Win32.Small.gen2 [trj]
nad 43
-
Utilisateur anonyme -
Utilisateur anonyme -
voilà, j'ai fait tout ce qui etait demandé sur ce lien.voici le rapport de bitdefender:
BitDefender Online Scanner
Scan report generated at: Thu, Feb 15, 2007 - 01:22:45
Scan path: A:\;C:\;D:\;E:\;F:\;
Statistics
Time
01:08:26
Files
478887
Folders
5993
Boot Sectors
3
Archives
8462
Packed Files
63612
Results
Identified Viruses
11
Infected Files
47
Suspect Files
0
Warnings
0
Disinfected
0
Deleted Files
47
Engines Info
Virus Definitions
421155
Engine build
AVCORE v1.0 (build 2371) (i386) (Dec 13 2006 11:16:42)
Scan plugins
14
Archive plugins
38
Unpack plugins
6
E-mail plugins
6
System plugins
1
Scan Settings
First Action
Disinfect
Second Action
Delete
Heuristics
Yes
Enable Warnings
Yes
Scanned Extensions
*;
Exclude Extensions
Scan Emails
Yes
Scan Archives
Yes
Scan Packed
Yes
Scan Files
Yes
Scan Boot
Yes
Scanned File
Status
C:\Program Files\FastStone Image Viewer\uninst.exe
Infected with: Trojan.Isbar.298
C:\Program Files\FastStone Image Viewer\uninst.exe
Disinfection failed
C:\Program Files\FastStone Image Viewer\uninst.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP155\A0335350.exe
Infected with: GenPack:Trojan.Proxy.Small.Y
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP155\A0335350.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP155\A0335350.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP155\A0335354.exe
Infected with: Trojan.Spy.BZub.CW
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP155\A0335354.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP155\A0335354.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP155\A0335364.exe
Infected with: MemScan:Trojan.DNSChanger.V
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP155\A0335364.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP155\A0335364.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP155\A0335493.dll
Infected with: DeepScan:Generic.Zlob.CDAAE811
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP155\A0335493.dll
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP155\A0335493.dll
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP158\A0335984.exe
Infected with: MemScan:Trojan.DNSChanger.V
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP158\A0335984.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP158\A0335984.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP158\A0335988.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP158\A0335988.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP158\A0335988.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP158\A0336017.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP158\A0336017.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP158\A0336017.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP159\A0336051.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP159\A0336051.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP159\A0336051.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP160\A0336090.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP160\A0336090.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP160\A0336090.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP160\A0336106.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP160\A0336106.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP160\A0336106.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP160\A0336140.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP160\A0336140.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP160\A0336140.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP161\A0336164.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP161\A0336164.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP161\A0336164.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP161\A0336187.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP161\A0336187.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP161\A0336187.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP161\A0336244.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP161\A0336244.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP161\A0336244.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP161\A0336266.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP161\A0336266.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP161\A0336266.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP161\A0336288.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP161\A0336288.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP161\A0336288.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0336324.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0336324.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0336324.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0337325.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0337325.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0337325.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0337362.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0337362.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0337362.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0338362.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0338362.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0338362.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0339363.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0339363.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0339363.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0340362.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0340362.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0340362.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0341363.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0341363.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0341363.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0342363.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0342363.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0342363.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0342387.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0342387.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0342387.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0342416.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0342416.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0342416.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0343416.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0343416.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0343416.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP163\A0343551.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP163\A0343551.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP163\A0343551.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP164\A0343600.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP164\A0343600.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP164\A0343600.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP164\A0343619.