\WINDOWS\system32\iertutil.dll
                  2006-10-17 11:56 45568 --a------ C:\WINDOWS\system32\mshta.exe
                  2006-10-17 11:28 48128 --a------ C:\WINDOWS\system32\mshtmler.dll
                  2006-10-17 11:27 380928 --------- C:\WINDOWS\system32\ieapfltr.dll
                  2006-10-15 18:16 -------- d-------- C:\Program Files\WinRAR
                  2006-10-13 12:36 145920 --a------ C:\WINDOWS\system32\nwprovau.dll
                  2006-10-11 15:38 -------- d-------- C:\Program Files\Common Files
                  2006-10-11 13:10 -------- d-------- C:\Program Files\Call of Duty
                  2006-10-11 12:04 118784 -r------- C:\WINDOWS\bwUnin-7.2.0.157-8876480SL.exe
                  2006-10-08 17:28 -------- d-------- C:\Documents and Settings\Pierre\Application Data\Apple Computer
                  2006-10-08 16:31 -------- d-------- C:\Program Files\QuickTime
                  2006-10-08 16:30 -------- d-------- C:\Program Files\iTunes
                  2006-10-08 16:29 -------- d-------- C:\Program Files\iPod
                  2006-10-06 14:29 -------- d-------- C:\Documents and Settings\Pierre\Application Data\Atari
                  2006-10-06 14:22 -------- d-------- C:\Program Files\Fichiers communs\PocketSoft
                  2006-10-06 14:20 -------- d-------- C:\Program Files\Atari
                  2006-10-04 17:54 -------- d-------- C:\Documents and Settings\Pierre\Application Data\Logitech
                  2006-10-04 17:51 118784 -r------- C:\WINDOWS\bwUnin-7.2.0.137-8876480SL.exe
                  2006-10-04 17:51 -------- d-------- C:\Program Files\MUSICMATCH
                  2006-10-04 17:51 -------- d-------- C:\Program Files\Logitech
                  2006-10-04 17:50 -------- d-------- C:\Program Files\Fichiers communs\Logitech
                  2006-10-03 16:52 -------- d-------- C:\Program Files\EA GAMES
                  2006-09-13 05:03 1084416 --a------ C:\WINDOWS\system32\msxml3.dll
                  2006-09-06 16:43 22752 --a------ C:\WINDOWS\system32\spupdsvc.exe
                  2006-08-31 20:36 98304 --a------ C:\WINDOWS\system32\CmdLineExt.dll

                  (((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))

                  *Note* empty entries are not shown

                  [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
                  "CTFMON.EXE"="C:\\WINDOWS\\system32\\ctfmon.exe"
                  "LDM"="C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"
                  "MSMSGS"="\"C:\\Program Files\\Messenger\\msmsgs.exe\" /background"
                  "MessengerPlus3"="\"C:\\Program Files\\MessengerPlus! 3\\MsgPlus.exe\" /WinStart"

                  [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
                  "SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.5.0_08\\bin\\jusched.exe\""
                  "IAAnotif"="C:\\Program Files\\Intel\\Intel Matrix Storage Manager\\iaanotif.exe"
                  "ATIPTA"="C:\\Program Files\\ATI Technologies\\ATI Control Panel\\atiptaxx.exe"
                  "CTSysVol"="C:\\Program Files\\Creative\\SBAudigy2ZS\\Surround Mixer\\CTSysVol.exe /r"
                  "CTDVDDET"="\"C:\\Program Files\\Creative\\SBAudigy2ZS\\DVDAudio\\CTDVDDET.EXE\""
                  "CTHelper"="CTHELPER.EXE"
                  "UpdReg"="C:\\WINDOWS\\UpdReg.EXE"
                  "DVDLauncher"="\"C:\\Program Files\\CyberLink\\PowerDVD\\DVDLauncher.exe\""
                  "DMXLauncher"="C:\\Program Files\\Dell\\Media Experience\\DMXLauncher.exe"
                  "dla"="C:\\WINDOWS\\system32\\dla\\tfswctrl.exe"
                  "ISUSPM Startup"="C:\\PROGRA~1\\FICHIE~1\\INSTAL~1\\UPDATE~1\\ISUSPM.exe -startup"
                  "ISUSScheduler"="\"C:\\Program Files\\Fichiers communs\\InstallShield\\UpdateService\\issch.exe\" -start"
                  "SigmatelSysTrayApp"="stsystra.exe"
                  "DAEMON Tools"="\"C:\\Program Files\\DAEMON Tools\\daemon.exe\" -lang 1033"
                  "avast!"="C:\\PROGRA~1\\ALWILS~1\\Avast4\\ashDisp.exe"
                  "Logitech Hardware Abstraction Layer"="KHALMNPR.EXE"
                  "iTunesHelper"="\"C:\\Program Files\\iTunes\\iTunesHelper.exe\""
                  "QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
                  "MessengerPlus3"="\"C:\\Program Files\\MessengerPlus! 3\\MsgPlus.exe\""
                  "tcactive"="C:\\Program Files\\The Cleaner\\tca.exe"
                  "tcmonitor"="C:\\Program Files\\The Cleaner\\tcm.exe"
                  "!AVG Anti-Spyware"="\"C:\\Program Files\\Grisoft\\AVG Anti-Spyware 7.5\\avgas.exe\" /minimized"

