MSN cheval de troie help!

shadow22 -  
Bonjour, exusez moi mais la je panique gentiellement, mon ordinateur vien d'être infecté par un virus ( un cheval de troie) voila je crois bien que le problème vient de MSN messenger, après avoir cliquer sur un lien sans réfléchir, mon ordinateur a été contaminé et à chaque fois que j'ouvre msn une alerte du programme The cleaner m'indique que mon ordinateur est contaminé par un cheval de troie! s'il vous plait aidez moi car franchement c'est vraiment chiant! merci d'essayé de me répondre le plus vite possible, je vous en serais très reconnaissant! Si jamais le virus : CTFMON.EXE=C:\WINDOWS\system32\ctfmon.exe !! merci d'avance!

14 réponses

  1. Utilisateur anonyme
    Bonjour

    Commence par faire ceci.

    1 Télécharge
    CCleaner.
    http://www.filehippo.com/download_ccleaner.html
    Installe le dans un répertoire dédié.

    AVG Anti-Spyware
    https://www.avg.com/en-ww/free-antivirus-download
    Tu l'installes.
    Lance AVG Anti-Spyware et clique sur le bouton Mise à jour. Patiente

    2 Redémarre en mode sans echec. Attention, tu n'as pas accès à internet dans ce mode, note bien ce que tu as à faire.
    Démarre l'ordinateur.
    Une fois le chargement du BIOS terminé, il y a un écran noir. Appuye sur la touche F8 jusqu'à l'affichage du menu des options avancées de Windows.
    En utilisant les touches du curseur, sélectionne Mode sans échec et appuye sur Entrée.

    3 Lance le nettoyage avec CCleaner.

    4 Lance Lance AVG Anti-Spyware
    Clique sur le bouton Analyse (de la barre d'outils)
    Puis sur l'onglets Comment réagir, clique sur Actions recommandées. Sélectionne Quarantine.
    Reviens à l'onglet Analyse. Clique sur Analyse complète du système.
    A la fin du scan, choisis l'option " Appliquer toutes les actions " en bas.
    Clique sur "Enregistrer le rapport". Ceci génère un rapport en fichier texte qui se trouve dans le dossier Reports du dossier d'AVG Anti-Spyware.

    5 Redémarre normalement et poste le rapport d'AVG Anti-Spyware avec un rapport HijackThis v1.99.1
    http://pchelpbordeaux.free.fr/logiciels.html
    Tutorial
    http://pchelpbordeaux.free.fr/tuto.html
    Démo en image
    http://pageperso.aol.fr/balltrap34/demohijack.htm
    0
    1. shadow22 Auteur
      ok merci de m'avoir répondu c'est très gentil, je fais sa tout de suite et je t'envoi les rapport! juste patientez quelques minutes!
      0
      1. shadow22 Auteur
        voila le rapport de l'AVG anti-spyware:

        ---------------------------------------------------------
        AVG Anti-Spyware - Rapport d'analyse
        ---------------------------------------------------------

        + Créé à: 17:35:41 28/11/2006

        + Résultat de l'analyse:

