Trojan-gen {other}

ok je m'y attèle !
Merci pour ton aide.
Lilian

BoulePate,

je te fournie les 2 listings demandés

pour AVG AntiSpyware :

---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

+ Créé à: 16:13:58 05/02/2007

+ Résultat de l'analyse:



C:\Documents and Settings\Lilian Coquel\Local Settings\Temp\temp.fr9699\up.dat -> Adware.Systemdoctor : Ignoré.
C:\System Volume Information\_restore{EA39A09C-50BA-4996-869B-915C83FE3B53}\RP268\A0047781.dll -> Adware.Virtumonde : Ignoré.
C:\VundoFix Backups\cbxwxur.dll.bad -> Adware.Virtumonde : Ignoré.
C:\VundoFix Backups\hgggfff.dll.bad -> Adware.Virtumonde : Ignoré.
C:\Documents and Settings\Lilian Coquel\Local Settings\Temp\USDR6V_0001_D18M3107\installer.exe -> Adware.WinFixer : Ignoré.
C:\WINDOWS\Temp\idd31F.tmp.exe -> Dialer.IDialer.m : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\idd349.tmp.exe -> Dialer.IDialer.m : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\idd34F.tmp.exe -> Dialer.IDialer.m : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\idd364.tmp.exe -> Dialer.IDialer.m : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\idd3AF.tmp.exe -> Dialer.IDialer.m : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\idd3EA.tmp.exe -> Dialer.IDialer.m : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\idd420.tmp.exe -> Dialer.IDialer.m : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\idd435.tmp.exe -> Dialer.IDialer.m : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\idd46F.tmp.exe -> Dialer.IDialer.m : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\idd48B.tmp.exe -> Dialer.IDialer.m : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\idd49E.tmp.exe -> Dialer.IDialer.m : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\idd4AD.tmp.exe -> Dialer.IDialer.m : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\idd4B4.tmp.exe -> Dialer.IDialer.m : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\idd4E7.tmp.exe -> Dialer.IDialer.m : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\idd4E8.tmp.exe -> Dialer.IDialer.m : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\idd516.tmp.exe -> Dialer.IDialer.m : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\win2F8.tmp.exe -> Dialer.Small : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\win49D.tmp.exe -> Dialer.Small : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{EA39A09C-50BA-4996-869B-915C83FE3B53}\RP271\A0048070.exe -> Downloader.Tiny.fk : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\win160.tmp.exe -> Downloader.Tiny.fk : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\Lilian Coquel\Cookies\lilian coquel@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\System Volume Information\_restore{EA39A09C-50BA-4996-869B-915C83FE3B53}\RP268\A0047696.dll -> Trojan.Agent.acl : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\Lilian Coquel\Local Settings\Temp\mst1D1.tmp -> Trojan.Agent.qt : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{EA39A09C-50BA-4996-869B-915C83FE3B53}\RP271\A0048053.dll -> Trojan.Agent.qt : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{EA39A09C-50BA-4996-869B-915C83FE3B53}\RP267\A0047661.exe -> Trojan.Dialer.rt : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{EA39A09C-50BA-4996-869B-915C83FE3B53}\RP268\A0047682.exe -> Trojan.Dialer.rt : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{EA39A09C-50BA-4996-869B-915C83FE3B53}\RP268\A0047794.exe -> Trojan.Dialer.rt : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{EA39A09C-50BA-4996-869B-915C83FE3B53}\RP268\A0047843.exe -> Trojan.Dialer.rt : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{EA39A09C-50BA-4996-869B-915C83FE3B53}\RP269\A0047878.exe -> Trojan.Dialer.rt : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{EA39A09C-50BA-4996-869B-915C83FE3B53}\RP270\A0047966.exe -> Trojan.Dialer.rt : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{EA39A09C-50BA-4996-869B-915C83FE3B53}\RP271\A0048071.exe -> Trojan.Dialer.rt : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\win2EA.tmp.exe -> Trojan.Dialer.rt : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\win2F6.tmp.exe -> Trojan.Dialer.rt : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\win30.tmp.exe -> Trojan.Dialer.rt : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\win497.tmp.exe -> Trojan.Dialer.rt : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\win49F.tmp.exe -> Trojan.Dialer.rt : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Temp\win83.tmp.exe -> Trojan.Dialer.rt : Nettoyé et sauvegardé (mise en quarantaine).


Fin du rapport

pour BitDefender :

BitDefender Online Scanner - Real Time Virus Report



Generated at: Mon, Feb 05, 2007 - 17:48:01


--------------------------------------------------------------------------------





Scan Info

Scanned Files
383915

Infected Files
39



Virus Detected

DeepScan:Generic.Malware.SYddldg.FB24BD65
2

Trojan.Downloader.Agent.AQG
20

Trojan.Agent.ACL
1

DeepScan:Generic.Malware.SYddldg.ACD7975F
1

DeepScan:Generic.Malware.SYddldg.78C4B135
1

Trojan.Spy.VBStat.B
1

MemScan:Trojan.Vundo.W
2

Dropped:Dialer.Udia.A
4

Trojan.Juan.D
1

Trojan.Downloader.AHV
1

Trojan.Virtumod.EB
1

DeepScan:Generic.Malware.SYBddldg.5607F76B
1

Trojan.Agent.AJO
1

Dialer.Porn.Y
2

C'est grave Docteur ? ;-)

Salut BoulePat !
Saches que sous CCleaner, j'ai eu toujours la même et unique erreur "police inexistante" systématiquement après chaque nettoyage (et j'ai insisté pour nettoyer)
voyant que rien n'y faisait
j'ai lancé ComboFix
Voulant te mettre une copie d'écran de cette erreur sur le net
je suis retourné (après le rapport de ComboFix) sous CCleaner
et là il me découvre une erreur supplémentaire ... !!!
Tu comprends mon désarroi !

la copie d'écran se trouve à :
http://www.project-images.com/ccleaner.jpg


voici le rapport de ComboFix :
"Lilian Coquel" - 07-02-06 9:37:05 Service Pack 2
ComboFix 07.02.04 - Running from: "C:\Documents and Settings\Lilian Coquel\Bureau"

((((((((((((((((((((((((((((((( Files Created from 2007-01-06 to 2007-02-06 ))))))))))))))))))))))))))))))))))