                  [HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components]
                  "DeskHtmlVersion"=dword:00000110
                  "DeskHtmlMinorVersion"=dword:00000005
                  "Settings"=dword:00000001
                  "GeneralFlags"=dword:00000001

                  [HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0]
                  "Source"="About:Home"
                  "SubscribedURL"="About:Home"
                  "FriendlyName"="Ma page d'accueil"
                  "Flags"=dword:00000002
                  "Position"=hex:2c,00,00,00,cc,00,00,00,00,00,00,00,34,03,00,00,e2,02,00,00,00,\
                  00,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00
                  "CurrentState"=hex:04,00,00,40
                  "OriginalStateInfo"=hex:18,00,00,00,ff,ff,00,00,ff,ff,00,00,ff,ff,ff,ff,ff,ff,\
                  ff,ff,04,00,00,00
                  "RestoredStateInfo"=hex:18,00,00,00,6a,02,00,00,23,00,00,00,a4,00,00,00,9a,00,\
                  00,00,01,00,00,00

                  [HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
                  "CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE"

                  [HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run]
                  "CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE"

                  [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler]
                  "{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Pré-chargeur Browseui"
                  "{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Démon de cache des catégories de composant"

                  [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
                  "{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=""
                  "{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="AVG Anti-Spyware 7.5"

                  [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
                  "NoDriveTypeAutoRun"=dword:00000091

                  [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\Run]

                  [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
                  "dontdisplaylastusername"=dword:00000000
                  "legalnoticecaption"=""
                  "legalnoticetext"=""
                  "shutdownwithoutlogon"=dword:00000001
                  "undockwithoutlogon"=dword:00000001

                  [HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
                  "NoDriveTypeAutoRun"=dword:00000091

                  [HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\policies\explorer]
                  "NoDriveTypeAutoRun"=dword:00000091

                  [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload]
                  "PostBootReminder"="{7849596a-48ea-486e-8937-a2a3009f31a9}"
                  "CDBurn"="{fbeb8a05-beee-4442-804e-409d6c4515e9}"
                  "WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"
                  "SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}"

                  [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
                  "SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"

                  Completion time: 06-11-29 11:38:16.59
                  C:\ComboFix.txt ... 06-11-29 11:38
                  1. shadow22 Auteur
                    et voilà le HijackThis:

                    Logfile of HijackThis v1.99.1
                    Scan saved at 11:40:03, on 29/11/2006
                    Platform: Windows XP SP2 (WinNT 5.01.2600)
                    MSIE: Internet Explorer v7.00 (7.00.5730.0011)

                    Running processes:
                    C:\WINDOWS\System32\smss.exe
                    C:\WINDOWS\system32\winlogon.exe
                    C:\WINDOWS\system32\services.exe
                    C:\WINDOWS\system32\lsass.exe
                    C:\WINDOWS\system32\Ati2evxx.exe
                    C:\WINDOWS\system32\svchost.exe
                    C:\WINDOWS\System32\svchost.exe
                    C:\WINDOWS\system32\spoolsv.exe
                    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                    C:\Program Files\Alwil Software\Avast4\ashServ.exe
                    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                    C:\WINDOWS\system32\CTsvcCDA.EXE
                    C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
                    C:\WINDOWS\system32\svchost.exe
                    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                    C:\WINDOWS\Explorer.EXE
                    C:\WINDOWS\system32\PRISMSVR.EXE
                    C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe
                    C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
                    C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe
                    C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE
                    C:\WINDOWS\system32\CTHELPER.EXE
                    C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
                    C:\Program Files\Dell\Media Experience\DMXLauncher.exe
                    C:\WINDOWS\system32\dla\tfswctrl.exe
                    C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
                    C:\WINDOWS\stsystra.exe
                    C:\Program Files\DAEMON Tools\daemon.exe
                    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                    C:\Program Files\iTunes\iTunesHelper.exe
                    C:\Program Files\iPod\bin\iPodService.exe
                    C:\Program Files\MessengerPlus! 3\MsgPlus.exe
                    C:\Program Files\The Cleaner\tca.exe
                    C:\Program Files\The Cleaner\tcm.exe
                    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
                    C:\WINDOWS\system32\ctfmon.exe
                    C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
                    C:\Program Files\Messenger\msmsgs.exe
                    C:\Program Files\AVerTV USB 2.0 Plus\QuickTV.exe
                    C:\Program Files\Dell sans fil\PRISMCFG.exe
                    C:\Program Files\Logitech\SetPoint\SetPoint.exe
                    C:\Program Files\Fichiers communs\Logitech\KHAL\KHALMNPR.EXE
                    C:\Program Files\Internet Explorer\iexplore.exe
                    C:\WINDOWS\system32\NOTEPAD.EXE
                    C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