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP164\A0343619.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP164\A0343619.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP164\A0344618.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP164\A0344618.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP164\A0344618.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP164\A0345620.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP164\A0345620.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP164\A0345620.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP164\A0346619.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP164\A0346619.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP164\A0346619.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP164\A0347618.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP164\A0347618.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP164\A0347618.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP164\A0347630.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP164\A0347630.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP164\A0347630.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP168\A0349670.dll
Infected with: Trojan.Proxy.Small.AF
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP168\A0349670.dll
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP168\A0349670.dll
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP168\A0349671.exe
Infected with: Trojan.Spy.Agent.PP
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP168\A0349671.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP168\A0349671.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP168\A0349672.exe
Infected with: Trojan.Spy.BZub.DD
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP168\A0349672.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP168\A0349672.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP168\A0349673.exe
Infected with: MemScan:Trojan.DNSChanger.AE
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP168\A0349673.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP168\A0349673.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP168\A0349674.exe
Infected with: Trojan.Isbar.298
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP168\A0349674.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP168\A0349674.exe
Deleted
C:\WINDOWS\system32\aitgjxjp.exe
Infected with: Trojan.Spy.BZub.O
C:\WINDOWS\system32\aitgjxjp.exe
Disinfection failed
C:\WINDOWS\system32\aitgjxjp.exe
Deleted
C:\WINDOWS\system32\csrjw.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\WINDOWS\system32\csrjw.exe
Disinfection failed
C:\WINDOWS\system32\csrjw.exe
Deleted
C:\WINDOWS\system32\piswuaaa.exe
Infected with: Trojan.Spy.BZub.CW
C:\WINDOWS\system32\piswuaaa.exe
Disinfection failed
C:\WINDOWS\system32\piswuaaa.exe
Deleted
C:\WINDOWS\system32\qsuav.exe
Infected with: MemScan:Trojan.DNSChanger.AE
C:\WINDOWS\system32\qsuav.exe
Disinfection failed
C:\WINDOWS\system32\qsuav.exe
Deleted
C:\WINDOWS\system32\vsaoumfi.exe
Infected with: GenPack:Trojan.Proxy.Small.Y
C:\WINDOWS\system32\vsaoumfi.exe
Disinfection failed
C:\WINDOWS\system32\vsaoumfi.exe
Deleted
C:\WINDOWS\system32\{7B9A9D7D-89DC-48BD-90A6-4B128BBC60F0}.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\WINDOWS\system32\{7B9A9D7D-89DC-48BD-90A6-4B128BBC60F0}.exe
Disinfection failed
C:\WINDOWS\system32\{7B9A9D7D-89DC-48BD-90A6-4B128BBC60F0}.exe
Deleted
et voici celui de AVG anti spyware:
---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------
+ Créé à: 00:10:51 15/02/2007
+ Résultat de l'analyse:
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP155\A0335492.dll -> Adware.SpyMarshal : Ignoré.
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP155\A0335493.dll -> Adware.SpyMarshal : Ignoré.
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP155\A0335494.dll -> Adware.SpyMarshal : Ignoré.
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP155\A0335495.dll -> Adware.SpyMarshal : Ignoré.
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP155\A0335496.exe -> Adware.SpyMarshal : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\BrowserSearch -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\BrowserSearch\BrowserSearch.xml -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\BrowserSearch\BrowserSearch.xml.backup -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\ErrorSearch -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\ErrorSearch\ErrorSearchOptions.xml -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\ErrorSearch\ErrorSearchOptions.xml.backup -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\Layouts -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\Layouts\PreferencesLayout.xml -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\Layouts\PreferencesLayout.xml.backup -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\Layouts\ToolbarLayout.xml -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\Layouts\ToolbarLayout.xml.backup -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\Manager -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\Manager\ManagerOptions.xml -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\Manager\ManagerOptions.xml.backup -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\PopupBlocker -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\PopupBlocker\PopupBlockerOptions.xml -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\PopupBlocker\PopupBlockerOptions.xml.backup -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\Recipes -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\Recipes\RecipesOptions.xml -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\Recipes\RecipesOptions.xml.backup -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\Reference -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\Reference\ReferenceOptions.xml -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\Reference\ReferenceOptions.xml.backup -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\SearchMatch -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\SearchMatch\SearchMatchOptions.xml -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\SearchMatch\SearchMatchOptions.xml.backup -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\Toolbar -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\ToolbarLogo -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\ToolbarLogo\ToolbarLogoOptions.xml -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\ToolbarLogo\ToolbarLogoOptions.xml.backup -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\ToolbarSearch -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\ToolbarSearch\ToolbarSearchOptions.xml -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\ToolbarSearch\ToolbarSearchOptions.xml.backup -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\Toolbar\TBProductsOptions.xml -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\Toolbar\TBProductsOptions.xml.backup -> Adware.Starware : Ignoré.