2007-02-06 09:20 <REP> d-------- C:\Program Files\CCleaner
2007-02-05 16:16 <REP> d-------- C:\WINDOWS\BDOSCAN8
2007-02-05 14:17 3,968 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2007-02-05 14:17 <REP> d-------- C:\Program Files\Grisoft
2007-01-26 10:11 <REP> dr------- C:\DOCUME~1\ADMINI~1\Mes documents
2007-01-26 10:11 <REP> dr------- C:\DOCUME~1\ADMINI~1\Menu D‚marrer
2007-01-26 10:11 <REP> dr------- C:\DOCUME~1\ADMINI~1\Favoris
2007-01-26 10:11 <REP> d--h----- C:\DOCUME~1\ADMINI~1\Voisinage r‚seau
2007-01-26 10:11 <REP> d--h----- C:\DOCUME~1\ADMINI~1\Voisinage d'impression
2007-01-26 10:11 <REP> d--h----- C:\DOCUME~1\ADMINI~1\ModŠles
2007-01-26 10:11 <REP> d-------- C:\DOCUME~1\ADMINI~1\Bureau
2007-01-26 10:11 <REP> d-------- C:\DOCUME~1\ADMINI~1\Application Data\You've Got Pictures Screensaver
2007-01-26 10:11 <REP> d-------- C:\DOCUME~1\ADMINI~1\Application Data\Symantec
2007-01-26 10:11 <REP> d-------- C:\DOCUME~1\ADMINI~1\Application Data\Sun
2007-01-26 10:11 <REP> d-------- C:\DOCUME~1\ADMINI~1\Application Data\Jasc Software Inc
2007-01-25 16:28 <REP> d-------- C:\Program Files\a-squared Anti-Malware
2007-01-25 16:15 <REP> d-------- C:\VundoFix Backups
2007-01-25 11:52 <REP> d-------- C:\DOCUME~1\ALLUSE~1\Application Data\Spybot - Search & Destroy


(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))


2007-02-05 16:45 -------- d-------- C:\DOCUME~1\LILIAN~1\Application Data\adobe
2007-01-25 16:57 3159 --a------ C:\DOCUME~1\LILIAN~1\Application Data\quickzip45.ini
2007-01-15 18:32 689280 --a------ C:\WINDOWS\system32\aswboot.exe
2007-01-15 18:26 23352 --a------ C:\WINDOWS\system32\drivers\aswRdr.sys
2007-01-15 18:25 43176 --a------ C:\WINDOWS\system32\drivers\aswTdi.sys
2007-01-15 18:23 90112 --a------ C:\WINDOWS\system32\avastss.scr
2007-01-11 11:35 -------- d--h----- C:\Program Files\installshield installation information
2007-01-02 18:00 -------- d-------- C:\DOCUME~1\LILIAN~1\Application Data\divx
2007-01-02 17:54 -------- d-------- C:\Program Files\divx
2006-12-21 00:56 94424 --a------ C:\WINDOWS\system32\drivers\aswmon2.sys
2006-12-21 00:56 85952 --a------ C:\WINDOWS\system32\drivers\aswmon.sys
2006-12-21 00:51 31560 --a------ C:\WINDOWS\system32\drivers\aavmker4.sys
2006-12-17 17:08 -------- d-------- C:\Program Files\reflexivearcade
2006-12-15 09:30 -------- d-------- C:\DOCUME~1\LILIAN~1\Application Data\u3
2006-12-12 17:30 520192 --a------ C:\WINDOWS\system32\divxsm.exe
2006-12-12 17:30 3596288 --a------ C:\WINDOWS\system32\qt-dx331.dll
2006-12-12 17:30 200704 --a------ C:\WINDOWS\system32\ssldivx.dll
2006-12-12 17:30 1044480 --a------ C:\WINDOWS\system32\libdivx.dll
2006-12-12 17:25 806912 --a------ C:\WINDOWS\system32\divx_xx0c.dll
2006-12-12 17:25 806912 --a------ C:\WINDOWS\system32\divx_xx07.dll
2006-12-12 17:25 790528 --a------ C:\WINDOWS\system32\divx_xx11.dll
2006-12-12 17:25 73728 --a------ C:\WINDOWS\system32\dpl100.dll
2006-12-12 17:25 635486 --a------ C:\WINDOWS\system32\divx.dll
2006-12-12 17:25 593920 --a------ C:\WINDOWS\system32\dpugui11.dll
2006-12-12 17:25 57344 --a------ C:\WINDOWS\system32\dpv11.dll
2006-12-12 17:25 53248 --a------ C:\WINDOWS\system32\dpugui10.dll
2006-12-12 17:25 344064 --a------ C:\WINDOWS\system32\dpus11.dll
2006-12-12 17:25 294912 --a------ C:\WINDOWS\system32\dpu11.dll
2006-12-12 17:25 294912 --a------ C:\WINDOWS\system32\dpu10.dll
2006-12-12 17:25 196608 --a------ C:\WINDOWS\system32\dtu100.dll
2006-12-12 17:24 12288 --a------ C:\WINDOWS\system32\divxwmpexttype.dll
2006-12-12 17:24 118784 --a------ C:\WINDOWS\system32\divxcodecupdatechecker.exe
2006-12-07 17:02 2174976 --a------ C:\WINDOWS\system32\wmvcore.dll
2006-11-08 06:07 679424 --a------ C:\WINDOWS\system32\inetcomm.dll


(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))

*Note* empty entries & legit default entries are not shown

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"MSMSGS"="\"C:\\Program Files\\Messenger\\msmsgs.exe\" /background"
"ATnotes.exe"="C:\\Program Files\\ATnotes\\ATnotes.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.5.0_09\\bin\\jusched.exe\""
"Dell QuickSet"="C:\\Program Files\\Dell\\QuickSet\\quickset.exe"
"Dell Wireless Manager UI"="C:\\WINDOWS\\system32\\WLTRAY"
"SynTPLpr"="C:\\Program Files\\Synaptics\\SynTP\\SynTPLpr.exe"
"SynTPEnh"="C:\\Program Files\\Synaptics\\SynTP\\SynTPEnh.exe"
"PRONoMgrWired"="C:\\Program Files\\Intel\\PROSetWired\\NCS\\PROSet\\PRONoMgr.exe"
"DVDLauncher"="\"C:\\Program Files\\CyberLink\\PowerDVD\\DVDLauncher.exe\""
"ISUSScheduler"="\"C:\\Program Files\\Fichiers communs\\InstallShield\\UpdateService\\issch.exe\" -start"
"MXO Auto Loader"="C:\\WINDOWS\\MXOaldr.exe"
"EPSON Stylus C62 Series"="C:\\WINDOWS\\System32\\spool\\DRIVERS\\W32X86\\3\\E_S10IC2.EXE /P23 \"EPSON Stylus C62 Series\" /O6 \"USB001\" /M \"Stylus C62\""
"iTunesHelper"="\"C:\\Program Files\\iTunes\\iTunesHelper.exe\""
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"HPDJ Taskbar Utility"="C:\\WINDOWS\\system32\\spool\\drivers\\w32x86\\3\\hpztsb11.exe"
"HPHUPD06"="C:\\Program Files\\HP\\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\\hphupd06.exe"
"HP Software Update"="\"C:\\Program Files\\HP\\HP Software Update\\HPWuSchd2.exe\""
"HP Component Manager"="\"C:\\Program Files\\HP\\hpcoretech\\hpcmpmgr.exe\""
"HPHmon06"="C:\\WINDOWS\\system32\\hphmon06.exe"
"TkBellExe"="\"C:\\Program Files\\Fichiers communs\\Real\\Update_OB\\realsched.exe\" -osboot"
"avast!"="C:\\PROGRA~1\\ALWILS~1\\Avast4\\ashDisp.exe"
"igfxtray"="C:\\WINDOWS\\system32\\igfxtray.exe"
"igfxhkcmd"="C:\\WINDOWS\\system32\\hkcmd.exe"
"igfxpers"="C:\\WINDOWS\\system32\\igfxpers.exe"
"ScreenPrint32"="C:\\Program Files\\ScreenPrint32 v3\\ScreenPrint32.exe -startup"
"MDDiskProtect.exe"="C:\\Program Files\\Mediafour\\MacDrive\\MDDiskProtect.exe"
"MediafourGettingStartedWithMacDrive6"="\"C:\\Program Files\\Mediafour\\MacDrive\\MacDrive.exe\" /runonce"
"Mediafour Mac Volume Notifications"="\"C:\\Program Files\\Fichiers communs\\Mediafour\\MACVNTFY.EXE\" /auto"
"Shutdown"="C:\\Program Files\\CHRYOPROD\\Erase-IT\\Erase-IT.exe"
"flockbox"="C:\\Program Files\\Folder Lockbox\\flockbox.exe /a"
"a-squared"="\"C:\\Program Files\\a-squared Anti-Malware\\a2guard.exe\""
"!AVG Anti-Spyware"="\"C:\\Program Files\\Grisoft\\AVG Anti-Spyware 7.5\\avgas.exe\" /minimized"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL]
"Installed"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS]
"Installed"="1"