                    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.dell.com/content/public/choosecountry.aspx?c=us&l=en&s=gen
                    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://runonce.msn.com/?v=msgrv75
                    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
                    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.dell.com/content/public/choosecountry.aspx?c=us&l=en&s=gen
                    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe"
                    O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
                    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                    O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe /r
                    O4 - HKLM\..\Run: [CTDVDDET] "C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE"
                    O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
                    O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
                    O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
                    O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe
                    O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
                    O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
                    O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
                    O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
                    O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
                    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                    O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
                    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
                    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                    O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
                    O4 - HKLM\..\Run: [tcactive] C:\Program Files\The Cleaner\tca.exe
                    O4 - HKLM\..\Run: [tcmonitor] C:\Program Files\The Cleaner\tcm.exe
                    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
                    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
                    O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
                    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
                    O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
                    O4 - Startup: Registration Brothers In Arms.LNK = F:\Support\Register\RegistrationReminder.exe
                    O4 - Startup: Registration Call of Juarez SP Demo.LNK = C:\Program Files\Ubisoft\Demo\Techland\Call of Juarez SP Demo\RegistrationReminder.exe
                    O4 - Global Startup: AVerTV USB 2.0.lnk = C:\Program Files\AVerTV USB 2.0 Plus\QuickTV.exe
                    O4 - Global Startup: Carte pour réseau sans fil WLAN (USB 2.0).lnk = ?
                    O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
                    O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
                    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll (file missing)
                    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll (file missing)
                    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
                    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
                    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                    O11 - Options group: [INTERNATIONAL] International*
                    O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
                    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
                    O18 - Protocol: bw+0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw+0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw-0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw-0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw00 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw00s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw10 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw10s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw20 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw20s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw30 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw30s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw40 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw40s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw50 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw50s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw60 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw60s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw70 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw70s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw80 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw80s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw90 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw90s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwa0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwa0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwb0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwb0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwc0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwc0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwd0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwd0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwe0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwe0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwf0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwf0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
                    O18 - Protocol: bwg0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwg0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwh0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwh0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwi0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwi0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwj0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwj0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwk0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwk0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwl0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwl0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwm0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwm0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwn0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwn0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwo0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwo0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwp0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwp0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwq0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwq0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwr0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwr0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bws0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bws0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwt0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwt0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwu0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwu0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwv0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwv0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bww0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bww0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwx0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwx0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwy0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwy0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwz0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwz0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
                    O18 - Protocol: offline-8876480 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
                    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
                    O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                    O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
                    O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
                    O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                    O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
                    O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
                    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
                    O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
                    2. Utilisateur anonyme
                      Bonjour

                      Plus rien d'infectieux dans ces rapports.

                      As tu encore des dysfonctionnements ?
                      1. shadow22 Auteur
                        Je crois que c'est tout bon en tout cas un grand merci!! Si jamais il y a encore un problème je te tiendrais au courant! merci beaucoup et bonne continuation!
                        1. delpilou
                          bonjour,

                          Moi aussi j'ai chopé le cheval de troie par msn
                          je mets mon rapport

                          ogfile of Trend Micro HijackThis v2.0.2
                          Scan saved at 19:33:57, on 24/01/2008
                          Platform: Windows XP SP2 (WinNT 5.01.2600)
                          MSIE: Internet Explorer v7.00 (7.00.6000.16574)
                          Boot mode: Normal