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\MS_update_0612_KB74062.exe -> Downloader.Murlo.ek : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP155\A0335363.exe -> Downloader.Murlo.ek : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP131\A0331209.exe -> Downloader.Zlob : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP152\A0334820.exe -> Downloader.Zlob : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP155\A0335352.exe -> Logger.Agent.ir : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\system32\dhmwecid.exe -> Logger.Agent.ir : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP155\A0335353.dll -> Logger.BZub.hx : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP156\A0335817.dll -> Logger.BZub.hx : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP158\A0336000.dll -> Logger.BZub.hx : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP168\A0349649.dll -> Logger.BZub.hx : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\system32\ipv6mons.dl_ -> Logger.BZub.hx : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\system32\mxmsdnld.exe -> Logger.BZub.hx : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Downloaded Program Files\imloader.exe -> Not-A-Virus.Downloader.Win32.ImLoader.b : Ignoré.
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP155\A0335349.dll -> Proxy.Small.ct : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\system32\ert.dll -> Proxy.Small.ct : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\Nadege\Cookies\nadege@www.smartadserver[2].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\Nadege\Cookies\nadege@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
C:\WINDOWS\system32\zcjvx.exe -> Trojan.DNSChanger.hd : Nettoyé et sauvegardé (mise en quarantaine).
Fin du rapport
voilà tout ce que je peux te dire...merçi de ton aide.
BitDefender Online Scanner
Scan report generated at: Thu, Feb 15, 2007 - 01:22:45
Scan path: A:\;C:\;D:\;E:\;F:\;
Statistics
Time
01:08:26
Files
478887
Folders
5993
Boot Sectors
3
Archives
8462
Packed Files
63612
Results
Identified Viruses
11
Infected Files
47
Suspect Files
0
Warnings
0
Disinfected
0
Deleted Files
47
Engines Info
Virus Definitions
421155
Engine build
AVCORE v1.0 (build 2371) (i386) (Dec 13 2006 11:16:42)
Scan plugins
14
Archive plugins
38
Unpack plugins
6
E-mail plugins
6
System plugins
1
Scan Settings
First Action
Disinfect
Second Action
Delete
Heuristics
Yes
Enable Warnings
Yes
Scanned Extensions
*;
Exclude Extensions
Scan Emails
Yes
Scan Archives
Yes
Scan Packed
Yes
Scan Files
Yes
Scan Boot
Yes
Scanned File
Status
C:\Program Files\FastStone Image Viewer\uninst.exe
Infected with: Trojan.Isbar.298
C:\Program Files\FastStone Image Viewer\uninst.exe
Disinfection failed
C:\Program Files\FastStone Image Viewer\uninst.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP155\A0335350.exe
Infected with: GenPack:Trojan.Proxy.Small.Y
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP155\A0335350.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP155\A0335350.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP155\A0335354.exe
Infected with: Trojan.Spy.BZub.CW
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP155\A0335354.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP155\A0335354.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP155\A0335364.exe
Infected with: MemScan:Trojan.DNSChanger.V
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP155\A0335364.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP155\A0335364.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP155\A0335493.dll
Infected with: DeepScan:Generic.Zlob.CDAAE811
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP155\A0335493.dll
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP155\A0335493.dll
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP158\A0335984.exe
Infected with: MemScan:Trojan.DNSChanger.V
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP158\A0335984.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP158\A0335984.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP158\A0335988.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP158\A0335988.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP158\A0335988.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP158\A0336017.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP158\A0336017.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP158\A0336017.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP159\A0336051.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP159\A0336051.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP159\A0336051.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP160\A0336090.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP160\A0336090.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP160\A0336090.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP160\A0336106.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP160\A0336106.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP160\A0336106.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP160\A0336140.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP160\A0336140.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP160\A0336140.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP161\A0336164.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP161\A0336164.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP161\A0336164.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP161\A0336187.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP161\A0336187.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP161\A0336187.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP161\A0336244.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP161\A0336244.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP161\A0336244.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP161\A0336266.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP161\A0336266.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP161\A0336266.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP161\A0336288.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP161\A0336288.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP161\A0336288.