[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{6E4B23EE-D412-48BD-B133-60574061E429}"=""
"{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="AVG Anti-Spyware 7.5"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload]
"UPnPMonitor"="{e57ce738-33e8-4c51-8354-bb4de9d215d1}"

HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\MacDrive-iTunes compatibility
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\winccf32

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost]
HTTPFilter REG_MULTI_SZ HTTPFilter\0\0
LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0
NetworkService REG_MULTI_SZ DnsCache\0\0
DcomLaunch REG_MULTI_SZ DcomLaunch\0TermService\0\0
rpcss REG_MULTI_SZ RpcSs\0\0
imgsvc REG_MULTI_SZ StiSvc\0\0
termsvcs REG_MULTI_SZ TermService\0\0


[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{25ff31e4-4ef3-11db-8b94-0014a53490ee}]
Shell\AutoRun\command E:\LaunchU3.exe


Contents of the 'Scheduled Tasks' folder
C:\WINDOWS\tasks\HP Usg Daily FY04.job
C:\WINDOWS\tasks\Low Battery Alarm Program.job
C:\WINDOWS\tasks\Rappel d'abonnement 1 auprŠs de l'ISP.job


********************************************************************

catchme 0.1 W2K/XP - userland rootkit detector by Gmer, 17 October 2006
http://www.gmer.net

scanning hidden processes ...

scanning hidden services ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0

********************************************************************

Completion time: 07-02-06 9:41:37

Alors question :
est-ce que tu m'as permis de me retirer ces sales "morpions" qui importunaient mes petites puces électroniques tant adorées !?

Lilian

Ok, bon,

je te mets le rapport de AdAware :


Ad-Aware SE Build 1.06r1
Logfile Created on:mardi 6 février 2007 13:01:13
Created with Ad-Aware SE Personal, free for private use.
Using definitions file:SE1R149 05.02.2007
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

References detected during the scan:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
MRU List(TAC index:0):14 total references
Tracking Cookie(TAC index:3):1 total references
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Ad-Aware SE Settings
===========================
Set : Search for negligible risk entries
Set : Safe mode (always request confirmation)
Set : Scan active processes
Set : Scan registry
Set : Deep-scan registry
Set : Scan my IE Favorites for banned URLs
Set : Scan my Hosts file

Extended Ad-Aware SE Settings
===========================
Set : Unload recognized processes & modules during scan
Set : Scan registry for all users instead of current user only
Set : Always try to unload modules before deletion
Set : During removal, unload Explorer and IE if necessary
Set : Let Windows remove files in use at next reboot
Set : Delete quarantined objects after restoring
Set : Include basic Ad-Aware settings in log file
Set : Include additional Ad-Aware settings in log file
Set : Include reference summary in log file
Set : Include alternate data stream details in log file
Set : Play sound at scan completion if scan locates critical objects


06-02-2007 13:01:13 - Scan started. (Smart mode)

Listing running processes
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

#:1 [smss.exe]
FilePath : \SystemRoot\System32\
ProcessID : 516
ThreadCreationTime : 06-02-2007 08:11:35
BasePriority : Normal


#:2 [csrss.exe]
FilePath : \??\C:\WINDOWS\system32\
ProcessID : 580
ThreadCreationTime : 06-02-2007 08:11:37
BasePriority : Normal


#:3 [winlogon.exe]
FilePath : \??\C:\WINDOWS\system32\
ProcessID : 604
ThreadCreationTime : 06-02-2007 08:11:37
BasePriority : High


#:4 [services.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 648
ThreadCreationTime : 06-02-2007 08:11:37
BasePriority : Normal
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Système d'exploitation Microsoft® Windows®
CompanyName : Microsoft Corporation
FileDescription : Applications Services et Contrôleur
InternalName : services.exe
LegalCopyright : © Microsoft Corporation. Tous droits réservés.
OriginalFilename : services.exe

#:5 [lsass.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 660
ThreadCreationTime : 06-02-2007 08:11:37
BasePriority : Normal
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : LSA Shell (Export Version)
InternalName : lsass.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : lsass.exe

#:6 [svchost.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 804
ThreadCreationTime : 06-02-2007 08:11:39
BasePriority : Normal
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : svchost.exe

#:7 [svchost.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 880
ThreadCreationTime : 06-02-2007 08:11:39
BasePriority : Normal
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : svchost.exe

#:8 [svchost.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 916
ThreadCreationTime : 06-02-2007 08:11:39
BasePriority : Normal
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : svchost.exe

#:9 [svchost.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 972
ThreadCreationTime : 06-02-2007 08:11:39
BasePriority : Normal
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : svchost.exe

#:10 [svchost.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 1092
ThreadCreationTime : 06-02-2007 08:11:40
BasePriority : Normal
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : svchost.exe

#:11 [wltrysvc.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 1256
ThreadCreationTime : 06-02-2007 08:11:41
BasePriority : Normal