                          Running processes:
                          C:\WINDOWS\System32\smss.exe
                          C:\WINDOWS\system32\winlogon.exe
                          C:\WINDOWS\system32\services.exe
                          C:\WINDOWS\system32\lsass.exe
                          C:\WINDOWS\system32\Ati2evxx.exe
                          C:\WINDOWS\system32\svchost.exe
                          C:\WINDOWS\System32\svchost.exe
                          C:\WINDOWS\system32\Ati2evxx.exe
                          C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                          C:\Program Files\Alwil Software\Avast4\ashServ.exe
                          C:\WINDOWS\system32\spoolsv.exe
                          C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
                          C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
                          C:\WINDOWS\Explorer.EXE
                          C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
                          C:\WINDOWS\eHome\ehRecvr.exe
                          C:\WINDOWS\eHome\ehSched.exe
                          C:\WINDOWS\System32\FTRTSVC.exe
                          C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                          c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
                          C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
                          C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
                          C:\WINDOWS\ehome\ehtray.exe
                          C:\WINDOWS\RTHDCPL.EXE
                          C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
                          C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
                          C:\WINDOWS\system32\SysMonitor.exe
                          C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
                          C:\WINDOWS\system32\svchost.exe
                          C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe
                          C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                          C:\Program Files\D-Tools\daemon.exe
                          C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
                          C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe
                          C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
                          C:\Program Files\Logitech\QuickCam\Quickcam.exe
                          C:\DOCUME~1\del\LOCALS~1\Temp\services.exe
                          C:\WINDOWS\mrofinu1148.exe
                          C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
                          C:\WINDOWS\system32\ctfmon.exe
                          C:\leupj.exe
                          C:\Program Files\MaxiMemo\MaxiMemo.exe
                          C:\Program Files\Google\Google Updater\GoogleUpdater.exe
                          C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                          C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                          C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
                          C:\WINDOWS\system32\dllhost.exe
                          C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
                          C:\WINDOWS\eHome\ehmsas.exe
                          C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
                          C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
                          C:\Program Files\Internet Explorer\IEXPLORE.EXE
                          C:\WINDOWS\system32\rundll32.exe
                          C:\Documents and Settings\del\Bureau\virus\HiJackThis\HijackThis.exe

                          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
                          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                          R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ustart.org
                          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
                          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                          R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
                          O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                          O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll
                          O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
                          O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                          O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
                          O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\WINDOWS\system32\eDStoolbar.dll
                          O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
                          O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
                          O4 - HKLM\..\Run: [LaunchApp] Alaunch
                          O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
                          O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
                          O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
                          O4 - HKLM\..\Run: [ntiMUI] c:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe
                          O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
                          O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
                          O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
                          O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
                          O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
                          O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
                          O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\WINDOWS\system32\SysMonitor.exe
                          O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
                          O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe 1
                          O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
                          O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe"
                          O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
                          O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
                          O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                          O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
                          O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
                          O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
                          O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"
                          O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
                          O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
                          O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
                          O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
                          O4 - HKLM\..\Run: [Flash Player2] C:\DOCUME~1\del\LOCALS~1\Temp\services.exe
                          O4 - HKLM\..\Run: [runner1] C:\WINDOWS\mrofinu1148.exe 61A847B5BBF72813339F30466188719AB689201522886B092CBD44BD8689220221DD3257
                          O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
                          O4 - HKCU\..\Run: [updateMgr] c:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9
                          O4 - HKCU\..\Run: [hldrrr] C:\WINDOWS\system32\hldrrr.exe
                          O4 - HKCU\..\Run: [Mssngr] C:\WINDOWS\system32\ecDocxepr\Messenger.exe
                          O4 - HKCU\..\Run: [WintelUpdate] C:\leupj.exe
                          O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
                          O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
                          O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
                          O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
                          O4 - Global Startup: MaxiMemo.lnk = C:\Program Files\MaxiMemo\MaxiMemo.exe
                          O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
                          O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
                          O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
                          O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                          O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                          O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
                          O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
                          O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                          O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                          O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
                          O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei/SmileyCentralFWBInitialSetup1.0.0.15.cab
                          O16 - DPF: {3E82BB3F-ABE4-458D-9281-0187286A4E51} (VoxsyncCtrl Class) - https://login.orange.fr/captcha?return_url=https%3A%2F%2Fmescontacts.orange.fr
                          O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://delpilou.spaces.live.com//PhotoUpload/MsnPUpld.cab
                          O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.mypixmania.com/fr/fr/importer/MypixUploader.cab
                          O16 - DPF: {E1FFA9C5-7F7F-4E80-B5C8-667D8C81DC5E} - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
                          O23 - Service: Memory Check Service (AcerMemUsageCheckService) - Acer Inc. - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
                          O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                          O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
                          O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
                          O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                          O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                          O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                          O23 - Service: FFI - Unknown owner - C:\WINDOWS\system32\svchost.exe:exm.exe (file missing)
                          O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
                          O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                          O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
                          O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
                          O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
                          O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
                          O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
                          O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
                          O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe

                          Discussions similaires

                          symboles et écritures pour nick msn
                          Pando

                          20 réponses
                          msn + &#9786;(symbole)
                          m0ii

                          19 réponses
                          Comment insérer correctement des caractères spéciaux ou émojis ?
                          Lia

                          45 réponses
                          Symboles de blog ou msn ou otre biensur
                          l@vigne

                          117 réponses