        C:\Documents and Settings\Pierre\Bureau\winstall.exe -> Adware.PurityScan : Nettoyé et sauvegardé (mise en quarantaine).
        C:\Documents and Settings\Pierre\winstall.exe -> Adware.PurityScan : Nettoyé et sauvegardé (mise en quarantaine).
        C:\Program Files\DAEMON Tools\SetupDTSB.exe -> Adware.SaveNow : Nettoyé et sauvegardé (mise en quarantaine).
        C:\System Volume Information\_restore{EA39A09C-50BA-4996-869B-915C83FE3B53}\RP78\A0015466.exe -> Adware.SaveNow : Nettoyé et sauvegardé (mise en quarantaine).
        C:\System Volume Information\_restore{EA39A09C-50BA-4996-869B-915C83FE3B53}\RP78\A0015467.exe -> Adware.SaveNow : Nettoyé et sauvegardé (mise en quarantaine).
        HKLM\SOFTWARE\Classes\WUSE.1 -> Adware.SaveNow : Nettoyé et sauvegardé (mise en quarantaine).
        HKLM\SOFTWARE\Classes\WUSN.1 -> Adware.SaveNow : Nettoyé et sauvegardé (mise en quarantaine).
        C:\Program Files\Fichiers communs\{F02A0CBF-0AE9-1036-0525-050506220021}\Update.exe -> Adware.Softomate : Nettoyé et sauvegardé (mise en quarantaine).
        C:\System Volume Information\_restore{EA39A09C-50BA-4996-869B-915C83FE3B53}\RP108\A0020432.exe -> Adware.Softomate : Nettoyé et sauvegardé (mise en quarantaine).
        C:\System Volume Information\_restore{EA39A09C-50BA-4996-869B-915C83FE3B53}\RP108\A0020434.exe -> Adware.Softomate : Nettoyé et sauvegardé (mise en quarantaine).
        C:\System Volume Information\_restore{EA39A09C-50BA-4996-869B-915C83FE3B53}\RP110\A0020509.rbf -> Backdoor.Agent.aim : Nettoyé et sauvegardé (mise en quarantaine).
        C:\System Volume Information\_restore{EA39A09C-50BA-4996-869B-915C83FE3B53}\RP108\A0020428.exe -> Downloader.Agent.bca : Nettoyé et sauvegardé (mise en quarantaine).
        C:\System Volume Information\_restore{EA39A09C-50BA-4996-869B-915C83FE3B53}\RP110\A0020627.exe -> Downloader.Agent.bca : Nettoyé et sauvegardé (mise en quarantaine).
        C:\Documents and Settings\Pierre\Mes documents\dossier d'installation\Oblivion mod\TES_IV_UNIVERSAL_NODVD_SYNAPSIS.rar/TES_IV_UNIVERSAL_NODVD_SYNAPSIS.exe -> Not-A-Virus.VirTool.Win32.AvSpoffer.a : Nettoyé et sauvegardé (mise en quarantaine).
        C:\Program Files\Bethesda Softworks\Oblivion\0z_Oblivion(Z)_1.096\TES_IV_UNIVERSAL_NODVD_SYNAPSIS.exe -> Not-A-Virus.VirTool.Win32.AvSpoffer.a : Nettoyé et sauvegardé (mise en quarantaine).
        C:\Program Files\Bethesda Softworks\Oblivion\Data\TES_IV_UNIVERSAL_NODVD_SYNAPSIS.exe -> Not-A-Virus.VirTool.Win32.AvSpoffer.a : Nettoyé et sauvegardé (mise en quarantaine).
        C:\Program Files\Bethesda Softworks\Oblivion\TES_IV_UNIVERSAL_NODVD_SYNAPSIS.exe -> Not-A-Virus.VirTool.Win32.AvSpoffer.a : Nettoyé et sauvegardé (mise en quarantaine).
        C:\Documents and Settings\famille\Cookies\famille@bluestreak[2].txt -> TrackingCookie.Bluestreak : Nettoyé.
        C:\Documents and Settings\famille\Cookies\famille@fl01.ct2.comclick[2].txt -> TrackingCookie.Comclick : Nettoyé.
        C:\Documents and Settings\famille\Cookies\famille@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
        C:\System Volume Information\_restore{EA39A09C-50BA-4996-869B-915C83FE3B53}\RP108\A0020429.exe -> Trojan.Small : Nettoyé et sauvegardé (mise en quarantaine).
        C:\System Volume Information\_restore{EA39A09C-50BA-4996-869B-915C83FE3B53}\RP110\A0020626.exe -> Trojan.Small : Nettoyé et sauvegardé (mise en quarantaine).

        Fin du rapport
        0
        1. shadow22 Auteur
          et voils le hijackthis:

          Logfile of HijackThis v1.99.1
          Scan saved at 17:41:34, on 28/11/2006
          Platform: Windows XP SP2 (WinNT 5.01.2600)
          MSIE: Internet Explorer v7.00 (7.00.5730.0011)