#:12 [bcmwltry.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 1268
ThreadCreationTime : 06-02-2007 08:11:41
BasePriority : Normal
FileVersion : 3.100.41.0
ProductVersion : 3.100.41.0
ProductName : Dell Wireless WLAN Card Wireless Network Controller
CompanyName : Dell Inc
FileDescription : Dell Wireless WLAN Card Wireless Network Controller
InternalName : bcmwltry.exe
LegalCopyright : 1998-2004, Dell Inc All Rights Reserved.
OriginalFilename : bcmwltry.exe

#:13 [spoolsv.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 1428
ThreadCreationTime : 06-02-2007 08:11:41
BasePriority : Normal
FileVersion : 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)
ProductVersion : 5.1.2600.2696
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Spooler SubSystem App
InternalName : spoolsv.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : spoolsv.exe

#:14 [explorer.exe]
FilePath : C:\WINDOWS\
ProcessID : 1476
ThreadCreationTime : 06-02-2007 08:11:42
BasePriority : Normal
FileVersion : 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 6.00.2900.2180
ProductName : Système d'exploitation Microsoft® Windows®
CompanyName : Microsoft Corporation
FileDescription : Explorateur Windows
InternalName : explorer
LegalCopyright : © Microsoft Corporation. Tous droits réservés.
OriginalFilename : EXPLORER.EXE

#:15 [aswupdsv.exe]
FilePath : C:\Program Files\Alwil Software\Avast4\
ProcessID : 1572
ThreadCreationTime : 06-02-2007 08:11:42
BasePriority : Normal


#:16 [ashserv.exe]
FilePath : C:\Program Files\Alwil Software\Avast4\
ProcessID : 1584
ThreadCreationTime : 06-02-2007 08:11:42
BasePriority : High
FileVersion : 4, 7, 936, 0
ProductVersion : 4, 7, 0, 0
ProductName : avast! Antivirus
FileDescription : avast! antivirus service
InternalName : aswServ
LegalCopyright : Copyright (c) 2007 ALWIL Software
OriginalFilename : aswServ.exe

#:17 [guard.exe]
FilePath : C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\
ProcessID : 1644
ThreadCreationTime : 06-02-2007 08:11:43
BasePriority : Normal
FileVersion : 7, 5, 0, 47
ProductVersion : 7, 5, 0, 47
ProductName : AVG Anti-Spyware
CompanyName : Anti-Malware Development a.s.
FileDescription : AVG Anti-Spyware guard
InternalName : AVG Anti-Spyware guard
LegalCopyright : Copyright © 2006 Anti-Malware Development a.s.
OriginalFilename : guard.exe

#:18 [cnxdias.exe]
FilePath : C:\Program Files\Canon\DIAS\
ProcessID : 1700
ThreadCreationTime : 06-02-2007 08:11:43
BasePriority : Normal
FileVersion : 1, 4, 0, 1
ProductVersion : 1, 4, 0, 1
ProductName : Driver Information Assist Service
CompanyName : CANON INC.
FileDescription : Driver Information Assist Core Module
InternalName : DIAS
LegalCopyright : Copyright CANON INC. 2005
OriginalFilename : CnxDIAS.exe

#:19 [wnappsrv.exe]
FilePath : C:\Program Files\Canon\nsc\
ProcessID : 1720
ThreadCreationTime : 06-02-2007 08:11:43
BasePriority : Normal
FileVersion : 3, 0, 0, 0
ProductVersion : 3, 0, 0, 0
ProductName : NetSpot Console
CompanyName : CANON INC.
FileDescription : Application Server
InternalName : WNAPPSRV
LegalCopyright : Copyright CANON INC. 2000-2003
OriginalFilename : wnappsrv.exe

#:20 [wnwebsrv.exe]
FilePath : C:\Program Files\Canon\nsc\
ProcessID : 1756
ThreadCreationTime : 06-02-2007 08:11:43
BasePriority : Normal
FileVersion : 1, 10, 0, 0
ProductVersion : 4, 1, 0, 0
ProductName : NetSpot Console
CompanyName : CANON INC.
FileDescription : Canon NetSpot Console Web Service
InternalName : WNWEBSRV
LegalCopyright : Copyright CANON INC. 2002-2004
OriginalFilename : wnwebsrv.exe

#:21 [sagent2.exe]
FilePath : C:\Program Files\Fichiers communs\EPSON\EBAPI\
ProcessID : 1816
ThreadCreationTime : 06-02-2007 08:11:44
BasePriority : Normal
FileVersion : 2, 2, 0, 0
ProductVersion : 1, 0, 0, 0
ProductName : EPSON Bidirectional Printer
CompanyName : SEIKO EPSON CORPORATION
FileDescription : EPSON Printer Status Agent
InternalName : SAgent2
LegalCopyright : Copyright (C) SEIKO EPSON CORP. 2000-2001
OriginalFilename : SAgent2.exe

#:22 [jusched.exe]
FilePath : C:\Program Files\Java\jre1.5.0_09\bin\
ProcessID : 1844
ThreadCreationTime : 06-02-2007 08:11:44
BasePriority : Normal


#:23 [nicconfigsvc.exe]
FilePath : C:\Program Files\Dell\NICCONFIGSVC\
ProcessID : 1916
ThreadCreationTime : 06-02-2007 08:11:44
BasePriority : Normal
FileVersion : 1, 0, 0, 1
ProductVersion : 1, 0, 0, 1
ProductName : NicConfigSvc
CompanyName : Dell Inc.
FileDescription : Internal Network Card Power Management Service
InternalName : TestMFCAppWiz
LegalCopyright : Copyright (C) 2004 Dell Inc.
OriginalFilename : NicConfigSvc.EXE

#:24 [quickset.exe]
FilePath : C:\Program Files\Dell\QuickSet\
ProcessID : 1924
ThreadCreationTime : 06-02-2007 08:11:44
BasePriority : Normal
FileVersion : 1, 0, 0, 1
ProductVersion : 1, 0, 0, 1
ProductName : QuickSet Application
FileDescription : QuickSet MFC Application
InternalName : direct
LegalCopyright : Copyright (C) 2001
OriginalFilename : direct.EXE

#:25 [wltray.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 1964
ThreadCreationTime : 06-02-2007 08:11:44
BasePriority : Normal
FileVersion : 3.100.41.0
ProductVersion : 3.100.41.0
ProductName : Dell Wireless WLAN Card Wireless Network Tray Applet
CompanyName : Dell Inc
FileDescription : Dell Wireless WLAN Card Wireless Network Tray Applet
InternalName : wltray.exe
LegalCopyright : 1998-2004, Dell Inc All Rights Reserved.
OriginalFilename : wltray.exe