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0336324.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0336324.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0336324.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0337325.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0337325.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0337325.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0337362.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0337362.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0337362.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0338362.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0338362.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0338362.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0339363.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0339363.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0339363.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0340362.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0340362.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0340362.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0341363.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0341363.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0341363.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0342363.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0342363.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0342363.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0342387.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0342387.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0342387.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0342416.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0342416.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0342416.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0343416.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0343416.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP162\A0343416.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP163\A0343551.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP163\A0343551.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP163\A0343551.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP164\A0343600.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP164\A0343600.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP164\A0343600.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP164\A0343619.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP164\A0343619.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP164\A0343619.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP164\A0344618.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP164\A0344618.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP164\A0344618.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP164\A0345620.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP164\A0345620.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP164\A0345620.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP164\A0346619.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP164\A0346619.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP164\A0346619.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP164\A0347618.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP164\A0347618.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP164\A0347618.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP164\A0347630.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP164\A0347630.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP164\A0347630.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP168\A0349670.dll
Infected with: Trojan.Proxy.Small.AF
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP168\A0349670.dll
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP168\A0349670.dll
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP168\A0349671.exe
Infected with: Trojan.Spy.Agent.PP
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP168\A0349671.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP168\A0349671.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP168\A0349672.exe
Infected with: Trojan.Spy.BZub.DD
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP168\A0349672.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP168\A0349672.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP168\A0349673.exe
Infected with: MemScan:Trojan.DNSChanger.AE
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP168\A0349673.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP168\A0349673.exe
Deleted
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP168\A0349674.exe
Infected with: Trojan.Isbar.298
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP168\A0349674.exe
Disinfection failed
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP168\A0349674.exe
Deleted
C:\WINDOWS\system32\aitgjxjp.exe
Infected with: Trojan.Spy.BZub.O
C:\WINDOWS\system32\aitgjxjp.exe
Disinfection failed
C:\WINDOWS\system32\aitgjxjp.exe
Deleted
C:\WINDOWS\system32\csrjw.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\WINDOWS\system32\csrjw.exe
Disinfection failed
C:\WINDOWS\system32\csrjw.exe
Deleted
C:\WINDOWS\system32\piswuaaa.exe
Infected with: Trojan.Spy.BZub.CW
C:\WINDOWS\system32\piswuaaa.exe
Disinfection failed
C:\WINDOWS\system32\piswuaaa.exe
Deleted
C:\WINDOWS\system32\qsuav.exe
Infected with: MemScan:Trojan.DNSChanger.AE
C:\WINDOWS\system32\qsuav.exe
Disinfection failed
C:\WINDOWS\system32\qsuav.exe
Deleted
C:\WINDOWS\system32\vsaoumfi.exe
Infected with: GenPack:Trojan.Proxy.Small.Y
C:\WINDOWS\system32\vsaoumfi.exe
Disinfection failed
C:\WINDOWS\system32\vsaoumfi.exe
Deleted
C:\WINDOWS\system32\{7B9A9D7D-89DC-48BD-90A6-4B128BBC60F0}.exe
Infected with: MemScan:Trojan.Rootkit.Qwakey.A
C:\WINDOWS\system32\{7B9A9D7D-89DC-48BD-90A6-4B128BBC60F0}.exe
Disinfection failed
C:\WINDOWS\system32\{7B9A9D7D-89DC-48BD-90A6-4B128BBC60F0}.exe
Deleted
et voici celui de AVG anti spyware:
---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------
+ Créé à: 00:10:51 15/02/2007
+ Résultat de l'analyse:
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP155\A0335492.dll -> Adware.SpyMarshal : Ignoré.