          Running processes:
          C:\WINDOWS\System32\smss.exe
          C:\WINDOWS\system32\winlogon.exe
          C:\WINDOWS\system32\services.exe
          C:\WINDOWS\system32\lsass.exe
          C:\WINDOWS\system32\Ati2evxx.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\System32\svchost.exe
          C:\WINDOWS\system32\spoolsv.exe
          C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
          C:\Program Files\Alwil Software\Avast4\ashServ.exe
          C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
          C:\WINDOWS\system32\CTsvcCDA.EXE
          C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\Explorer.EXE
          C:\WINDOWS\system32\PRISMSVR.EXE
          C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
          C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe
          C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
          C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe
          C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
          C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE
          C:\WINDOWS\system32\CTHELPER.EXE
          C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
          C:\Program Files\Dell\Media Experience\DMXLauncher.exe
          C:\WINDOWS\system32\dla\tfswctrl.exe
          C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
          C:\WINDOWS\stsystra.exe
          C:\Program Files\DAEMON Tools\daemon.exe
          C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
          C:\Program Files\iTunes\iTunesHelper.exe
          C:\Program Files\MessengerPlus! 3\MsgPlus.exe
          C:\Program Files\iPod\bin\iPodService.exe
          C:\Program Files\The Cleaner\tca.exe
          C:\Program Files\The Cleaner\tcm.exe
          C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
          C:\WINDOWS\system32\ctfmon.exe
          C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
          C:\Program Files\Messenger\msmsgs.exe
          C:\Program Files\AVerTV USB 2.0 Plus\QuickTV.exe
          C:\Program Files\Dell sans fil\PRISMCFG.exe
          C:\Program Files\Logitech\SetPoint\SetPoint.exe
          C:\Program Files\Fichiers communs\Logitech\KHAL\KHALMNPR.EXE
          C:\WINDOWS\system32\wuauclt.exe
          C:\Program Files\Internet Explorer\iexplore.exe
          C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.dell.com/content/public/choosecountry.aspx?c=us&l=en&s=gen
          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://runonce.msn.com/?v=msgrv75
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
          R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
          R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.dell.com/content/public/choosecountry.aspx?c=us&l=en&s=gen
          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
          O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe"
          O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
          O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
          O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe /r
          O4 - HKLM\..\Run: [CTDVDDET] "C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE"
          O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
          O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
          O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
          O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe
          O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
          O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
          O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
          O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
          O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
          O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
          O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
          O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
          O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
          O4 - HKLM\..\Run: [explorer] C:\Documents and Settings\Pierre\Bureau\winstall.exe
          O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
          O4 - HKLM\..\Run: [tcactive] C:\Program Files\The Cleaner\tca.exe
          O4 - HKLM\..\Run: [tcmonitor] C:\Program Files\The Cleaner\tcm.exe
          O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
          O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
          O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
          O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
          O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
          O4 - Startup: Registration Brothers In Arms.LNK = F:\Support\Register\RegistrationReminder.exe
          O4 - Startup: Registration Call of Juarez SP Demo.LNK = C:\Program Files\Ubisoft\Demo\Techland\Call of Juarez SP Demo\RegistrationReminder.exe
          O4 - Global Startup: AVerTV USB 2.0.lnk = C:\Program Files\AVerTV USB 2.0 Plus\QuickTV.exe
          O4 - Global Startup: Carte pour réseau sans fil WLAN (USB 2.0).lnk = ?
          O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
          O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
          O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll (file missing)
          O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll (file missing)
          O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
          O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
          O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O11 - Options group: [INTERNATIONAL] International*
          O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
          O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
          O18 - Protocol: bw+0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw+0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw-0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw-0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw00 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw00s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw10 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw10s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw20 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw20s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw30 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw30s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw40 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw40s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw50 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw50s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw60 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw60s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw70 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw70s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw80 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw80s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw90 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw90s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwa0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwa0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwb0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwb0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwc0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwc0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwd0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwd0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwe0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwe0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwf0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwf0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
          O18 - Protocol: bwg0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwg0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwh0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwh0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwi0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwi0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwj0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwj0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwk0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwk0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwl0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwl0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwm0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwm0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwn0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwn0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwo0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwo0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwp0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwp0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwq0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwq0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwr0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwr0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bws0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bws0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwt0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwt0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwu0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwu0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwv0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwv0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bww0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bww0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwx0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwx0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwy0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwy0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwz0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwz0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
          O18 - Protocol: offline-8876480 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
          O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
          O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
          O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
          O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
          O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
          O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
          O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
          O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
          O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
          O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
          0
          2. shadow22 Auteur
            voilà j'ai poster les deux rapports! j'espère que tu pourras règler ce problème! En tout cas merci beaucoup de bien vouloir m'aider!
            0
            1. shadow22 Auteur
              j'espère que tu ne m'as pas abandonner au moin Chercheurbis! Non je rigole, tu ne peux pas forcement être toujours là! bref si tu ne me répond pas dans la soirée je pense que tu pourras me répondre demain alors! Bonne soirée au cas ou on ne se verrai plus!
              0
              1. Utilisateur anonyme
                Bonsoir

                Non, je ne t'abandonnes pas ; )

                Télécharge Combofix.exe (par sUBs) sur ton Bureau
                http://download.bleepingcomputer.com/sUBs/combofix.exe

                Double clique combofix.exe et suis les invites.
                Lorsque le scan sera complété, un rapport apparaîtra.
                Copie/colle ce rapport dans ta prochaine réponse avec un nouveau HijackThis.
                0
                1. shadow22 Auteur
                  ok je t'envoi tout sa à midi! bonne matinée!
                  0
                  1. shadow22 Auteur
                    bonjour! alors voilà le ComboFix:

                    Pierre - 06-11-29 11:37:23,31 Service Pack 2
                    ComboFix 06.11.27W - Running from: "C:\Documents and Settings\Pierre\Bureau"

                    (((((((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))

                    C:\Program Files\Fichiers communs\{302A0CBF-0AE9-1036-0525-050506220021}
                    C:\Program Files\Fichiers communs\{F02A0CBF-0AE9-1036-0525-050506220021}