#:26 [syntplpr.exe]
FilePath : C:\Program Files\Synaptics\SynTP\
ProcessID : 124
ThreadCreationTime : 06-02-2007 08:11:44
BasePriority : Normal
FileVersion : 7.10.11 13May04
ProductVersion : 7.10.11 13May04
ProductName : Progressive Touch
CompanyName : Synaptics, Inc.
FileDescription : TouchPad Driver Helper Application
InternalName : SynTPLpr
LegalCopyright : Copyright (C) Synaptics, Inc. 1996-2004
OriginalFilename : SynTPLpr.exe

#:27 [syntpenh.exe]
FilePath : C:\Program Files\Synaptics\SynTP\
ProcessID : 156
ThreadCreationTime : 06-02-2007 08:11:45
BasePriority : Normal
FileVersion : 7.10.11 13May04
ProductVersion : 7.10.11 13May04
ProductName : Progressive Touch
CompanyName : Synaptics, Inc.
FileDescription : Synaptics TouchPad Enhancements
InternalName : Scrolleroo
LegalCopyright : Copyright (C) Synaptics, Inc. 1996-2004
OriginalFilename : SynTPEnh.exe

#:28 [svchost.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 300
ThreadCreationTime : 06-02-2007 08:11:48
BasePriority : Normal
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : svchost.exe

#:29 [dvdlauncher.exe]
FilePath : C:\Program Files\CyberLink\PowerDVD\
ProcessID : 372
ThreadCreationTime : 06-02-2007 08:11:48
BasePriority : Normal
FileVersion : 3.00.0000
ProductVersion : 3.00.0000
ProductName : Cyberlink PowerCinema 3.0
CompanyName : CyberLink Corp.
FileDescription : CyberLink PowerCinema Resident Program
InternalName : CyberLink PowerCinema Resident Program
LegalCopyright : Copyright (c) 2003 CyberLink Corp.
OriginalFilename : DVDLauncher.EXE

#:30 [issch.exe]
FilePath : C:\Program Files\Fichiers communs\InstallShield\UpdateService\
ProcessID : 568
ThreadCreationTime : 06-02-2007 08:11:48
BasePriority : Normal
FileVersion : 3, 10, 100, 1155
ProductVersion : 3, 10
ProductName : InstallShield Update Service
CompanyName : InstallShield Software Corporation
FileDescription : InstallShield Update Service Scheduler
InternalName : Scheduler
LegalCopyright : Copyright (C) 1990-2004 InstallShield Software Corporation
OriginalFilename : issch.exe

#:31 [mxoaldr.exe]
FilePath : C:\WINDOWS\
ProcessID : 832
ThreadCreationTime : 06-02-2007 08:11:49
BasePriority : Normal
FileVersion : 1.0.1010.0
ProductVersion : 1.0.1010.0
ProductName : MXO Storage Adapter
CompanyName : Cypress Semiconductor
FileDescription : Maxtor MXO Auto Loader Application
InternalName : MXOALDR.EXE
LegalCopyright : Copyright (C) 1998-2001 Cypress Semiconductor
OriginalFilename : MXOALDR.EXE

#:32 [ituneshelper.exe]
FilePath : C:\Program Files\iTunes\
ProcessID : 1080
ThreadCreationTime : 06-02-2007 08:11:49
BasePriority : Normal
FileVersion : 6.0.1.3
ProductVersion : 6.0.1.3
ProductName : iTunes
CompanyName : Apple Computer, Inc.
FileDescription : iTunesHelper Module
InternalName : iTunesHelper
LegalCopyright : © 2003-2005 Apple Computer, Inc. All Rights Reserved.
OriginalFilename : iTunesHelper.exe

#:33 [qttask.exe]
FilePath : C:\Program Files\QuickTime\
ProcessID : 1164
ThreadCreationTime : 06-02-2007 08:11:49
BasePriority : Normal
FileVersion : 7.0.3
ProductVersion : QuickTime 7.0.3
ProductName : QuickTime
CompanyName : Apple Computer, Inc.
FileDescription : QuickTime Task
InternalName : QuickTime Task
LegalCopyright : Copyright Apple Computer, Inc. 1989-2005
OriginalFilename : QTTask.exe

#:34 [hpztsb11.exe]
FilePath : C:\WINDOWS\system32\spool\drivers\w32x86\3\
ProcessID : 1220
ThreadCreationTime : 06-02-2007 08:11:50
BasePriority : Normal
FileVersion : 2.327.1.0
ProductVersion : 2.327.1.0
ProductName : HP DeskJet
CompanyName : HP
LegalCopyright : Copyright (c) Hewlett-Packard Company 1999-2004

#:35 [hpwuschd2.exe]
FilePath : C:\Program Files\HP\HP Software Update\
ProcessID : 1336
ThreadCreationTime : 06-02-2007 08:11:51
BasePriority : Normal
FileVersion : 2, 0, 39, 0
ProductVersion : 2, 0, 39, 0
ProductName : Hewlett-Packard hpwuSchd
CompanyName : Hewlett-Packard Company
FileDescription : hpwuSchd
InternalName : hpwuSchd
LegalCopyright : Copyright © 2003
OriginalFilename : hpwuSchd2.exe

#:36 [hpcmpmgr.exe]
FilePath : C:\Program Files\HP\hpcoretech\
ProcessID : 1304
ThreadCreationTime : 06-02-2007 08:11:51
BasePriority : Normal
FileVersion : 2.1.1.0
ProductVersion : 2.1.5
ProductName : hp coretech (COmponent REuse TECHnology)
CompanyName : Hewlett-Packard Company
FileDescription : HP Framework Component Manager Service
InternalName : HPComponentManagerService module
LegalCopyright : Copyright (C) Hewlett-Packard. 2002-2004
OriginalFilename : HpCmpMgr.exe

#:37 [hphmon06.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 1484
ThreadCreationTime : 06-02-2007 08:11:51
BasePriority : Normal
FileVersion : 6,0,72
ProductVersion : 6,0,72
ProductName : HP Photosmart
CompanyName : Hewlett-Packard
FileDescription : HPHmon06
InternalName : HPHmon06
LegalCopyright : Copyright (C) 2004
OriginalFilename : HPHmon06.exe

#:38 [realsched.exe]
FilePath : C:\Program Files\Fichiers communs\Real\Update_OB\
ProcessID : 1680
ThreadCreationTime : 06-02-2007 08:11:51
BasePriority : Normal
FileVersion : 0.1.0.3427
ProductVersion : 0.1.0.3427
ProductName : RealPlayer (32-bit)
CompanyName : RealNetworks, Inc.
FileDescription : RealNetworks Scheduler
InternalName : schedapp
LegalCopyright : Copyright © RealNetworks, Inc. 1995-2004
LegalTrademarks : RealAudio(tm) is a trademark of RealNetworks, Inc.
OriginalFilename : realsched.exe