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP155\A0335493.dll -> Adware.SpyMarshal : Ignoré.
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP155\A0335494.dll -> Adware.SpyMarshal : Ignoré.
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP155\A0335495.dll -> Adware.SpyMarshal : Ignoré.
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP155\A0335496.exe -> Adware.SpyMarshal : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\BrowserSearch -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\BrowserSearch\BrowserSearch.xml -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\BrowserSearch\BrowserSearch.xml.backup -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\ErrorSearch -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\ErrorSearch\ErrorSearchOptions.xml -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\ErrorSearch\ErrorSearchOptions.xml.backup -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\Layouts -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\Layouts\PreferencesLayout.xml -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\Layouts\PreferencesLayout.xml.backup -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\Layouts\ToolbarLayout.xml -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\Layouts\ToolbarLayout.xml.backup -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\Manager -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\Manager\ManagerOptions.xml -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\Manager\ManagerOptions.xml.backup -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\PopupBlocker -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\PopupBlocker\PopupBlockerOptions.xml -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\PopupBlocker\PopupBlockerOptions.xml.backup -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\Recipes -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\Recipes\RecipesOptions.xml -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\Recipes\RecipesOptions.xml.backup -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\Reference -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\Reference\ReferenceOptions.xml -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\Reference\ReferenceOptions.xml.backup -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\SearchMatch -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\SearchMatch\SearchMatchOptions.xml -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\SearchMatch\SearchMatchOptions.xml.backup -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\Toolbar -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\ToolbarLogo -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\ToolbarLogo\ToolbarLogoOptions.xml -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\ToolbarLogo\ToolbarLogoOptions.xml.backup -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\ToolbarSearch -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\ToolbarSearch\ToolbarSearchOptions.xml -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\ToolbarSearch\ToolbarSearchOptions.xml.backup -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\Toolbar\TBProductsOptions.xml -> Adware.Starware : Ignoré.
C:\Documents and Settings\Eric.CHAZOT\Application Data\Starware\Toolbar\TBProductsOptions.xml.backup -> Adware.Starware : Ignoré.
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\MS_update_0612_KB74062.exe -> Downloader.Murlo.ek : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP155\A0335363.exe -> Downloader.Murlo.ek : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP131\A0331209.exe -> Downloader.Zlob : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP152\A0334820.exe -> Downloader.Zlob : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP155\A0335352.exe -> Logger.Agent.ir : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\system32\dhmwecid.exe -> Logger.Agent.ir : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP155\A0335353.dll -> Logger.BZub.hx : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP156\A0335817.dll -> Logger.BZub.hx : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP158\A0336000.dll -> Logger.BZub.hx : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP168\A0349649.dll -> Logger.BZub.hx : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\system32\ipv6mons.dl_ -> Logger.BZub.hx : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\system32\mxmsdnld.exe -> Logger.BZub.hx : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\Downloaded Program Files\imloader.exe -> Not-A-Virus.Downloader.Win32.ImLoader.b : Ignoré.
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP155\A0335349.dll -> Proxy.Small.ct : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\system32\ert.dll -> Proxy.Small.ct : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\Nadege\Cookies\nadege@www.smartadserver[2].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\Nadege\Cookies\nadege@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
C:\WINDOWS\system32\zcjvx.exe -> Trojan.DNSChanger.hd : Nettoyé et sauvegardé (mise en quarantaine).
Fin du rapport
voilà tout ce que je peux te dire...merçi de ton aide.