                    ((((((((((((((((((((((((((((((( Files Created from 2006-10-29 to 2006-11-29 ))))))))))))))))))))))))))))))))))

                    2006-11-28 17:56 3,968 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
                    2006-11-28 17:56 <REP> d-------- C:\Program Files\Grisoft
                    2006-11-28 17:55 <REP> d-------- C:\Program Files\CCleaner
                    2006-11-28 17:43 <REP> d-------- C:\WINDOWS\WBEM
                    2006-11-28 17:43 <REP> d-------- C:\WINDOWS\system32\fr-fr
                    2006-11-28 17:42 121,856 --------- C:\WINDOWS\system32\xmllite.dll
                    2006-11-28 17:42 <REP> d--h-c--- C:\WINDOWS\ie7
                    2006-11-28 17:41 <REP> d-------- C:\WINDOWS\network diagnostic
                    2006-11-28 17:40 <REP> d-------- C:\Program Files\Hijackthis Version Fran‡aise
                    2006-11-28 17:04 <REP> dr-h----- C:\Documents and Settings\Pierre\Recent
                    2006-11-27 18:13 <REP> d-------- C:\Program Files\The Cleaner
                    2006-11-22 17:40 <REP> d-------- C:\Documents and Settings\Pierre\Application Data\Gearbox Software
                    2006-11-07 21:03 6,049,280 --------- C:\WINDOWS\system32\ieframe.dll
                    2006-11-07 21:03 50,688 --------- C:\WINDOWS\system32\msfeedsbs.dll
                    2006-11-07 21:03 458,752 --------- C:\WINDOWS\system32\msfeeds.dll
                    2006-11-07 21:03 180,736 --------- C:\WINDOWS\system32\ieui.dll
                    2006-11-07 03:26 13,312 --a------ C:\WINDOWS\system32\ieudinit.exe

                    (((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))

                    2006-11-29 11:37 -------- d-------- C:\Program Files\Fichiers communs
                    2006-11-28 17:45 -------- d-------- C:\Program Files\Internet Explorer
                    2006-11-28 17:35 -------- d-------- C:\Program Files\DAEMON Tools
                    2006-11-26 19:37 -------- d-------- C:\Program Files\MessengerPlus! 3
                    2006-11-26 19:36 -------- d-------- C:\Program Files\MSN Messenger
                    2006-11-22 17:33 163644 --a------ C:\WINDOWS\system32\drivers\secdrv.sys
                    2006-11-22 17:26 -------- d-------- C:\Program Files\Ubisoft
                    2006-11-07 21:03 413696 --a------ C:\WINDOWS\system32\vbscript.dll
                    2006-11-07 21:03 231424 --a------ C:\WINDOWS\system32\webcheck.dll
                    2006-11-07 21:03 156160 --a------ C:\WINDOWS\system32\msls31.dll
                    2006-11-07 03:27 382976 --a------ C:\WINDOWS\system32\iedkcs32.dll
                    2006-11-07 03:27 229376 --a------ C:\WINDOWS\system32\ieaksie.dll
                    2006-11-07 03:26 71680 --a------ C:\WINDOWS\system32\admparse.dll
                    2006-11-07 03:26 55296 --a------ C:\WINDOWS\system32\iesetup.dll
                    2006-11-07 03:26 54784 --a------ C:\WINDOWS\system32\ie4uinit.exe
                    2006-11-07 03:26 43008 --a------ C:\WINDOWS\system32\iernonce.dll
                    2006-11-07 03:26 152064 --a------ C:\WINDOWS\system32\ieakeng.dll
                    2006-11-07 03:26 123904 --a------ C:\WINDOWS\system32\advpack.dll
                    2006-11-07 03:25 161792 --a------ C:\WINDOWS\system32\ieakui.dll
                    2006-10-25 10:47 -------- d--h----- C:\Program Files\InstallShield Installation Information
                    2006-10-25 10:47 -------- d-------- C:\Program Files\Electronic Arts
                    2006-10-17 12:06 78336 --a------ C:\WINDOWS\system32\ieencode.dll
                    2006-10-17 12:05 40960 --a------ C:\WINDOWS\system32\licmgr10.dll
                    2006-10-17 12:05 206336 --------- C:\WINDOWS\system32\WinFXDocObj.exe
                    2006-10-17 12:05 105984 --a------ C:\WINDOWS\system32\url.dll
                    2006-10-17 12:04 101376 --a------ C:\WINDOWS\system32\occache.dll
                    2006-10-17 12:03 17408 --a------ C:\WINDOWS\system32\corpol.dll
                    2006-10-17 11:58 61952 --------- C:\WINDOWS\system32\icardie.dll
                    2006-10-17 11:58 12288 --------- C:\WINDOWS\system32\msfeedssync.exe
                    2006-10-17 11:57 36352 --a------ C:\WINDOWS\system32\imgutil.dll
                    2006-10-17 11:57 266752 --------- C:\WINDOWS\system32\iertutil.dll
                    2006-10-17 11:56 45568 --a------ C:\WINDOWS\system32\mshta.exe
                    2006-10-17 11:28 48128 --a------ C:\WINDOWS\system32\mshtmler.dll
                    2006-10-17 11:27 380928 --------- C:\WINDOWS\system32\ieapfltr.dll
                    2006-10-15 18:16 -------- d-------- C:\Program Files\WinRAR
                    2006-10-13 12:36 145920 --a------ C:\WINDOWS\system32\nwprovau.dll
                    2006-10-11 15:38 -------- d-------- C:\Program Files\Common Files
                    2006-10-11 13:10 -------- d-------- C:\Program Files\Call of Duty
                    2006-10-11 12:04 118784 -r------- C:\WINDOWS\bwUnin-7.2.0.157-8876480SL.exe
                    2006-10-08 17:28 -------- d-------- C:\Documents and Settings\Pierre\Application Data\Apple Computer
                    2006-10-08 16:31 -------- d-------- C:\Program Files\QuickTime
                    2006-10-08 16:30 -------- d-------- C:\Program Files\iTunes
                    2006-10-08 16:29 -------- d-------- C:\Program Files\iPod
                    2006-10-06 14:29 -------- d-------- C:\Documents and Settings\Pierre\Application Data\Atari
                    2006-10-06 14:22 -------- d-------- C:\Program Files\Fichiers communs\PocketSoft
                    2006-10-06 14:20 -------- d-------- C:\Program Files\Atari
                    2006-10-04 17:54 -------- d-------- C:\Documents and Settings\Pierre\Application Data\Logitech
                    2006-10-04 17:51 118784 -r------- C:\WINDOWS\bwUnin-7.2.0.137-8876480SL.exe
                    2006-10-04 17:51 -------- d-------- C:\Program Files\MUSICMATCH
                    2006-10-04 17:51 -------- d-------- C:\Program Files\Logitech
                    2006-10-04 17:50 -------- d-------- C:\Program Files\Fichiers communs\Logitech
                    2006-10-03 16:52 -------- d-------- C:\Program Files\EA GAMES
                    2006-09-13 05:03 1084416 --a------ C:\WINDOWS\system32\msxml3.dll
                    2006-09-06 16:43 22752 --a------ C:\WINDOWS\system32\spupdsvc.exe
                    2006-08-31 20:36 98304 --a------ C:\WINDOWS\system32\CmdLineExt.dll

                    (((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))

                    *Note* empty entries are not shown

                    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
                    "CTFMON.EXE"="C:\\WINDOWS\\system32\\ctfmon.exe"
                    "LDM"="C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"
                    "MSMSGS"="\"C:\\Program Files\\Messenger\\msmsgs.exe\" /background"
                    "MessengerPlus3"="\"C:\\Program Files\\MessengerPlus! 3\\MsgPlus.exe\" /WinStart"

                    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
                    "SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.5.0_08\\bin\\jusched.exe\""
                    "IAAnotif"="C:\\Program Files\\Intel\\Intel Matrix Storage Manager\\iaanotif.exe"
                    "ATIPTA"="C:\\Program Files\\ATI Technologies\\ATI Control Panel\\atiptaxx.exe"
                    "CTSysVol"="C:\\Program Files\\Creative\\SBAudigy2ZS\\Surround Mixer\\CTSysVol.exe /r"
                    "CTDVDDET"="\"C:\\Program Files\\Creative\\SBAudigy2ZS\\DVDAudio\\CTDVDDET.EXE\""
                    "CTHelper"="CTHELPER.EXE"
                    "UpdReg"="C:\\WINDOWS\\UpdReg.EXE"
                    "DVDLauncher"="\"C:\\Program Files\\CyberLink\\PowerDVD\\DVDLauncher.exe\""
                    "DMXLauncher"="C:\\Program Files\\Dell\\Media Experience\\DMXLauncher.exe"
                    "dla"="C:\\WINDOWS\\system32\\dla\\tfswctrl.exe"
                    "ISUSPM Startup"="C:\\PROGRA~1\\FICHIE~1\\INSTAL~1\\UPDATE~1\\ISUSPM.exe -startup"
                    "ISUSScheduler"="\"C:\\Program Files\\Fichiers communs\\InstallShield\\UpdateService\\issch.exe\" -start"
                    "SigmatelSysTrayApp"="stsystra.exe"
                    "DAEMON Tools"="\"C:\\Program Files\\DAEMON Tools\\daemon.exe\" -lang 1033"
                    "avast!"="C:\\PROGRA~1\\ALWILS~1\\Avast4\\ashDisp.exe"
                    "Logitech Hardware Abstraction Layer"="KHALMNPR.EXE"
                    "iTunesHelper"="\"C:\\Program Files\\iTunes\\iTunesHelper.exe\""
                    "QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
                    "MessengerPlus3"="\"C:\\Program Files\\MessengerPlus! 3\\MsgPlus.exe\""
                    "tcactive"="C:\\Program Files\\The Cleaner\\tca.exe"
                    "tcmonitor"="C:\\Program Files\\The Cleaner\\tcm.exe"
                    "!AVG Anti-Spyware"="\"C:\\Program Files\\Grisoft\\AVG Anti-Spyware 7.5\\avgas.exe\" /minimized"

                    [HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components]
                    "DeskHtmlVersion"=dword:00000110
                    "DeskHtmlMinorVersion"=dword:00000005
                    "Settings"=dword:00000001
                    "GeneralFlags"=dword:00000001

                    [HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0]
                    "Source"="About:Home"
                    "SubscribedURL"="About:Home"
                    "FriendlyName"="Ma page d'accueil"
                    "Flags"=dword:00000002
                    "Position"=hex:2c,00,00,00,cc,00,00,00,00,00,00,00,34,03,00,00,e2,02,00,00,00,\
                    00,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00
                    "CurrentState"=hex:04,00,00,40
                    "OriginalStateInfo"=hex:18,00,00,00,ff,ff,00,00,ff,ff,00,00,ff,ff,ff,ff,ff,ff,\
                    ff,ff,04,00,00,00
                    "RestoredStateInfo"=hex:18,00,00,00,6a,02,00,00,23,00,00,00,a4,00,00,00,9a,00,\
                    00,00,01,00,00,00

                    [HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
                    "CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE"

                    [HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run]
                    "CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE"

                    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler]
                    "{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Pré-chargeur Browseui"
                    "{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Démon de cache des catégories de composant"

                    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
                    "{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=""
                    "{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="AVG Anti-Spyware 7.5"

                    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
                    "NoDriveTypeAutoRun"=dword:00000091

                    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\Run]

                    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
                    "dontdisplaylastusername"=dword:00000000
                    "legalnoticecaption"=""
                    "legalnoticetext"=""
                    "shutdownwithoutlogon"=dword:00000001
                    "undockwithoutlogon"=dword:00000001

                    [HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
                    "NoDriveTypeAutoRun"=dword:00000091

                    [HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\policies\explorer]
                    "NoDriveTypeAutoRun"=dword:00000091

                    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload]
                    "PostBootReminder"="{7849596a-48ea-486e-8937-a2a3009f31a9}"
                    "CDBurn"="{fbeb8a05-beee-4442-804e-409d6c4515e9}"
                    "WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"
                    "SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}"

                    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
                    "SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"

                    Completion time: 06-11-29 11:38:16.59
                    C:\ComboFix.txt ... 06-11-29 11:38
                    0
                    1. shadow22 Auteur
                      et voilà le HijackThis:

                      Logfile of HijackThis v1.99.1
                      Scan saved at 11:40:03, on 29/11/2006
                      Platform: Windows XP SP2 (WinNT 5.01.2600)
                      MSIE: Internet Explorer v7.00 (7.00.5730.0011)

                      Running processes:
                      C:\WINDOWS\System32\smss.exe
                      C:\WINDOWS\system32\winlogon.exe
                      C:\WINDOWS\system32\services.exe
                      C:\WINDOWS\system32\lsass.exe
                      C:\WINDOWS\system32\Ati2evxx.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\WINDOWS\System32\svchost.exe
                      C:\WINDOWS\system32\spoolsv.exe
                      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                      C:\Program Files\Alwil Software\Avast4\ashServ.exe
                      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                      C:\WINDOWS\system32\CTsvcCDA.EXE
                      C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                      C:\WINDOWS\Explorer.EXE
                      C:\WINDOWS\system32\PRISMSVR.EXE
                      C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe
                      C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
                      C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe
                      C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE
                      C:\WINDOWS\system32\CTHELPER.EXE
                      C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
                      C:\Program Files\Dell\Media Experience\DMXLauncher.exe
                      C:\WINDOWS\system32\dla\tfswctrl.exe
                      C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
                      C:\WINDOWS\stsystra.exe
                      C:\Program Files\DAEMON Tools\daemon.exe
                      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                      C:\Program Files\iTunes\iTunesHelper.exe
                      C:\Program Files\iPod\bin\iPodService.exe
                      C:\Program Files\MessengerPlus! 3\MsgPlus.exe
                      C:\Program Files\The Cleaner\tca.exe
                      C:\Program Files\The Cleaner\tcm.exe
                      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
                      C:\WINDOWS\system32\ctfmon.exe
                      C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
                      C:\Program Files\Messenger\msmsgs.exe
                      C:\Program Files\AVerTV USB 2.0 Plus\QuickTV.exe
                      C:\Program Files\Dell sans fil\PRISMCFG.exe
                      C:\Program Files\Logitech\SetPoint\SetPoint.exe
                      C:\Program Files\Fichiers communs\Logitech\KHAL\KHALMNPR.EXE
                      C:\Program Files\Internet Explorer\iexplore.exe
                      C:\WINDOWS\system32\NOTEPAD.EXE
                      C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