#:39 [ashdisp.exe]
FilePath : C:\PROGRA~1\ALWILS~1\Avast4\
ProcessID : 2080
ThreadCreationTime : 06-02-2007 08:11:52
BasePriority : Normal
FileVersion : 4, 7, 936, 0
ProductVersion : 4, 7, 0, 0
ProductName : avast! Antivirus
FileDescription : avast! service GUI component
InternalName : aswDisp
LegalCopyright : Copyright (c) 2007 ALWIL Software
OriginalFilename : aswDisp.exe

#:40 [hkcmd.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 2096
ThreadCreationTime : 06-02-2007 08:11:52
BasePriority : Normal
FileVersion : 3.0.0.4410
ProductVersion : 7.0.0.4410
ProductName : Intel(R) Common User Interface
CompanyName : Intel Corporation
FileDescription : hkcmd Module
InternalName : HKCMD
LegalCopyright : Copyright 1999-2004, Intel Corporation
OriginalFilename : HKCMD.EXE

#:41 [igfxpers.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 2108
ThreadCreationTime : 06-02-2007 08:11:52
BasePriority : Normal
FileVersion : 3.0.0.4410
ProductVersion : 7.0.0.4410
ProductName : Intel(R) Common User Interface
CompanyName : Intel Corporation
FileDescription : persistence Module
InternalName : PERSISTENCE
LegalCopyright : Copyright 1999-2004, Intel Corporation
OriginalFilename : IGFXPERS.EXE

#:42 [screenprint32.exe]
FilePath : C:\Program Files\ScreenPrint32 v3\
ProcessID : 2132
ThreadCreationTime : 06-02-2007 08:11:52
BasePriority : Normal
FileVersion : 3.50.0515
ProductVersion : 3.50.0515
ProductName : ScreenPrint32 - v3.5
CompanyName : Provtech Limited
FileDescription : Main Executable
InternalName : ScreenPrint32
LegalCopyright : Copyright 1997-2003 Provtech Limited
LegalTrademarks : ScreenPrint32
OriginalFilename : ScreenPrint32.exe
Comments : None

#:43 [mddiskprotect.exe]
FilePath : C:\Program Files\Mediafour\MacDrive\
ProcessID : 2144
ThreadCreationTime : 06-02-2007 08:11:53
BasePriority : Normal
FileVersion : 6.0.6.1
ProductVersion : 6.0.6
ProductName : Mediafour MacDrive
CompanyName : Mediafour Corporation
FileDescription : Mediafour MacDrive Disk Protect
InternalName : MDDiskProtect.exe
LegalCopyright : Copyright © 1996-2005 Mediafour Corporation
OriginalFilename : MDDiskProtect.exe

#:44 [macvntfy.exe]
FilePath : C:\Program Files\Fichiers communs\Mediafour\
ProcessID : 2180
ThreadCreationTime : 06-02-2007 08:11:53
BasePriority : Normal
FileVersion : 5.0.10.0
ProductVersion : 5.0.10
ProductName : Mediafour Mac Volume Notifications
CompanyName : Mediafour Corporation
FileDescription : Mediafour Mac Volume Notifications
InternalName : MACVNTFY.EXE
LegalCopyright : Copyright © 1996-2002 Mediafour Corporation
OriginalFilename : MACVNTFY.EXE

#:45 [igfxsrvc.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 2272
ThreadCreationTime : 06-02-2007 08:11:53
BasePriority : Normal
FileVersion : 3.0.0.4410
ProductVersion : 7.0.0.4410
ProductName : Intel(R) Common User Interface
CompanyName : Intel Corporation
FileDescription : igfxsrvc Module
InternalName : IGFXSRVC
LegalCopyright : Copyright 1999-2004, Intel Corporation
OriginalFilename : IGFXSRVC.EXE

#:46 [erase-it.exe]
FilePath : C:\Program Files\CHRYOPROD\Erase-IT\
ProcessID : 2332
ThreadCreationTime : 06-02-2007 08:11:55
BasePriority : Normal
FileVersion : 0.03.0007
ProductVersion : 0.03.0007
ProductName : ERASE-IT
CompanyName : CHRYOPROD
InternalName : Erase-IT
LegalCopyright : CHRYOPROD
OriginalFilename : Erase-IT.exe

#:47 [wmiprvse.exe]
FilePath : C:\WINDOWS\system32\wbem\
ProcessID : 2344
ThreadCreationTime : 06-02-2007 08:11:55
BasePriority : Normal
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : WMI
InternalName : Wmiprvse.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : Wmiprvse.exe

#:48 [flockbox.exe]
FilePath : C:\Program Files\Folder Lockbox\
ProcessID : 2392
ThreadCreationTime : 06-02-2007 08:11:55
BasePriority : Normal
FileVersion : 1.0.7.41
ProductVersion : 1.0
CompanyName : FSPro Labs
FileDescription : Folder Lockbox
LegalCopyright : Copyright © 2006 FSPro Labs

#:49 [a2guard.exe]
FilePath : C:\Program Files\a-squared Anti-Malware\
ProcessID : 2440
ThreadCreationTime : 06-02-2007 08:11:56
BasePriority : Normal
FileVersion : 2.1.0.49
ProductVersion : 2.1.0.0
ProductName : a-squared Anti-Malware
CompanyName : Emsi Software GmbH
FileDescription : a-squared Guard
InternalName : a2guard
LegalCopyright : CopyRight 2005 by Emsi Software GmbH
OriginalFilename : a2guard.exe

#:50 [avgas.exe]
FilePath : C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\
ProcessID : 2728
ThreadCreationTime : 06-02-2007 08:12:05
BasePriority : Normal
FileVersion : 7, 5, 0, 50
ProductVersion : 7, 5, 0, 50
ProductName : AVG Anti-Spyware
CompanyName : Anti-Malware Development a.s.
FileDescription : AVG Anti-Spyware
InternalName : AVG Anti-Spyware
LegalCopyright : Copyright © 2006 Anti-Malware Development a.s.
OriginalFilename : avgas.exe

#:51 [msmsgs.exe]
FilePath : C:\Program Files\Messenger\
ProcessID : 2736
ThreadCreationTime : 06-02-2007 08:12:05
BasePriority : Normal
FileVersion : 4.7.3001
ProductVersion : Version 4.7.3001
ProductName : Messenger
CompanyName : Microsoft Corporation
FileDescription : Windows Messenger
InternalName : msmsgs
LegalCopyright : Copyright (c) Microsoft Corporation 2004
LegalTrademarks : Microsoft(R) is a registered trademark of Microsoft Corporation in the U.S. and/or other countries.
OriginalFilename : msmsgs.exe

#:52 [atnotes.exe]
FilePath : C:\Program Files\ATnotes\
ProcessID : 2748
ThreadCreationTime : 06-02-2007 08:12:10
BasePriority : Normal
FileVersion : 9.5
ProductVersion : 9.5
ProductName : ATnotes
CompanyName : Thomas Ascher
FileDescription : ATnotes
InternalName : ATnotes.exe
LegalCopyright : Copyright © 1996-2005, Thomas Ascher
OriginalFilename : ATnotes.exe

#:53 [ashmaisv.exe]
FilePath : C:\Program Files\Alwil Software\Avast4\
ProcessID : 2912
ThreadCreationTime : 06-02-2007 08:12:14
BasePriority : Normal


#:54 [ashwebsv.exe]
FilePath : C:\Program Files\Alwil Software\Avast4\
ProcessID : 3088
ThreadCreationTime : 06-02-2007 08:12:16
BasePriority : Normal


#:55 [ipodservice.exe]
FilePath : C:\Program Files\iPod\bin\
ProcessID : 3120
ThreadCreationTime : 06-02-2007 08:12:16
BasePriority : Normal
FileVersion : 6.0.1.3
ProductVersion : 6.0.1.3
ProductName : iTunes
CompanyName : Apple Computer, Inc.
FileDescription : iPodService Module
InternalName : iPodService
LegalCopyright : © 2003-2005 Apple Computer, Inc. All Rights Reserved.
OriginalFilename : iPodService.exe

#:56 [hpzipm12.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 3212
ThreadCreationTime : 06-02-2007 08:12:16
BasePriority : Normal
FileVersion : 8, 0, 0, 0
ProductVersion : 8, 0, 0, 0
ProductName : HP PML
CompanyName : HP
FileDescription : PML Driver
InternalName : PmlDrv
LegalCopyright : Copyright © 1998, 1999 Hewlett-Packard Company
OriginalFilename : PmlDrv.exe

#:57 [alg.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 3232
ThreadCreationTime : 06-02-2007 08:12:17
BasePriority : Normal
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Application Layer Gateway Service
InternalName : ALG.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : ALG.exe

#:58 [wuauclt.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 4044
ThreadCreationTime : 06-02-2007 08:12:52
BasePriority : Normal
FileVersion : 5.8.0.2469 built by: lab01_n(wmbla)
ProductVersion : 5.8.0.2469
ProductName : Système d'exploitation Microsoft® Windows®
CompanyName : Microsoft Corporation
FileDescription : Mises à jour automatiques
InternalName : wuauclt.exe
LegalCopyright : © Microsoft Corporation. Tous droits réservés.
OriginalFilename : wuauclt.exe

#:59 [svchost.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 228
ThreadCreationTime : 06-02-2007 08:14:07
BasePriority : Normal
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : svchost.exe

#:60 [outlook.exe]
FilePath : C:\Program Files\Microsoft Office\Office10\
ProcessID : 2492
ThreadCreationTime : 06-02-2007 08:14:13
BasePriority : Normal


#:61 [winword.exe]
FilePath : C:\Program Files\Microsoft Office\Office10\
ProcessID : 3712
ThreadCreationTime : 06-02-2007 08:14:48
BasePriority : Normal


#:62 [jucheck.exe]
FilePath : C:\Program Files\Java\jre1.5.0_09\bin\
ProcessID : 3440
ThreadCreationTime : 06-02-2007 08:16:44
BasePriority : Normal
FileVersion : 5.0.90.3
ProductVersion : 5.0.90.3
ProductName : Java(TM) 2 Platform Standard Edition 5.0 Update 9
CompanyName : Sun Microsystems, Inc.
FileDescription : Java(TM) Update Checker
InternalName : Java(TM) Update Checker
LegalCopyright : Copyright © 2004
OriginalFilename : jucheck.exe

#:63 [iexplore.exe]
FilePath : C:\Program Files\internet explorer\
ProcessID : 2644
ThreadCreationTime : 06-02-2007 08:43:08
BasePriority : Normal
FileVersion : 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 6.00.2900.2180
ProductName : Système d'exploitation Microsoft® Windows®
CompanyName : Microsoft Corporation
FileDescription : Internet Explorer
InternalName : iexplore
LegalCopyright : © Microsoft Corporation. Tous droits réservés.
OriginalFilename : IEXPLORE.EXE

#:64 [ad-aware.exe]
FilePath : C:\PROGRA~1\Lavasoft\AD-AWA~1\
ProcessID : 3832
ThreadCreationTime : 06-02-2007 11:43:40
BasePriority : Normal
FileVersion : 6.2.0.236
ProductVersion : SE 106
ProductName : Lavasoft Ad-Aware SE
CompanyName : Lavasoft Sweden
FileDescription : Ad-Aware SE Core application
InternalName : Ad-Aware.exe
LegalCopyright : Copyright © Lavasoft AB Sweden
OriginalFilename : Ad-Aware.exe
Comments : All Rights Reserved

Memory scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 0


Started registry scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Registry Scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 0


Started deep registry scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Deep registry scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 0


Started Tracking Cookie scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»


Tracking Cookie Object Recognized!
Type : IECache Entry
Data : lilian coquel@247realmedia[1].txt
TAC Rating : 3
Category : Data Miner
Comment : Hits:1
Value : Cookie:lilian coquel@247realmedia.com/
Expires : 01-01-2021 01:00:00
LastSync : Hits:1
UseCount : 0
Hits : 1

Tracking cookie scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 1
Objects found so far: 1



Deep scanning and examining files...
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Disk Scan Result for C:\WINDOWS
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 1

Disk Scan Result for C:\WINDOWS\system32
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 1

Disk Scan Result for C:\DOCUME~1\LILIAN~1\LOCALS~1\Temp\
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 1


Scanning Hosts file......
Hosts file location:"C:\WINDOWS\system32\drivers\etc\hosts".
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Hosts file scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
1 entries scanned.
New critical objects:0
Objects found so far: 1



MRU List Object Recognized!
Location: : C:\Documents and Settings\Lilian Coquel\Application Data\microsoft\office\recent
Description : list of recently opened documents using microsoft office


MRU List Object Recognized!
Location: : C:\Documents and Settings\Lilian Coquel\recent
Description : list of recently opened documents


MRU List Object Recognized!
Location: : software\microsoft\directdraw\mostrecentapplication
Description : most recent application to use microsoft directdraw


MRU List Object Recognized!
Location: : S-1-5-21-2413180982-2557371238-4112324371-1007\software\microsoft\internet explorer
Description : last download directory used in microsoft internet explorer


MRU List Object Recognized!
Location: : S-1-5-21-2413180982-2557371238-4112324371-1007\software\microsoft\internet explorer\typedurls
Description : list of recently entered addresses in microsoft internet explorer


MRU List Object Recognized!
Location: : S-1-5-21-2413180982-2557371238-4112324371-1007\software\microsoft\office\10.0\common\open find\microsoft powerpoint\settings\insert picture\file name mru
Description : list of recent pictured inserted in microsoft powerpoint


MRU List Object Recognized!
Location: : S-1-5-21-2413180982-2557371238-4112324371-1007\software\microsoft\office\10.0\common\open find\microsoft powerpoint\settings\save as\file name mru
Description : list of recent documents saved by microsoft powerpoint