A voir également:
- Win32.Small.gen2 [trj]
- Puabundler win32 rostpay ✓ - Forum Antivirus
- Puadimanager win32/offercore ✓ - Forum Virus
- Trojan win32 - Forum Virus
- PUADlManager:Win32/OfferCore ✓ - Forum Virus
- Win32 pup gen ✓ - Forum Linux / Unix
4 réponses
Bonjour
Merci de continuer sur le post initial qui est ici win32 small gen2 trj si tu peux recopies les deux rapports sur le premier post ou tu as demandé de l'aide.
Merci de continuer sur le post initial qui est ici win32 small gen2 trj si tu peux recopies les deux rapports sur le premier post ou tu as demandé de l'aide.
recoucou!!
je reessaye de t'envoyer le rapport hijackthis, peut etre que ça voudra bien marcher aujourd'hui...
Logfile of HijackThis v1.99.1
Scan saved at 08:37:39, on 15/02/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
C:\WINDOWS\System32\nvsvc32.exe
c:\fotowin\RTETPISv.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Logitech\Video\LogiTray.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Aide mémoire\TrayIcon.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\WINDOWS\System32\HPZipm12.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Nadege\Bureau\hijackthis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://portail.free.fr/
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://portail.free.fr/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://as.starware.com/dp/search?product=ssearch&src_id=354&client_id=689E0F1001C6979801AA406C&version=4.2.0.0&it=1151158396&loc=&qry=&url=http://www.google.com (obfuscated)
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Alice ADSL
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost;127.0.0.1;chazot
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {36645342-9475-2663-166A-466739207346} - C:\WINDOWS\system32\ipv6mote.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Barre d'outils MSN Search Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll
O2 - BHO: (no name) - {F7C7AA47-BCA6-451D-8DBC-C10A8F75C8C7} - (no file)
O3 - Toolbar: Barre d'outils MSN Search - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll
O3 - Toolbar: (no name) - {9839B3B7-3F99-4498-884D-6CFCCD251AB1} - (no file)
O4 - HKLM\..\Run: [AliceSAV] C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [UpdateManager] "c:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_7 -reboot 1
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Startup: Aide mémoire.lnk = ?
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll/search.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1105\fr-fr\msntabres.dll/229?ef0ae8d6565046acaad4cc231c9bb2de
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1105\fr-fr\msntabres.dll/230?ef0ae8d6565046acaad4cc231c9bb2de
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Alice ADSL - {F6DBA347-A2A6-4455-9C32-21978E2D18D4} - https://portail.free.fr/ (file missing) (HKCU)
O14 - IERESET.INF: START_PAGE_URL=https://portail.free.fr/
O16 - DPF: teleir_cert - https://static.ir.dgi.minefi.gouv.fr/secure/connexion/archives/ie4n4/teleir_cert.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {F00F4763-7355-4725-82F7-0DA94A256D46} (IMDownloader Class) - http://www2.incredimail.com/contents/setup/downloader/imloader.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{32FA442D-9F17-4BB6-834B-A3004B0F4580}: NameServer = 85.255.115.36,85.255.112.83
O17 - HKLM\System\CCS\Services\Tcpip\..\{C265F4DA-DAA8-43D0-AC36-5563EB1C75A4}: NameServer = 85.255.115.36,85.255.112.83
O17 - HKLM\System\CCS\Services\Tcpip\..\{DFF7CDC4-CF3B-40F3-AE68-B5C333F20F82}: NameServer = 85.255.115.36,85.255.112.83
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.115.36 85.255.112.83
O17 - HKLM\System\CS1\Services\Tcpip\..\{32FA442D-9F17-4BB6-834B-A3004B0F4580}: NameServer = 85.255.115.36,85.255.112.83
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 85.255.115.36 85.255.112.83
O17 - HKLM\System\CS2\Services\Tcpip\..\{32FA442D-9F17-4BB6-834B-A3004B0F4580}: NameServer = 85.255.115.36,85.255.112.83
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.115.36 85.255.112.83
O18 - Protocol: bw+0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: offline-8876480 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Kerio Personal Firewall 4 (KPF4) - Kerio Technologies - C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: RTE : Partage TAPI (RTETAPIService) - RTE Software - c:\fotowin\RTETPISv.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
je reessaye de t'envoyer le rapport hijackthis, peut etre que ça voudra bien marcher aujourd'hui...