                      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.dell.com/content/public/choosecountry.aspx?c=us&l=en&s=gen
                      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://runonce.msn.com/?v=msgrv75
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
                      R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.dell.com/content/public/choosecountry.aspx?c=us&l=en&s=gen
                      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe"
                      O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
                      O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                      O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe /r
                      O4 - HKLM\..\Run: [CTDVDDET] "C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE"
                      O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
                      O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
                      O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
                      O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe
                      O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
                      O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
                      O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
                      O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
                      O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
                      O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                      O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
                      O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
                      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                      O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
                      O4 - HKLM\..\Run: [tcactive] C:\Program Files\The Cleaner\tca.exe
                      O4 - HKLM\..\Run: [tcmonitor] C:\Program Files\The Cleaner\tcm.exe
                      O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
                      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
                      O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
                      O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
                      O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
                      O4 - Startup: Registration Brothers In Arms.LNK = F:\Support\Register\RegistrationReminder.exe
                      O4 - Startup: Registration Call of Juarez SP Demo.LNK = C:\Program Files\Ubisoft\Demo\Techland\Call of Juarez SP Demo\RegistrationReminder.exe
                      O4 - Global Startup: AVerTV USB 2.0.lnk = C:\Program Files\AVerTV USB 2.0 Plus\QuickTV.exe
                      O4 - Global Startup: Carte pour réseau sans fil WLAN (USB 2.0).lnk = ?
                      O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
                      O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
                      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll (file missing)
                      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll (file missing)
                      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
                      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
                      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                      O11 - Options group: [INTERNATIONAL] International*
                      O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
                      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
                      O18 - Protocol: bw+0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw+0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw-0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw-0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw00 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw00s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw10 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw10s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw20 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw20s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw30 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw30s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw40 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw40s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw50 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw50s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw60 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw60s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw70 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw70s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw80 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw80s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw90 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw90s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwa0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwa0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwb0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwb0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwc0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwc0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwd0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwd0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwe0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwe0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwf0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwf0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
                      O18 - Protocol: bwg0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwg0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwh0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwh0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwi0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwi0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwj0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwj0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwk0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwk0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwl0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwl0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwm0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwm0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwn0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwn0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwo0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwo0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwp0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwp0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwq0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwq0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwr0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwr0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bws0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bws0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwt0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwt0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwu0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwu0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwv0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwv0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bww0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bww0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwx0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwx0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwy0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwy0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwz0 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwz0s - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
                      O18 - Protocol: offline-8876480 - {8AAC822B-49A9-4F5C-B7BA-4846148B95BD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
                      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
                      O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                      O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
                      O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
                      O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                      O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
                      O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
                      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
                      O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
                      0
                      1. shadow22 Auteur
                        voilà c'est bon j'ai mis les deux rapports!
                        0
                        1. Utilisateur anonyme
                          Bonjour

                          Plus rien d'infectieux dans ces rapports.

                          As tu encore des dysfonctionnements ?
                          0
                          1. shadow22 Auteur
                            Je crois que c'est tout bon en tout cas un grand merci!! Si jamais il y a encore un problème je te tiendrais au courant! merci beaucoup et bonne continuation!
                            0
                            1. delpilou
                              bonjour,

                              Moi aussi j'ai chopé le cheval de troie par msn
                              je mets mon rapport

                              ogfile of Trend Micro HijackThis v2.0.2
                              Scan saved at 19:33:57, on 24/01/2008
                              Platform: Windows XP SP2 (WinNT 5.01.2600)
                              MSIE: Internet Explorer v7.00 (7.00.6000.16574)
                              Boot mode: Normal

                              Running processes:
                              C:\WINDOWS\System32\smss.exe
                              C:\WINDOWS\system32\winlogon.exe
                              C:\WINDOWS\system32\services.exe
                              C:\WINDOWS\system32\lsass.exe
                              C:\WINDOWS\system32\Ati2evxx.exe
                              C:\WINDOWS\system32\svchost.exe
                              C:\WINDOWS\System32\svchost.exe
                              C:\WINDOWS\system32\Ati2evxx.exe
                              C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                              C:\Program Files\Alwil Software\Avast4\ashServ.exe
                              C:\WINDOWS\system32\spoolsv.exe
                              C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
                              C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
                              C:\WINDOWS\Explorer.EXE
                              C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
                              C:\WINDOWS\eHome\ehRecvr.exe
                              C:\WINDOWS\eHome\ehSched.exe
                              C:\WINDOWS\System32\FTRTSVC.exe
                              C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                              c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
                              C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
                              C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
                              C:\WINDOWS\ehome\ehtray.exe
                              C:\WINDOWS\RTHDCPL.EXE
                              C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
                              C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
                              C:\WINDOWS\system32\SysMonitor.exe
                              C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
                              C:\WINDOWS\system32\svchost.exe
                              C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe
                              C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                              C:\Program Files\D-Tools\daemon.exe
                              C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
                              C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe
                              C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
                              C:\Program Files\Logitech\QuickCam\Quickcam.exe
                              C:\DOCUME~1\del\LOCALS~1\Temp\services.exe
                              C:\WINDOWS\mrofinu1148.exe
                              C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
                              C:\WINDOWS\system32\ctfmon.exe
                              C:\leupj.exe
                              C:\Program Files\MaxiMemo\MaxiMemo.exe
                              C:\Program Files\Google\Google Updater\GoogleUpdater.exe
                              C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                              C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                              C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
                              C:\WINDOWS\system32\dllhost.exe
                              C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
                              C:\WINDOWS\eHome\ehmsas.exe
                              C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
                              C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
                              C:\Program Files\Internet Explorer\IEXPLORE.EXE
                              C:\WINDOWS\system32\rundll32.exe
                              C:\Documents and Settings\del\Bureau\virus\HiJackThis\HijackThis.exe

                              R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
                              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                              R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ustart.org
                              R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
                              R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                              R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
                              O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                              O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll
                              O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
                              O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                              O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
                              O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\WINDOWS\system32\eDStoolbar.dll
                              O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
                              O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
                              O4 - HKLM\..\Run: [LaunchApp] Alaunch
                              O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
                              O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
                              O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
                              O4 - HKLM\..\Run: [ntiMUI] c:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe
                              O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
                              O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
                              O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
                              O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
                              O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
                              O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
                              O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\WINDOWS\system32\SysMonitor.exe
                              O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
                              O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe 1
                              O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
                              O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe"
                              O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
                              O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
                              O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                              O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
                              O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
                              O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
                              O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"
                              O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
                              O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
                              O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
                              O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
                              O4 - HKLM\..\Run: [Flash Player2] C:\DOCUME~1\del\LOCALS~1\Temp\services.exe
                              O4 - HKLM\..\Run: [runner1] C:\WINDOWS\mrofinu1148.exe 61A847B5BBF72813339F30466188719AB689201522886B092CBD44BD8689220221DD3257
                              O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
                              O4 - HKCU\..\Run: [updateMgr] c:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9
                              O4 - HKCU\..\Run: [hldrrr] C:\WINDOWS\system32\hldrrr.exe
                              O4 - HKCU\..\Run: [Mssngr] C:\WINDOWS\system32\ecDocxepr\Messenger.exe
                              O4 - HKCU\..\Run: [WintelUpdate] C:\leupj.exe
                              O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
                              O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
                              O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
                              O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
                              O4 - Global Startup: MaxiMemo.lnk = C:\Program Files\MaxiMemo\MaxiMemo.exe
                              O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
                              O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
                              O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
                              O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                              O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                              O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
                              O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
                              O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                              O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                              O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
                              O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei/SmileyCentralFWBInitialSetup1.0.0.15.cab
                              O16 - DPF: {3E82BB3F-ABE4-458D-9281-0187286A4E51} (VoxsyncCtrl Class) - https://login.orange.fr/captcha?return_url=https%3A%2F%2Fmescontacts.orange.fr
                              O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://delpilou.spaces.live.com//PhotoUpload/MsnPUpld.cab
                              O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.mypixmania.com/fr/fr/importer/MypixUploader.cab
                              O16 - DPF: {E1FFA9C5-7F7F-4E80-B5C8-667D8C81DC5E} - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
                              O23 - Service: Memory Check Service (AcerMemUsageCheckService) - Acer Inc. - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
                              O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                              O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
                              O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
                              O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                              O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                              O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                              O23 - Service: FFI - Unknown owner - C:\WINDOWS\system32\svchost.exe:exm.exe (file missing)
                              O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
                              O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                              O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
                              O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
                              O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
                              O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
                              O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
                              O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
                              O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
                              0

                              Discussions similaires

                              symboles et écritures pour nick msn
                              Pando

                              20 réponses
                              msn + &#9786;(symbole)
                              m0ii

                              19 réponses
                              Comment insérer correctement des caractères spéciaux ou émojis ?
                              Lia

                              45 réponses