MRU List Object Recognized!
Location: : S-1-5-21-2413180982-2557371238-4112324371-1007\software\microsoft\office\10.0\common\open find\microsoft word\settings\save as\file name mru
Description : list of recent documents saved by microsoft word


MRU List Object Recognized!
Location: : S-1-5-21-2413180982-2557371238-4112324371-1007\software\microsoft\windows\currentversion\explorer\comdlg32\lastvisitedmru
Description : list of recent programs opened


MRU List Object Recognized!
Location: : S-1-5-21-2413180982-2557371238-4112324371-1007\software\microsoft\windows\currentversion\explorer\comdlg32\opensavemru
Description : list of recently saved files, stored according to file extension


MRU List Object Recognized!
Location: : S-1-5-21-2413180982-2557371238-4112324371-1007\software\microsoft\windows\currentversion\explorer\recentdocs
Description : list of recent documents opened


MRU List Object Recognized!
Location: : S-1-5-21-2413180982-2557371238-4112324371-1007\software\realnetworks\realplayer\6.0\preferences
Description : list of recent skins in realplayer


MRU List Object Recognized!
Location: : S-1-5-21-2413180982-2557371238-4112324371-1007\software\realnetworks\realplayer\6.0\preferences
Description : list of recent clips in realplayer


MRU List Object Recognized!
Location: : S-1-5-21-2413180982-2557371238-4112324371-1007\software\microsoft\windows media\wmsdk\general
Description : windows media sdk



Performing conditional scans...
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Conditional scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 15

13:04:56 Scan Complete

Summary Of This Scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
Total scanning time:00:03:42.766
Objects scanned:94410
Objects identified:1
Objects ignored:0
New critical objects:1


et celui de Kaspersky sur :
http://www.project-images.com/rapport%20Kaspersky.html

Ouhlala, on n'est pas sorti de l'auberge, j'étais sur Mac y a 2 ans : tu vois ce que je veux dire ... ;-)
Lilian

euh juste quand j'ai redémarré j'ai lancé HiJackThis.exe et il m'a fait un rapport
puis j'ai lu la fin de ton msg
et là
j'ai quitté HiJackthis
l'ai renommé en abce.exe
et relancé ce rapport

je te le dis au cas ou cela aurait une importance
(...comme tu m'embrouilles avec tout çà, moi je suis perdu, mais alors perdu !)

Rapport chef !
Logfile of HijackThis v1.99.1
Scan saved at 16:01:31, on 06/02/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\wltrysvc.exe
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Canon\DIAS\CnxDIAS.exe
C:\Program Files\Canon\nsc\wnappsrv.exe
C:\Program Files\Canon\nsc\wnwebsrv.exe
C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\WINDOWS\MXOaldr.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb11.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\system32\hphmon06.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\ScreenPrint32 v3\ScreenPrint32.exe
C:\Program Files\Mediafour\MacDrive\MDDiskProtect.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Fichiers communs\Mediafour\MACVNTFY.EXE
C:\Program Files\CHRYOPROD\Erase-IT\Erase-IT.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Folder Lockbox\flockbox.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\ATnotes\ATnotes.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\Java\jre1.5.0_09\bin\jucheck.exe
C:\Documents and Settings\Lilian Coquel\Bureau\hijack\abce.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.dell.com/fr-fr
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.dell.com/fr-fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - (no file)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {6E4B23EE-D412-48BD-B133-60574061E429} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: (no name) - {7DA39570-5FD2-4f18-94B4-20730CB3F727} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: (no name) - {BEF8C731-5153-43CC-A8A4-DCF73BC36BD6} - (no file)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [Dell Wireless Manager UI] C:\WINDOWS\system32\WLTRAY
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [PRONoMgrWired] C:\Program Files\Intel\PROSetWired\NCS\PROSet\PRONoMgr.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [MXO Auto Loader] C:\WINDOWS\MXOaldr.exe
O4 - HKLM\..\Run: [EPSON Stylus C62 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE /P23 "EPSON Stylus C62 Series" /O6 "USB001" /M "Stylus C62"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb11.exe
O4 - HKLM\..\Run: [HPHUPD06] C:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [ScreenPrint32] C:\Program Files\ScreenPrint32 v3\ScreenPrint32.exe -startup
O4 - HKLM\..\Run: [MDDiskProtect.exe] C:\Program Files\Mediafour\MacDrive\MDDiskProtect.exe
O4 - HKLM\..\Run: [MediafourGettingStartedWithMacDrive6] "C:\Program Files\Mediafour\MacDrive\MacDrive.exe" /runonce
O4 - HKLM\..\Run: [Mediafour Mac Volume Notifications] "C:\Program Files\Fichiers communs\Mediafour\MACVNTFY.EXE" /auto
O4 - HKLM\..\Run: [Shutdown] C:\Program Files\CHRYOPROD\Erase-IT\Erase-IT.exe
O4 - HKLM\..\Run: [flockbox] C:\Program Files\Folder Lockbox\flockbox.exe /a
O4 - HKLM\..\Run: [a-squared] "C:\Program Files\a-squared Anti-Malware\a2guard.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ATnotes.exe] C:\Program Files\ATnotes\ATnotes.exe
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\digital imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/default/kavwebscan_unicode.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = WORKGROUP
O17 - HKLM\Software\..\Telephony: DomainName = WORKGROUP
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = WORKGROUP
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: MacDrive-iTunes compatibility - C:\Program Files\Fichiers communs\Mediafour\MacDriveiTunesPatch.dll (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: winccf32 - winccf32.dll (file missing)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Canon Driver Information Assist Service - CANON INC. - C:\Program Files\Canon\DIAS\CnxDIAS.exe
O23 - Service: Canon NetSpot Console (Canon NetSpot Console Server) - CANON INC. - C:\Program Files\Canon\nsc\wnappsrv.exe
O23 - Service: Canon NetSpot Console Web Service (Canon NetSpot Web Service) - CANON INC. - C:\Program Files\Canon\nsc\wnwebsrv.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\wltrysvc.exe

EH ! çà fait longtemps que je ne te l'ai pas dit mais ...

Merci encore hein !!!!!

Lilian

Attends, attends un peu : ne t'en vas pas comme çà !
Tu es en train de me dire que mon PC est lavé de toute cette crasse nue-méri-Q-ue !
IL EST PROPRE : c'est çà !?
NE ME FAIS PAS DE FAUSSE JOIE !

...

eh bin écoute mon gars
(je devrais dire)
grand maître
(euh !)
Maître Jedi

JE TE REMERCIE VRAIMENT POUR CE "DEPANNAGE DE HAUT VOL" !

Si je peux faire quelque chose pour toi ...

Sincères salutations !

Lilian