Logfile of HijackThis v1.99.1
Scan saved at 08:37:39, on 15/02/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
C:\WINDOWS\System32\nvsvc32.exe
c:\fotowin\RTETPISv.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Logitech\Video\LogiTray.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Aide mémoire\TrayIcon.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\WINDOWS\System32\HPZipm12.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Nadege\Bureau\hijackthis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://portail.free.fr/
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://portail.free.fr/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://as.starware.com/dp/search?product=ssearch&src_id=354&client_id=689E0F1001C6979801AA406C&version=4.2.0.0&it=1151158396&loc=&qry=&url=http://www.google.com (obfuscated)
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Alice ADSL
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost;127.0.0.1;chazot
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {36645342-9475-2663-166A-466739207346} - C:\WINDOWS\system32\ipv6mote.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Barre d'outils MSN Search Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll
O2 - BHO: (no name) - {F7C7AA47-BCA6-451D-8DBC-C10A8F75C8C7} - (no file)
O3 - Toolbar: Barre d'outils MSN Search - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll
O3 - Toolbar: (no name) - {9839B3B7-3F99-4498-884D-6CFCCD251AB1} - (no file)
O4 - HKLM\..\Run: [AliceSAV] C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [UpdateManager] "c:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_7 -reboot 1
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Startup: Aide mémoire.lnk = ?
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll/search.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1105\fr-fr\msntabres.dll/229?ef0ae8d6565046acaad4cc231c9bb2de
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1105\fr-fr\msntabres.dll/230?ef0ae8d6565046acaad4cc231c9bb2de
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Alice ADSL - {F6DBA347-A2A6-4455-9C32-21978E2D18D4} - https://portail.free.fr/ (file missing) (HKCU)
O14 - IERESET.INF: START_PAGE_URL=https://portail.free.fr/
O16 - DPF: teleir_cert - https://static.ir.dgi.minefi.gouv.fr/secure/connexion/archives/ie4n4/teleir_cert.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {F00F4763-7355-4725-82F7-0DA94A256D46} (IMDownloader Class) - http://www2.incredimail.com/contents/setup/downloader/imloader.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{32FA442D-9F17-4BB6-834B-A3004B0F4580}: NameServer = 85.255.115.36,85.255.112.83
O17 - HKLM\System\CCS\Services\Tcpip\..\{C265F4DA-DAA8-43D0-AC36-5563EB1C75A4}: NameServer = 85.255.115.36,85.255.112.83
O17 - HKLM\System\CCS\Services\Tcpip\..\{DFF7CDC4-CF3B-40F3-AE68-B5C333F20F82}: NameServer = 85.255.115.36,85.255.112.83
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.115.36 85.255.112.83
O17 - HKLM\System\CS1\Services\Tcpip\..\{32FA442D-9F17-4BB6-834B-A3004B0F4580}: NameServer = 85.255.115.36,85.255.112.83
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 85.255.115.36 85.255.112.83
O17 - HKLM\System\CS2\Services\Tcpip\..\{32FA442D-9F17-4BB6-834B-A3004B0F4580}: NameServer = 85.255.115.36,85.255.112.83
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.115.36 85.255.112.83
O18 - Protocol: bw+0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: offline-8876480 - {5C4AF1DE-F646-41D3-B061-0DB53D4C4B6B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Kerio Personal Firewall 4 (KPF4) - Kerio Technologies - C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: RTE : Partage TAPI (RTETAPIService) - RTE Software - c:\fotowin\RTETPISv.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe